last executing test programs: 20.120766246s ago: executing program 0 (id=1682): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001440)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}], 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xc, 0xffff, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000500), &(0x7f0000000240)=""/101}, 0x20) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$kcm(r4, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5}, 0x48) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a80)={'dummy0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x100, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x170, 0x15, 0x400, 0x70bd25, 0x25dfdbfb, {0x10, 0xbd}, [@INET_DIAG_REQ_BYTECODE={0x16, 0x1, "534bc78100048f4c00438157a5351bb55ec6"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "fe31e5baa74424f7bf5afafd9be513f206521ce28ecbe2c90a40640480a926d27a"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "daf698dcd69eb678af7749765211cdfcff3425007321edbcd3460f4c9e1282406dde3b1a9f42a765619244ddb74c3973ace3e69853d3b5223e61d9f8d0207076564f03c9f8b830d699083aa27d8811b7bcf881bbbb3ed8bef12cc3856a47ef381a9abe21fcb6e8d69e417be962f3d8"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "ceda329c6213b5189d3b0b8277647a263f6a547b9e0ff9b31951c06074602731d5524398f1e4a285594199a3f6347d06f7419595ec62b3c7a035d89c19f2ba90228cd4fc0fd818096d7804e71e9eaff6515e5f477cde39f652df2c4ed833357570f7d24cf3163e11ec950d64820c86c64ffd0c4dd19faed2aec686dc6ef23e01b725310db8ce60072bd8a570c01426eac030882543c4d5c5ad6eb70416e045a87e4db9"}]}, 0x170}, 0x1, 0x0, 0x0, 0x4010}, 0x2004840) 19.867492969s ago: executing program 0 (id=1685): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xabf1315fb57d8e8a) syz_emit_ethernet(0xda, &(0x7f0000000a00)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x50, 0x0, [{0x0, 0x12, "616cefc500e10d02ee10aebbc95472d9"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x10, "0000000010a3e1ed000000000000"}]}, @timestamp={0x44, 0x4}]}}, "a815a23da43974ff"}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110ae000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19.768339282s ago: executing program 0 (id=1690): syz_emit_ethernet(0x5f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x1, 0x1}}, {@x25={0x805, {0x1, 0x7, 0xf3, "6f08d8c5435bb8a3b91aec3173b92e43cb042545235a1b0ec67c0c81b2574e156ba20c74ab01f8a72a9091c237b020d1d191d34da16f86e29a8fd16b8d1edf65dfd3a1c60f25"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xbea, 0x48b, 0xa18, 0x4da]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'gretap0\x00', 0x8000}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)={0x10}, 0x10}, {&(0x7f0000000bc0)={0x10, 0x3ec}, 0x10}], 0x2}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, r1, 0x2, 0x0, 0x4000, @prog_id}, 0x20) socketpair(0x18, 0x2, 0x3f800, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="8000000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001680100001800c000300000000000200000048000180100006000f00000040006b000400000014000a000300000000000000060000000000000014000a00ffff00000000000010000000000000000c000700010001000c000000040014"], 0x80}}, 0x0) 19.647644944s ago: executing program 0 (id=1693): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x80, 0x10, 0x4, 0x6, {{0x27, 0x4, 0x1, 0x3, 0x9c, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x58, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}, {@empty, 0xd}, {@broadcast, 0x8000}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x8}]}, @ssrr={0x89, 0x1b, 0x9a, [@loopback, @local, @empty, @empty, @local, @empty]}, @noop, @end, @timestamp_addr={0x44, 0x3c, 0xf1, 0x1, 0x4, [{@local, 0x80000000}, {@local, 0xe}, {@multicast1, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x15}}, {@rand_addr=0x64010101, 0xfffff000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0x6}]}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x2, [0xfff]}]}}}}}) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @local}, &(0x7f00000002c0)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000300)={@rand_addr, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x32, 0x1, 0x6, @empty, @empty, 0x10, 0x7, 0x5, 0x8}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe4, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x11}, 0x4000800) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000005c0)=0x400, 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$binfmt_script(r9, &(0x7f0000000600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '%-@'}], 0xa, "b3480c73a1515d99dc8ddf3d64fdfc5bc88c7542056d2cc667002fcbccd556c127b2136b05b71cf5f7a1c33c486df2bbae5724c7385c1a4808f48352214ce2179a5cfc937211ddc2f5fc0dd71354da88210ad15b55a57d7b96d6e4f27337af6b99c84e7fc3ac3cd7cb11497b0f82c448f65622768e9c895d7d1b29f30d93214b5875720d19e3e1ec78e7d9483d34d29a216569b170d76786ad19c5f7b7fd7ecc862228a6f2ee2f143ba2e7ba08d9dd22b8e030af07bd7c53d27c322d2073cb9f521de6d94a3e1da9baed949352493d366b742fb6c9dc0315ca9fc47612ea91fe869513e2f7b898d921174ea07f"}, 0x2f8) ioctl(r0, 0x3, &(0x7f0000000900)="e7ae2ce90c8a985ebd3b1f78fb77378f1004f083655f18b1b0af98cc4f47a48c270c60ea0ee192a73ee033657575c5e5eda41d") getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000940)={'nat\x00', 0x0, [0x7fffffff, 0x3, 0xffffffff, 0x7, 0x9]}, &(0x7f00000009c0)=0x54) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d00)={r1, 0x20, &(0x7f0000000cc0)={&(0x7f0000000bc0)=""/113, 0x71, 0x0, &(0x7f0000000c40)=""/109, 0x6d}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1c0}, [@map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xb8}]}, &(0x7f0000000a40)='GPL\x00', 0xfffffff7, 0xa7, &(0x7f0000000a80)=""/167, 0x40f00, 0x7, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000b40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xe, 0xfff, 0x7}, 0x10, r10, 0x0, 0x0, &(0x7f0000000d40)=[r1, r1, r1, r1], 0x0, 0x10, 0x4}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x70, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r1) sendmsg$NL80211_CMD_GET_REG(r12, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r13, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000010c0)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000001100)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xffffffff}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @multicast1}], 0x4c) socket(0x18, 0x6, 0x3) r14 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001500)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0}, &(0x7f0000001580)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001200)}, {&(0x7f0000001240)="4b5f1dd6feadb439aacf6d23a575ab6880d4eae369e631b952bdf15536c9cd5cb68c910bcdd8aff004dba320d9abf748be309880c050c1f87fa33c8ca52e37f74e7ad008e8afd6584e1b29f0cc2ab31e3d2d8e3144039c1a24157d2b23ef221ee948a035094ccbf324a69d1aec7d9ed16067f1dbf92d90ee645e06487c21149bfd3783f45eb7d28da7305d26adef7d15440dfdfca988b382024ade7e5779987a5486bc0bb31574d9250ae4c86f2c7bfcde8e3e9dca19d9f7918d2c6d99210ae6b830203f656a90bf11a63bd094", 0xcd}, {&(0x7f0000001340)="a6689a7d", 0x4}, {&(0x7f0000001380)="8a5942b89cdd35745faf72edcadc444ae3d0fafa4a2238653155f6aa05c0525088de7530af2be18fa7f5f50ba592bd4de85cf9", 0x33}, {&(0x7f00000013c0)="c5986c835db86b3b34f79ff5c452f03559e7ca28958170895cdfcc869a39a8c0c0d476fc66c21ee13e26e1fb84ecc903ec23d600e7cba6f554b0078aa4fb6a6b6275a692bf19650b71aa0ef9237afa0f0e9e281e11b5e2bbbf7526a505d681139202928c5d3d2afa3c35cc583aa59f2bdd9ed675ee87f8", 0x77}, {&(0x7f0000001440)="6fdc0c04d880bbdcdd8b4ca2ab36669028c2069b51c9c8547d19794ccf13a6f8ce63472e87ffde45adb977708adcf93f106cd1c97d780bf27f952cc5218728", 0x3f}], 0x6, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, 0xffffffffffffffff}}}], 0x40, 0x1}, 0x20000000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001640), 0xffffffffffffffff) 18.51777711s ago: executing program 0 (id=1717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {0x4a, 0x0, 0x900}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 8.615182111s ago: executing program 0 (id=1717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {0x4a, 0x0, 0x900}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 2.480843255s ago: executing program 4 (id=1902): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 2.366296532s ago: executing program 4 (id=1905): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14}, 0x14}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030200590200000000002f1eafbcf706e1050000004305000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000180), 0x0}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r7, 0x2, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0) 2.247319766s ago: executing program 4 (id=1908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000003000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000010802110000010000000000000000000064000000080026006c09000008000c006400000008000d00000000000500d5"], 0x64}}, 0x0) 2.057986122s ago: executing program 4 (id=1911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000180000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a01040000000000000000070000000c000a400000000009ef2ec8b1667e30d68d19362df00000000900be37a601cd9f464400010073797a3000000000080005400000000c08000640ffffff000800034000000008400000000c0a0101000000000000000007c69c57a5b615b17f797a31000000000900010073797a3000000000140003801000008008000340000000638eef79390f2b00040002801400000010000100000000"], 0xd4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f0000000000)={{0x6, @rose, 0xfffffffe}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x2, &(0x7f00000002c0)="1a00000600000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x1a000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000005, 0x13, r6, 0x0) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000480)=@llc={0x1a, 0x205, 0x0, 0x0, 0x0, 0x0, @local}, 0x80) r7 = socket$phonet(0x23, 0x2, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES16=r9, @ANYRES16=r8, @ANYRES64=0x0, @ANYRES32=r9, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080), 0x10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}], 0x10) listen(r11, 0xfff) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000180)={{0x67, @remote, 0x4e22, 0x4, 'lblcr\x00', 0x5, 0x9, 0x31}, {@empty, 0x0, 0x4, 0x80000000, 0x0, 0xfffffffd}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x9, 0x495, 0x44, r6, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0xa}, 0x48) 1.905359247s ago: executing program 1 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x9, 'vlan1\x00'}) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x1c, r4, 0x926fdb2c68a18847, 0x0, 0x0, {0x15}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000380), &(0x7f0000000400)='%-5lx \x00'}, 0x20) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6a956921fd34054}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x64, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\xd4\'\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'GPL\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048890}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x2c}}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB='\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r8, &(0x7f0000000300), 0x20000000, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x90) 1.656747032s ago: executing program 1 (id=1916): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 1.610085094s ago: executing program 3 (id=1918): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'gre0\x00', 0x4000}) 1.544851261s ago: executing program 3 (id=1919): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r0, 0x0, r4, 0x0, 0x4000000005, 0x0) write$binfmt_misc(r4, 0x0, 0x99) write(r2, 0x0, 0x0) r5 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb", 0x36}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d47", 0x3c}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e78f0ab4905fd5197956540e7a587c2be6b3d04eb4e90b3f388e9a908564032db194919454c842247e2803e333358a28b755829ea", 0x59}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f0995db9a4c6b3697af7", 0x6d}], 0x4}, 0x0) socket$inet(0x2, 0x6, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbb001412b98d43013fe05bdf43c9cbd6dbaaaa080600010800060400010180000000000100000000000000ac1e01010000"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket(0x2, 0x3, 0x6) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x6ddc, 0x4) 1.543869265s ago: executing program 2 (id=1920): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x62040200) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]}, 0x78) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYBLOB="01300000000000e516372e1f40f693cdd8e93a2e239d6a0000", @ANYRES32=r5, @ANYBLOB="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"], 0x170}}, 0x60fe888baef0dd54) r6 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000640), 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32=r4], 0x34}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) (async) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) (async) sendmmsg$inet(r7, &(0x7f0000000600), 0x0, 0x400c0c5) (async) sendto$inet(r7, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_pid(r8, &(0x7f0000000040), 0x3fffff) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @private=0xa010100}}}, &(0x7f0000000240)=0x84) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.514968427s ago: executing program 1 (id=1921): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 1.384712815s ago: executing program 1 (id=1922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001900110000000000000000001d01000015000400000000000000000018feb80ad21964230700000008000500000000001e0106"], 0x154}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x10002000}) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000440)=@rc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/172, 0xac}, {&(0x7f0000000700)=""/134, 0x86}], 0x2, &(0x7f00000007c0)=""/225, 0xe1}, 0x8001}, {{&(0x7f00000008c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a00)=""/249, 0xf9}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/98, 0x62}, {&(0x7f0000000680)=""/44, 0x2c}, {&(0x7f0000000b80)=""/174, 0xae}, {&(0x7f0000000c40)=""/100, 0x64}], 0x6}, 0x3ff}, {{&(0x7f0000000d40)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/101, 0x65}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x2, &(0x7f0000000940)=""/11, 0xb}, 0xfffffe00}, {{&(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/19, 0x13}], 0x1}, 0x1}, {{&(0x7f0000000980)=@can, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001080)=""/90, 0x5a}, {&(0x7f0000001100)=""/167, 0xa7}], 0x2, &(0x7f0000001200)=""/118, 0x76}, 0x9}, {{&(0x7f0000001280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001300)=""/52, 0x34}, {&(0x7f0000001340)=""/64, 0x40}], 0x2, &(0x7f0000004440)=""/217, 0xd9}, 0x80000000}, {{&(0x7f0000004540)=@generic, 0x80, &(0x7f0000004700)=[{&(0x7f00000045c0)=""/133, 0x85}, {&(0x7f0000004680)=""/58, 0x3a}, {&(0x7f00000046c0)=""/31, 0x1f}], 0x3, &(0x7f0000004740)=""/98, 0x62}, 0x8}], 0x7, 0x1, &(0x7f0000004980)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000015010000f8ffffffb702000008000000b70300000000000085000000ae00000087000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000021000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f0000000300), 0x20000000}, 0x20) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x7}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2f6fe29659ae06f5aa3843f88f2a3e34"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000300000001da"], 0x3c}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r12 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 1.029419157s ago: executing program 4 (id=1923): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.028536482s ago: executing program 1 (id=1924): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) socket(0x10, 0x80002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f0000002100)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='page_pool_release\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000eb1d95"], &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000140)={0x3, 'vcan0\x00', {0x2}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 760.622582ms ago: executing program 1 (id=1925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r1, 0x701, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r4, 0x107, 0x9, 0x0, 0x20600000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x10) listen(r2, 0x8) r6 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x9, "7e1102596e96d59f9d"}, &(0x7f0000000040)=0x11) getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r9, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 718.285393ms ago: executing program 2 (id=1926): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x12000000}]}}, 0x0, 0x26, 0x0, 0xa}, 0x20) 581.091377ms ago: executing program 3 (id=1927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000012bf0000400000004409000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018290000", @ANYRES32, @ANYBLOB="00000000002000208500000048000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0xd9, &(0x7f0000000280)=""/217, 0x40f00, 0x20, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x4da, 0x7}, 0x10, r5, 0xffffffffffffffff, 0x4, &(0x7f0000000600)=[r4, r6, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x3, 0x10, 0x7}, {0x2, 0x5, 0xa}, {0x4, 0x3, 0x10, 0x2}, {0x5, 0x3, 0xf, 0x7}], 0x10, 0x4}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0xfffffffffffffeb3, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x10, r5, r1}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close(0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000200)={0x0, 'netdevsim0\x00', {}, 0x8001}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r9, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070c00000900020073797a31000000001400078008002267322d914ada3b1300000000000800294000000000050005000200000005000400846f1fc027f9f3c4686173683a69702c6d61726b0000000078135f6d39de9ddbd2d7952fe70b8f2373f6399dd112a4b06aaf1045c77a251c89cc0b996257f7e25c11dd9ff30cde9e7a7ce76c085356c79f81cd20e319933c8306143609316d9afc587b77c661b67e4056929f51368d667d6e3dbbf29b6ccadf9c18cc3c3ad0df52534df0da63b8aa5277394c8b14ad426e7651e2379233b2e92a6046a975f4dd5ee8c22c5b5c1e5744320584c8eb38de8ed85ee31da4ccde2e79e5e837f41001035984ef099ae9dbeb48593f5af6d656f9a4c5b5a7eb26647d1f6fbcff855b9346dd25b99c0036310adb36abe1315a13808d549fac976e312eca258b9b782582149f6907bffe90d832f5f4a5aabc087280e1aa36bcb4aa8bdc1a98837dab5cd14a8c15595c88b8a594485f4b8980ddf666a54014c048f251bcf17caa8bafbfac392a840981806265d5c7ca9d0cf74a"], 0x60}}, 0x0) 580.623251ms ago: executing program 2 (id=1928): close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) 439.640751ms ago: executing program 2 (id=1929): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "ae95c69400311d48aad0bff5434e4daefeebbdfe3198b929fed36aae687d362c2d866ff14a0cbec8b491d56b52b140eda575852ea81921ebff746d451657e65d0811e5987eac486c9c4b75c4ff6aafb611cd7d03cbfbd9e500d9cb12cf3f19ee82e9b469a8cf57f61583f3bac73b19c5a450293e4710c264514b37c7fa25e36383a27a84d5a4c0e18de5a1797c673863cc00dc5cdc32c1258d84c073535e5deff67705562d14d97b87083ee4d46c2ca0fce82cfb9dbd65fac7a0ee3f343365d654fe8ab11cc98ca5c93434e40115965798a90c26c17a88eb3cdca0696b1c499a07bc1bb0be5b081894d9d8a6c33ceef29631b455362d75701de885445f54041d", "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"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x8, 0x5}}}}]}, 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x3, 0x5, 0x5}, 0x48) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_COOKIE(r4, 0x1, 0x39, 0x0, &(0x7f0000000000)) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x8, 0x0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xb8, 0x118, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x5}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'sit0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000340)=0x5) 439.087096ms ago: executing program 3 (id=1930): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x401}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000000800010004"], 0x50}}, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000540)=0x7ff, 0x12) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0xc0506617, &(0x7f0000000080)=0x1) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x15) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x2, 0x20}, 0x9c) (async) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) close(r8) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) socket$key(0xf, 0x3, 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) 208.234075ms ago: executing program 3 (id=1931): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f0000a4c000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000648000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x46f4b000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x46f4b000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600802f000000590000a2bc56060000000f7f89000000200000000101ff00"/72, 0x48}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000100)=""/96, &(0x7f0000000040)=0x60) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 149.552016ms ago: executing program 2 (id=1932): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 113.193577ms ago: executing program 4 (id=1933): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5}, 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x2, 0x0, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x13, r5, 0x4000) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, 0x0, &(0x7f00000007c0)) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x2}) 681.317µs ago: executing program 3 (id=1934): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x7ff, 0x3f8, 0x10000000, 0x40, 0x0, 0xfc}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/25, &(0x7f00000000c0)=0x19) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0xfffe, 0x0, @local}]}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="430000004c495a741f5cffbc61e01328f9f17e13c0560d9d044ae22020af2ec5ae7bca4608e23ee2d341dedfeccd1d93b07a7526977e7e9db4e953e992ddc53e8ad6b92f58fad59983687c6db4d05355511af440563a60e8e0a2c5e4106d41c7e6d43c21f59941153289b6ea0352af1a0d2d4851d02b6810060dbba58675ed4a3103f594973b69056d9a8da687aed2bd33d79dd1f86d649943a5a08e51d0468fcc2ce3165096b85db6981f997a35a91402af9edb67fbffa03de84f5de672c5e49c98b0219c2f", @ANYRES16=r4, @ANYBLOB="010000000000000000000b0000000800030068b2fd166e305127b0637aa1c8f2c6a7a3ed6a98c8a3a33e3abd20f60741edd9254e16d3ccf21dd48e3d661afbfb90787816e1e0e3efa91fd527af1b37ee03e229eb352bfa82ae5e7a293d2e0f280157f11b1dee27d05cc469d380104e4ff485a6e559930c483a8567cff3cc34f7a3c6aa30d4dde9c1cbd12586", @ANYRES32=r7, @ANYBLOB="20005080090001009452503a78000000080003000bac0f000500020004000000"], 0x3c}}, 0x4000) r8 = socket$inet(0x2, 0x80001, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000200), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) ioctl$TUNSETOFFLOAD(r9, 0x4010744d, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_fallocate_exit\x00', r0}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=1935): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b7050000080000008500000004ff020095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) kernel console output (not intermixed with test programs): a:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.179827][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.219706][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.243355][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.261744][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.273707][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.283884][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.297369][ T5196] netlink: 'syz.0.6': attribute type 7 has an invalid length. [ 89.297399][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.312348][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.331890][ T5097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.341260][ T5097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.352259][ T5097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.364710][ T5097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.447638][ T5195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 89.456942][ T5195] erspan0: entered promiscuous mode [ 89.460697][ T5114] Bluetooth: hci3: command tx timeout [ 89.466917][ T5105] Bluetooth: hci4: command tx timeout [ 89.467683][ T5114] Bluetooth: hci1: command tx timeout [ 89.473717][ T5113] Bluetooth: hci0: command tx timeout [ 89.495212][ T5195] erspan0: entered allmulticast mode [ 89.504983][ T5198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 89.515605][ T5196] Êü: entered promiscuous mode [ 89.515620][ T5198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 89.538740][ T5113] Bluetooth: hci2: command tx timeout [ 89.540487][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 89.556193][ T5197] erspan0: left promiscuous mode [ 89.564332][ T5197] erspan0: left allmulticast mode [ 89.650174][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.692835][ T5207] netlink: 'syz.3.10': attribute type 8 has an invalid length. [ 89.705553][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.706247][ T5207] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10'. [ 89.722497][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.737044][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.788467][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.806243][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.816323][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.830379][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.843687][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.909503][ T5095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.925060][ T5095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.941404][ T5095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.950773][ T5095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.447851][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.470318][ T5230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.483175][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.645857][ T2400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.670814][ T2400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.779924][ T3897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.798534][ T3897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.870340][ T5240] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 91.894769][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 92.147973][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.175409][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.252998][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 92.426511][ T25] cfg80211: failed to load regulatory.db [ 92.606417][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 92.649725][ T5268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28'. [ 92.813035][ T5272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 92.890572][ T5286] netlink: 'syz.3.31': attribute type 10 has an invalid length. [ 92.974087][ T5286] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.061744][ T5286] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.352079][ T5307] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.612964][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.662238][ T5325] sctp: [Deprecated]: syz.2.37 (pid 5325) Use of int in maxseg socket option. [ 93.662238][ T5325] Use struct sctp_assoc_value instead [ 93.983559][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.106187][ T5336] bridge_slave_1 (unregistering): left allmulticast mode [ 94.116231][ T5336] bridge_slave_1 (unregistering): left promiscuous mode [ 94.137016][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.778193][ T5370] __nla_validate_parse: 6 callbacks suppressed [ 94.778227][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 94.906916][ T5375] netlink: 'syz.0.55': attribute type 3 has an invalid length. [ 95.187812][ T5384] batadv0: entered promiscuous mode [ 95.240061][ T5392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'. [ 95.494890][ T5406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.718787][ T5413] netlink: 3 bytes leftover after parsing attributes in process `syz.1.65'. [ 95.747637][ T5413] 0ªX¹¦À: renamed from caif0 [ 95.786517][ T5417] Zero length message leads to an empty skb [ 95.963624][ T5413] 0ªX¹¦À: entered allmulticast mode [ 95.970734][ T5427] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 95.993891][ T5413] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 96.056919][ T5427] netlink: 'syz.3.70': attribute type 3 has an invalid length. [ 96.115297][ T5427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 96.392678][ T45] IPVS: starting estimator thread 0... [ 96.456892][ T5441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74'. [ 96.479098][ T5441] IPv6: NLM_F_REPLACE set, but no existing node found! [ 96.508933][ T5442] IPVS: using max 17 ests per chain, 40800 per kthread [ 96.611835][ T5452] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 97.221215][ T5473] Cannot find add_set index 0 as target [ 97.310958][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 97.474348][ T5479] netlink: 'syz.4.87': attribute type 4 has an invalid length. [ 98.115562][ T5504] netlink: 56 bytes leftover after parsing attributes in process `syz.4.96'. [ 98.646583][ T5524] netlink: 'syz.3.102': attribute type 30 has an invalid length. [ 98.771224][ T5528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.101'. [ 99.316695][ T5549] warning: `syz.1.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.492784][ T5560] veth1_to_hsr: entered promiscuous mode [ 99.833370][ T5551] veth1_to_hsr: left promiscuous mode [ 100.053502][ T5583] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.126'. [ 100.115794][ T5583] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 100.395729][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 100.423705][ T5600] netlink: 'syz.3.130': attribute type 13 has an invalid length. [ 100.536278][ T5600] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.545668][ T5600] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.555316][ T5600] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.564991][ T5600] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.590551][ T5600] vxlan0: entered promiscuous mode [ 100.837475][ T5614] netlink: 'syz.4.138': attribute type 12 has an invalid length. [ 100.852770][ T5614] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 100.870252][ T5614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.282944][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 101.411221][ T5640] sctp: [Deprecated]: syz.3.146 (pid 5640) Use of int in maxseg socket option. [ 101.411221][ T5640] Use struct sctp_assoc_value instead [ 101.623306][ T5646] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 101.819064][ T5653] IPv6: addrconf: prefix option has invalid lifetime [ 101.911190][ T5660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 102.001031][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 102.059936][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 102.133808][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 102.165538][ T5674] netlink: 'syz.1.156': attribute type 13 has an invalid length. [ 102.229448][ T5674] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.238439][ T5674] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.247193][ T5674] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.256084][ T5674] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.323653][ T5674] vxlan0: entered promiscuous mode [ 102.695092][ T5703] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.167'. [ 102.841661][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 103.028730][ T5719] sctp: [Deprecated]: syz.1.173 (pid 5719) Use of int in maxseg socket option. [ 103.028730][ T5719] Use struct sctp_assoc_value instead [ 103.421006][ T5735] IPv4: Oversized IP packet from 127.202.26.0 [ 103.872847][ T5750] netlink: 316 bytes leftover after parsing attributes in process `syz.2.185'. [ 104.167641][ T5766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.218669][ T5767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.316763][ T5828] __nla_validate_parse: 2 callbacks suppressed [ 105.316789][ T5828] netlink: 56 bytes leftover after parsing attributes in process `syz.4.211'. [ 105.334387][ T5828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.211'. [ 105.346250][ T5828] netlink: 55 bytes leftover after parsing attributes in process `syz.4.211'. [ 105.357133][ T5826] netlink: 264 bytes leftover after parsing attributes in process `syz.1.210'. [ 105.384152][ T5828] netlink: 55 bytes leftover after parsing attributes in process `syz.4.211'. [ 105.402034][ T5833] netlink: 'syz.4.211': attribute type 3 has an invalid length. [ 105.449926][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.567309][ T5839] ɶƣ0G0w: entered promiscuous mode [ 105.714534][ T5853] sch_tbf: peakrate 14989974341000297998 is lower than or equals to rate 18428595723600419182 ! [ 106.218836][ T5873] can: request_module (can-proto-5) failed. [ 106.347315][ T5890] bridge_slave_0: left allmulticast mode [ 106.358255][ T5890] bridge_slave_0: left promiscuous mode [ 106.370957][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.431358][ T5896] tipc: Started in network mode [ 106.453229][ T5896] tipc: Node identity 9ca6, cluster identity 3 [ 106.471668][ T5896] tipc: Node number set to 40102 [ 106.508157][ T5890] syz.3.228 (5890) used greatest stack depth: 18736 bytes left [ 106.667138][ T5914] netlink: 112 bytes leftover after parsing attributes in process `syz.0.236'. [ 106.692829][ T5917] netlink: 112 bytes leftover after parsing attributes in process `syz.0.236'. [ 106.720000][ T5920] xt_TCPMSS: Only works on TCP SYN packets [ 106.759339][ T5912] Cannot find add_set index 0 as target [ 107.076838][ T5954] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 107.121285][ T5954] macvlan0: entered promiscuous mode [ 107.127589][ T5954] macvlan0: entered allmulticast mode [ 107.159715][ T5963] xt_socket: unknown flags 0x8 [ 107.186942][ T5954] veth1_vlan: entered allmulticast mode [ 107.211958][ T5954] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 107.216679][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 107.226098][ T5955] netlink: 11 bytes leftover after parsing attributes in process `syz.0.246'. [ 107.251283][ T5963] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.367480][ T5965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.249'. [ 107.909958][ T6002] netlink: 'syz.1.262': attribute type 4 has an invalid length. [ 107.925346][ T6002] Cannot find set identified by id 0 to match [ 108.085059][ T6015] netlink: 'syz.4.264': attribute type 2 has an invalid length. [ 108.093910][ T6015] netlink: 'syz.4.264': attribute type 8 has an invalid length. [ 108.103252][ T6015] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 108.111870][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.082205][ T6057] vlan2: entered promiscuous mode [ 109.087334][ T6057] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 109.137999][ T6057] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 109.365922][ T6080] tipc: Trying to set illegal importance in message [ 109.816826][ T6108] vlan2: entered promiscuous mode [ 110.521854][ T6139] __nla_validate_parse: 11 callbacks suppressed [ 110.521876][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 110.768848][ T6159] netlink: 'syz.0.319': attribute type 4 has an invalid length. [ 110.817561][ T6159] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.319'. [ 111.082803][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.321'. [ 111.164226][ T6182] pim6reg: entered allmulticast mode [ 111.225295][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 111.256472][ T6191] xt_hashlimit: invalid interval [ 111.665805][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.334'. [ 111.770016][ T6222] netlink: 48 bytes leftover after parsing attributes in process `syz.0.338'. [ 111.823161][ T6226] netlink: 1 bytes leftover after parsing attributes in process `syz.1.339'. [ 112.003460][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.328666][ T6253] syz.1.349[6253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.536424][ T6265] Driver unsupported XDP return value 0 on prog (id 144) dev N/A, expect packet loss! [ 112.828953][ T6287] netlink: 56 bytes leftover after parsing attributes in process `syz.2.363'. [ 112.979653][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 113.063398][ T6299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.090882][ T6299] netlink: 'syz.2.369': attribute type 3 has an invalid length. [ 113.133077][ T6299] netlink: 168364 bytes leftover after parsing attributes in process `syz.2.369'. [ 113.148980][ T6307] netlink: 'syz.4.371': attribute type 4 has an invalid length. [ 113.197092][ T6313] veth0_vlan: entered allmulticast mode [ 113.318765][ T6317] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 115.985856][ T6401] __nla_validate_parse: 4 callbacks suppressed [ 115.985883][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.397'. [ 116.041100][ T6389] netlink: 144 bytes leftover after parsing attributes in process `syz.0.395'. [ 116.463233][ T6434] Bluetooth: MGMT ver 1.22 [ 116.646065][ T6444] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 116.677868][ T6444] netlink: 96 bytes leftover after parsing attributes in process `syz.2.410'. [ 116.954920][ T6453] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.010171][ T6453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.271294][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.421'. [ 117.291943][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 117.304281][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 117.684697][ T6501] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 117.695407][ T6501] macvlan2: entered promiscuous mode [ 117.703837][ T6501] macvlan2: entered allmulticast mode [ 117.737833][ T6501] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 117.762576][ T6501] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 117.779064][ T6501] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 118.445113][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 119.200336][ T6562] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 119.208037][ T6562] netlink: 'syz.1.451': attribute type 2 has an invalid length. [ 119.244018][ T6562] netlink: 16074 bytes leftover after parsing attributes in process `syz.1.451'. [ 120.134904][ T6612] netlink: 'syz.3.466': attribute type 29 has an invalid length. [ 120.146924][ T6614] ip6tnl1: entered promiscuous mode [ 120.158306][ T6614] ip6tnl1: entered allmulticast mode [ 120.173630][ T6612] netlink: 'syz.3.466': attribute type 29 has an invalid length. [ 120.184605][ T6614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.464'. [ 120.410624][ T6638] team0: entered promiscuous mode [ 120.425161][ T6638] team_slave_0: entered promiscuous mode [ 120.441558][ T6638] team_slave_1: entered promiscuous mode [ 120.456245][ T6635] team0: left promiscuous mode [ 120.468559][ T6635] team_slave_0: left promiscuous mode [ 120.486243][ T6635] team_slave_1: left promiscuous mode [ 120.627891][ T6648] veth0_macvtap: left promiscuous mode [ 120.634928][ T6648] macvtap0: entered allmulticast mode [ 120.726627][ T6655] netlink: 'syz.1.475': attribute type 12 has an invalid length. [ 121.096026][ T6672] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.163883][ T6672] x_tables: ip_tables: osf match: only valid for protocol 6 [ 121.242990][ T6681] netlink: 56 bytes leftover after parsing attributes in process `syz.3.485'. [ 121.849318][ T6706] netlink: 48 bytes leftover after parsing attributes in process `syz.2.490'. [ 122.541411][ T6740] can: request_module (can-proto-0) failed. [ 123.201219][ T6775] macvlan2: entered promiscuous mode [ 123.218960][ T6775] vlan1: entered promiscuous mode [ 123.219708][ T6781] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 123.224485][ T6775] macvlan2: entered allmulticast mode [ 123.268818][ T6775] vlan1: entered allmulticast mode [ 123.283137][ T6775] veth0_vlan: entered allmulticast mode [ 123.301152][ T6775] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 123.322492][ T6775] vlan1: left allmulticast mode [ 123.338418][ T6775] veth0_vlan: left allmulticast mode [ 123.360791][ T6775] vlan1: left promiscuous mode [ 123.437622][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 123.812304][ T6814] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 123.847460][ T6815] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 123.932736][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.999137][ T6815] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 124.059174][ T6814] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 124.059440][ T6829] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 124.086349][ T6814] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 124.108047][ T6829] netlink: 512 bytes leftover after parsing attributes in process `syz.2.522'. [ 124.158581][ T6834] netlink: 76 bytes leftover after parsing attributes in process `syz.3.523'. [ 124.215921][ T6834] Êü: entered promiscuous mode [ 124.555897][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 124.714315][ T6863] netlink: 'syz.3.535': attribute type 10 has an invalid length. [ 124.763423][ T6863] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 125.006052][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.056236][ T6880] xt_TCPMSS: Only works on TCP SYN packets [ 125.080120][ T6880] rdma_op ffff88807bf611f0 conn xmit_rdma 0000000000000000 [ 125.101050][ T6880] netlink: 92 bytes leftover after parsing attributes in process `syz.1.540'. [ 125.123014][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 125.748758][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 125.782918][ T6900] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.949397][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 126.916419][ T6950] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 126.948399][ T6950] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.565'. [ 126.992964][ T6954] netlink: 'syz.1.568': attribute type 3 has an invalid length. [ 127.053027][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 127.146944][ T6957] cannot load conntrack support for proto=3 [ 127.166894][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.572'. [ 127.369306][ T6983] netlink: 'syz.1.576': attribute type 9 has an invalid length. [ 127.390996][ T6983] netlink: 'syz.1.576': attribute type 7 has an invalid length. [ 127.410445][ T6983] netlink: 'syz.1.576': attribute type 8 has an invalid length. [ 127.431206][ T6978] ɶƣ0G0w: entered promiscuous mode [ 127.520061][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 127.652851][ T6998] netlink: 'syz.4.579': attribute type 2 has an invalid length. [ 127.693988][ T6998] netlink: 'syz.4.579': attribute type 3 has an invalid length. [ 127.964438][ T7015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'. [ 128.255152][ T7031] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.591'. [ 128.527145][ T7047] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 128.539239][ T7052] netlink: 'syz.1.593': attribute type 4 has an invalid length. [ 128.563312][ T7052] netlink: 104 bytes leftover after parsing attributes in process `syz.1.593'. [ 128.643778][ T5150] IPVS: starting estimator thread 0... [ 128.740572][ T7061] IPVS: using max 16 ests per chain, 38400 per kthread [ 128.755691][ T7067] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 129.036413][ T7084] netlink: 48 bytes leftover after parsing attributes in process `syz.2.606'. [ 129.115554][ T7091] netlink: 48 bytes leftover after parsing attributes in process `syz.2.606'. [ 129.286965][ T7101] xt_TCPMSS: Only works on TCP SYN packets [ 129.908236][ T7143] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 129.918764][ T7143] macvtap1: entered allmulticast mode [ 129.943869][ T7143] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 129.998165][ T7143] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 130.027797][ T7143] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 131.070933][ T7173] netlink: 132 bytes leftover after parsing attributes in process `syz.1.635'. [ 131.828735][ T5105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.846621][ T5105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.858625][ T5105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.878735][ T5105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.895736][ T5105] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 131.904795][ T5105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.101216][ T7212] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.234415][ T5094] syz-executor (5094) used greatest stack depth: 18192 bytes left [ 132.414735][ T139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.448606][ T139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.574443][ T139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.598460][ T139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.659031][ T7242] netlink: 'syz.0.651': attribute type 9 has an invalid length. [ 132.685775][ T7242] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.651'. [ 132.730607][ T139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.748454][ T139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.873504][ T139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.891254][ T139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.037188][ T7203] chnl_net:caif_netlink_parms(): no params data found [ 133.399279][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.405729][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.602479][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.639614][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.647129][ T7203] bridge_slave_0: entered allmulticast mode [ 133.663615][ T7203] bridge_slave_0: entered promiscuous mode [ 133.683298][ T139] bridge_slave_1: left allmulticast mode [ 133.702379][ T139] bridge_slave_1: left promiscuous mode [ 133.723710][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.760072][ T139] bridge_slave_0: left allmulticast mode [ 133.770725][ T139] bridge_slave_0: left promiscuous mode [ 133.780792][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.938741][ T5105] Bluetooth: hci5: command tx timeout [ 134.435066][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.454218][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.467426][ T139] bond0 (unregistering): Released all slaves [ 134.484247][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.491752][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.504497][ T7203] bridge_slave_1: entered allmulticast mode [ 134.529147][ T7203] bridge_slave_1: entered promiscuous mode [ 134.565371][ T7309] tap0: tun_chr_ioctl cmd 1074025672 [ 134.571103][ T7309] tap0: ignored: set checksum disabled [ 134.663659][ T139] ɶƣ0G0w: left promiscuous mode [ 134.822050][ T139] tipc: Left network mode [ 134.825910][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.861707][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.913730][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.673'. [ 135.252651][ T7203] team0: Port device team_slave_0 added [ 135.266731][ T7353] netlink: 64 bytes leftover after parsing attributes in process `syz.3.680'. [ 135.286948][ T7352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.681'. [ 135.302350][ T7203] team0: Port device team_slave_1 added [ 135.318757][ T7352] netlink: 'syz.4.681': attribute type 10 has an invalid length. [ 135.349072][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 135.455434][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.471510][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.519718][ T7203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.576315][ T7359] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 135.585830][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.686'. [ 135.587193][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.603137][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.630107][ T7203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.653541][ T7362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.685'. [ 135.911877][ T7385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.691'. [ 136.018704][ T5105] Bluetooth: hci5: command tx timeout [ 136.070146][ T7390] netlink: 64 bytes leftover after parsing attributes in process `syz.4.692'. [ 136.102923][ T7203] hsr_slave_0: entered promiscuous mode [ 136.116132][ T7203] hsr_slave_1: entered promiscuous mode [ 136.132709][ T7203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.141520][ T7203] Cannot create hsr debugfs directory [ 136.174354][ T7396] netlink: 60 bytes leftover after parsing attributes in process `syz.2.695'. [ 136.213236][ T139] hsr_slave_0: left promiscuous mode [ 136.226699][ T139] hsr_slave_1: left promiscuous mode [ 136.245465][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.256910][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.268586][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.277612][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.327261][ T139] veth1_macvtap: left promiscuous mode [ 136.341248][ T139] veth1_vlan: left promiscuous mode [ 136.353954][ T139] veth0_vlan: left promiscuous mode [ 136.552477][ T139] pim6reg (unregistering): left allmulticast mode [ 136.988221][ T139] team0 (unregistering): Port device team_slave_1 removed [ 137.032859][ T139] team0 (unregistering): Port device team_slave_0 removed [ 137.524329][ T7396] tipc: Started in network mode [ 137.530252][ T7396] tipc: Node identity memory.en, cluster identity 8 [ 137.710406][ T7412] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 137.739316][ T7412] __nla_validate_parse: 1 callbacks suppressed [ 137.739340][ T7412] netlink: 224 bytes leftover after parsing attributes in process `syz.3.699'. [ 137.806393][ T7411] lo speed is unknown, defaulting to 1000 [ 137.826256][ T7411] lo speed is unknown, defaulting to 1000 [ 137.930536][ T7414] pim6reg: entered allmulticast mode [ 137.936855][ T7411] lo speed is unknown, defaulting to 1000 [ 137.955167][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.703'. [ 137.975207][ T7411] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.108473][ T5105] Bluetooth: hci5: command tx timeout [ 138.131135][ T7411] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 138.148541][ T7424] netlink: 224 bytes leftover after parsing attributes in process `syz.4.703'. [ 138.300101][ T7411] lo speed is unknown, defaulting to 1000 [ 138.322580][ T139] IPVS: stop unused estimator thread 0... [ 138.329171][ T7411] lo speed is unknown, defaulting to 1000 [ 138.339669][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.708'. [ 138.349194][ T7437] netlink: 188 bytes leftover after parsing attributes in process `syz.2.707'. [ 138.360538][ T7411] lo speed is unknown, defaulting to 1000 [ 138.370917][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.708'. [ 138.409918][ T7411] lo speed is unknown, defaulting to 1000 [ 138.451249][ T7411] lo speed is unknown, defaulting to 1000 [ 138.960487][ T7466] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 138.993864][ T7203] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.015712][ T7203] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.071268][ T7203] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.102875][ T7203] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.476485][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.576939][ T7203] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.615206][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.622518][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.677924][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.685256][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.178532][ T5105] Bluetooth: hci5: command tx timeout [ 140.276523][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.443629][ T7203] veth0_vlan: entered promiscuous mode [ 140.474027][ T7203] veth1_vlan: entered promiscuous mode [ 140.604659][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 140.611582][ T7203] veth0_macvtap: entered promiscuous mode [ 140.645721][ T7203] veth1_macvtap: entered promiscuous mode [ 140.731309][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.758728][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.789697][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.812914][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.829927][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.859610][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.885969][ T7549] Cannot find add_set index 0 as target [ 140.892052][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.928584][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.952296][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.986410][ T7549] veth0_vlan: left promiscuous mode [ 141.227745][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.259424][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.282660][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.303737][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.347614][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.375411][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.397233][ T7564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.401412][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.420631][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 141.434824][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.452517][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.464025][ T7548] delete_channel: no stack [ 141.467284][ T7203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.478569][ T7203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.487343][ T7203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.508628][ T7203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.540808][ T7558] netlink: 'syz.2.742': attribute type 33 has an invalid length. [ 141.617706][ T7562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.742'. [ 141.647396][ T7562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.742'. [ 141.987591][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.026169][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.130811][ T2400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.152768][ T2400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.345813][ T7612] netlink: 'syz.2.755': attribute type 2 has an invalid length. [ 142.630196][ T7621] syzkaller0: entered promiscuous mode [ 142.635823][ T7621] syzkaller0: entered allmulticast mode [ 142.657945][ T7637] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms [ 142.711716][ T7627] lo speed is unknown, defaulting to 1000 [ 142.798430][ T7637] __nla_validate_parse: 5 callbacks suppressed [ 142.798454][ T7637] netlink: 48 bytes leftover after parsing attributes in process `syz.4.760'. [ 145.525012][ T7681] netlink: 'syz.1.774': attribute type 4 has an invalid length. [ 145.918690][ T7702] netlink: 344 bytes leftover after parsing attributes in process `syz.0.783'. [ 146.300380][ T7725] netlink: 'syz.4.790': attribute type 3 has an invalid length. [ 146.316927][ T7725] netlink: 'syz.4.790': attribute type 3 has an invalid length. [ 146.333277][ T7727] netlink: 168 bytes leftover after parsing attributes in process `syz.1.792'. [ 146.347269][ T7727] netlink: 'syz.1.792': attribute type 2 has an invalid length. [ 146.361276][ T7727] netlink: 60 bytes leftover after parsing attributes in process `syz.1.792'. [ 146.412706][ T7732] netlink: 56 bytes leftover after parsing attributes in process `syz.3.793'. [ 146.451336][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 146.460708][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 146.474015][ T7732] netlink: 31 bytes leftover after parsing attributes in process `syz.3.793'. [ 146.483481][ T7732] netlink: 'syz.3.793': attribute type 3 has an invalid length. [ 146.493988][ T7732] netlink: 'syz.3.793': attribute type 2 has an invalid length. [ 146.505401][ T7732] netlink: 31 bytes leftover after parsing attributes in process `syz.3.793'. [ 146.518699][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.790'. [ 146.991178][ T7757] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 148.524515][ T7820] bridge0: entered promiscuous mode [ 148.538611][ T7820] bridge0: left promiscuous mode [ 148.582603][ T7826] syzkaller1: entered promiscuous mode [ 148.588628][ T7826] syzkaller1: entered allmulticast mode [ 148.819444][ T7839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.842296][ T7839] team0: Port device bond0 added [ 149.038845][ T7850] lo speed is unknown, defaulting to 1000 [ 149.242971][ T7861] netlink: 'syz.0.833': attribute type 15 has an invalid length. [ 149.396755][ T7870] __nla_validate_parse: 3 callbacks suppressed [ 149.396780][ T7870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.835'. [ 149.520539][ T7872] Bluetooth: MGMT ver 1.22 [ 149.691579][ T7882] netlink: 'syz.4.841': attribute type 15 has an invalid length. [ 149.940488][ T7896] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 150.125797][ T7903] dvmrp0: entered allmulticast mode [ 150.152550][ T7904] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 150.208850][ T7903] dvmrp0: left allmulticast mode [ 150.314574][ T7850] netlink: 5 bytes leftover after parsing attributes in process `syz.1.829'. [ 150.323796][ T7850] 0ªX¹¦D: renamed from gretap0 [ 150.346197][ T7850] 0ªX¹¦D: entered allmulticast mode [ 150.377574][ T7850] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 150.793534][ T7928] netlink: 'syz.2.852': attribute type 15 has an invalid length. [ 150.833097][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 150.881479][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.855'. [ 151.443180][ T7972] netlink: 72 bytes leftover after parsing attributes in process `syz.4.867'. [ 151.714924][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.868'. [ 151.813612][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 151.988176][ T8005] netlink: 'syz.4.875': attribute type 4 has an invalid length. [ 152.557865][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.571017][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.585405][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.599693][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.607950][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.629001][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.934616][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.004704][ T8031] lo speed is unknown, defaulting to 1000 [ 153.142717][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.346066][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.398235][ T8075] netlink: 'syz.1.894': attribute type 10 has an invalid length. [ 153.465970][ T8075] batman_adv: batadv0: Adding interface: team0 [ 153.499302][ T8075] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.541747][ T8075] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 153.635996][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.660862][ T8080] netlink: 'syz.1.894': attribute type 10 has an invalid length. [ 153.675505][ T8080] netlink: 2 bytes leftover after parsing attributes in process `syz.1.894'. [ 153.686147][ T8080] team0: entered promiscuous mode [ 153.696269][ T8080] team_slave_0: entered promiscuous mode [ 153.714008][ T8080] team_slave_1: entered promiscuous mode [ 153.733126][ T8080] bond0: entered promiscuous mode [ 153.743766][ T8080] bond_slave_0: entered promiscuous mode [ 153.755835][ T8080] bond_slave_1: entered promiscuous mode [ 153.774883][ T8080] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.797868][ T8080] batman_adv: batadv0: Interface activated: team0 [ 153.805959][ T8080] batman_adv: batadv0: Interface deactivated: team0 [ 153.820075][ T8080] batman_adv: batadv0: Removing interface: team0 [ 153.828217][ T8080] bridge0: port 3(team0) entered blocking state [ 153.834948][ T8080] bridge0: port 3(team0) entered disabled state [ 153.843067][ T8080] team0: entered allmulticast mode [ 153.848387][ T8080] team_slave_0: entered allmulticast mode [ 153.854157][ T8080] team_slave_1: entered allmulticast mode [ 153.864992][ T8080] bond0: entered allmulticast mode [ 153.871028][ T8080] bond_slave_0: entered allmulticast mode [ 153.877015][ T8080] bond_slave_1: entered allmulticast mode [ 153.891337][ T8080] bridge0: port 3(team0) entered blocking state [ 153.897810][ T8080] bridge0: port 3(team0) entered forwarding state [ 154.099847][ T8103] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 154.107740][ T8103] netlink: 'syz.3.903': attribute type 3 has an invalid length. [ 154.116316][ T8103] netlink: 224 bytes leftover after parsing attributes in process `syz.3.903'. [ 154.306174][ T35] bridge_slave_1: left allmulticast mode [ 154.315372][ T35] bridge_slave_1: left promiscuous mode [ 154.331484][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.352683][ T35] bridge_slave_0: left allmulticast mode [ 154.368831][ T35] bridge_slave_0: left promiscuous mode [ 154.374851][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.662430][ T5105] Bluetooth: hci0: command tx timeout [ 154.991825][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.005358][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.020847][ T35] bond0 (unregistering): Released all slaves [ 155.061350][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 155.072778][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 155.269960][ T35] tipc: Left network mode [ 155.541332][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.552265][ T8031] chnl_net:caif_netlink_parms(): no params data found [ 155.600848][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.684237][ T8166] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 155.701282][ T8166] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 155.710389][ T8166] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.924'. [ 155.723009][ T8166] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 155.833685][ T8169] pim6reg1: entered promiscuous mode [ 155.849407][ T8169] pim6reg1: entered allmulticast mode [ 155.920295][ T35] hsr_slave_0: left promiscuous mode [ 155.958108][ T35] hsr_slave_1: left promiscuous mode [ 155.981831][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.995095][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.009621][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.017118][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.074936][ T35] veth1_macvtap: left promiscuous mode [ 156.086705][ T35] veth0_macvtap: left promiscuous mode [ 156.097988][ T35] veth1_vlan: left promiscuous mode [ 156.107472][ T35] veth0_vlan: left promiscuous mode [ 156.345718][ T35] pim6reg (unregistering): left allmulticast mode [ 156.752400][ T5105] Bluetooth: hci0: command tx timeout [ 156.830901][ T35] team0 (unregistering): Port device team_slave_1 removed [ 156.886000][ T35] team0 (unregistering): Port device team_slave_0 removed [ 157.465893][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.927'. [ 157.549446][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.580064][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.587701][ T8031] bridge_slave_0: entered allmulticast mode [ 157.633256][ T8031] bridge_slave_0: entered promiscuous mode [ 157.697495][ T8194] netlink: 'syz.4.931': attribute type 4 has an invalid length. [ 157.754753][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.783574][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.808705][ T8031] bridge_slave_1: entered allmulticast mode [ 157.836951][ T8031] bridge_slave_1: entered promiscuous mode [ 157.960418][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.935'. [ 158.020125][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.055114][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.192988][ T8031] team0: Port device team_slave_0 added [ 158.232532][ T8031] team0: Port device team_slave_1 added [ 158.353343][ T8224] No such timeout policy "syz0" [ 158.362631][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.390886][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.437233][ T8031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.455171][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.470130][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.501864][ T8031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.607096][ T8236] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 158.620769][ T8237] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 158.685268][ T8031] hsr_slave_0: entered promiscuous mode [ 158.712817][ T8031] hsr_slave_1: entered promiscuous mode [ 158.747243][ T8031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.757015][ T8031] Cannot create hsr debugfs directory [ 158.818549][ T5105] Bluetooth: hci0: command tx timeout [ 158.914630][ T8257] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.950'. [ 159.100789][ T8261] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 159.180499][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 159.238803][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 159.262072][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 159.277514][ T8267] macvlan2: entered allmulticast mode [ 159.299503][ T8267] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 159.312697][ T8267] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 159.346798][ T8267] team0: Port device macvlan2 added [ 159.354118][ T8272] batadv0: entered promiscuous mode [ 159.397705][ T8277] netlink: 32 bytes leftover after parsing attributes in process `syz.1.957'. [ 159.710219][ T8291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.826978][ T8300] SET target dimension over the limit! [ 159.919667][ T8031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.000126][ T8031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.030286][ T8031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.075674][ T8031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.119216][ T8316] xt_socket: unknown flags 0x8 [ 160.174794][ T8314] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 160.187148][ T8314] veth1_vlan: left allmulticast mode [ 160.486381][ T8317] team_slave_0: entered promiscuous mode [ 160.492517][ T8317] team_slave_1: entered promiscuous mode [ 160.518840][ T8317] vlan5: entered promiscuous mode [ 160.535444][ T8317] team0: entered promiscuous mode [ 160.543220][ T8317] vlan5: entered allmulticast mode [ 160.559108][ T8339] __nla_validate_parse: 1 callbacks suppressed [ 160.559131][ T8339] netlink: 68 bytes leftover after parsing attributes in process `syz.0.976'. [ 160.561920][ T8317] team0: entered allmulticast mode [ 160.592691][ T8317] team_slave_0: entered allmulticast mode [ 160.604004][ T8317] team_slave_1: entered allmulticast mode [ 160.614874][ T8317] team0: left allmulticast mode [ 160.620640][ T8317] team_slave_0: left allmulticast mode [ 160.627006][ T8317] team_slave_1: left allmulticast mode [ 160.632804][ T8317] team0: left promiscuous mode [ 160.638859][ T8317] team_slave_0: left promiscuous mode [ 160.644362][ T8317] team_slave_1: left promiscuous mode [ 160.894782][ T8340] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 160.908632][ T5105] Bluetooth: hci0: command tx timeout [ 160.951834][ T8340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.972'. [ 160.975086][ T8340] bond0: entered promiscuous mode [ 160.994813][ T8340] bond_slave_0: entered promiscuous mode [ 161.002893][ T8340] bond_slave_1: entered promiscuous mode [ 161.013957][ T8340] team0: entered promiscuous mode [ 161.023192][ T8340] team_slave_0: entered promiscuous mode [ 161.029569][ T8340] team_slave_1: entered promiscuous mode [ 161.050109][ T8340] macvlan2: entered promiscuous mode [ 161.061383][ T8340] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 161.069980][ T8340] bond0: entered allmulticast mode [ 161.075334][ T8340] bond_slave_0: entered allmulticast mode [ 161.082256][ T8340] bond_slave_1: entered allmulticast mode [ 161.088538][ T8340] team0: entered allmulticast mode [ 161.093919][ T8340] team_slave_0: entered allmulticast mode [ 161.109621][ T8340] team_slave_1: entered allmulticast mode [ 161.124420][ T8340] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 161.157104][ T8340] bridge0: port 1(bond0) entered blocking state [ 161.179640][ T8340] bridge0: port 1(bond0) entered disabled state [ 161.221796][ T8340] bridge0: port 1(bond0) entered blocking state [ 161.228204][ T8340] bridge0: port 1(bond0) entered forwarding state [ 161.512489][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.588088][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.632363][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.639628][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.687735][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.695111][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.839056][ T8381] vxcan2: entered allmulticast mode [ 161.927548][ T8381] vxcan4: entered allmulticast mode [ 162.101037][ T8394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.992'. [ 162.119973][ T8395] netlink: 'syz.0.993': attribute type 8 has an invalid length. [ 162.144278][ T8394] ebt_among: dst integrity fail: 102 [ 162.163379][ T8393] ebt_among: dst integrity fail: 102 [ 162.536777][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.572880][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 162.601697][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 162.634335][ T8413] netlink: 816 bytes leftover after parsing attributes in process `syz.0.1000'. [ 162.752959][ T8031] veth0_vlan: entered promiscuous mode [ 162.806810][ T8031] veth1_vlan: entered promiscuous mode [ 162.928040][ T8031] veth0_macvtap: entered promiscuous mode [ 162.956771][ T8031] veth1_macvtap: entered promiscuous mode [ 163.016075][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.038456][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.050063][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.073279][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.084739][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.096404][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.110416][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.121181][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.135365][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.175168][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.207253][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.222312][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.259432][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.283252][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.323420][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.344280][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.377562][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.413789][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.443468][ T8441] vcan0: Master is either lo or non-ether device [ 163.466386][ T8446] netlink: 'syz.1.1006': attribute type 12 has an invalid length. [ 163.478146][ T8446] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 163.498840][ T8446] netlink: 'syz.1.1006': attribute type 2 has an invalid length. [ 163.506655][ T8446] netlink: 'syz.1.1006': attribute type 2 has an invalid length. [ 163.524934][ T8446] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 163.533112][ T8446] netlink: 'syz.1.1006': attribute type 37 has an invalid length. [ 163.563257][ T8446] netlink: 'syz.1.1006': attribute type 2 has an invalid length. [ 163.585590][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.633209][ T8031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.642167][ T8452] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.1009'. [ 163.687511][ T8031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.696727][ T8031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.713906][ T8031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.880149][ T8450] dummy0: entered promiscuous mode [ 163.896772][ T8450] batman_adv: batadv0: Adding interface: macsec1 [ 163.905229][ T8450] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.932572][ T8450] batman_adv: batadv0: Interface activated: macsec1 [ 164.286711][ T2400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.319086][ T2400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.329763][ T8484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1019'. [ 164.359079][ T8484] netlink: 'syz.3.1019': attribute type 8 has an invalid length. [ 164.447174][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.458673][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.538859][ T8491] team0: Port device wlan1 added [ 164.696555][ T8497] hsr0: entered promiscuous mode [ 164.716196][ T8497] hsr0: left promiscuous mode [ 164.887794][ T8505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1024'. [ 165.114382][ T8515] SET target dimension over the limit! [ 165.202695][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 165.628530][ T8550] netlink: 'syz.0.1043': attribute type 13 has an invalid length. [ 165.790535][ T8559] ip6gretap0: entered promiscuous mode [ 165.837229][ T8559] ip6gretap0: left promiscuous mode [ 165.928755][ T8567] netlink: 'syz.2.1047': attribute type 13 has an invalid length. [ 166.164465][ T8570] __nla_validate_parse: 2 callbacks suppressed [ 166.164491][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1048'. [ 166.491229][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.494232][ T8586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.508066][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.517723][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.558822][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.572881][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.587416][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.843246][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.913562][ T8585] lo speed is unknown, defaulting to 1000 [ 167.041241][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.250512][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.475303][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.816508][ T8642] netlink: 868 bytes leftover after parsing attributes in process `syz.2.1066'. [ 167.933739][ T8647] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1070'. [ 167.953285][ T8585] chnl_net:caif_netlink_parms(): no params data found [ 167.990466][ T35] team0: left allmulticast mode [ 167.995390][ T35] team_slave_0: left allmulticast mode [ 168.028605][ T35] team_slave_1: left allmulticast mode [ 168.034147][ T35] bond0: left allmulticast mode [ 168.069208][ T35] bond_slave_0: left allmulticast mode [ 168.081716][ T35] bond_slave_1: left allmulticast mode [ 168.103933][ T35] bridge0: port 3(team0) entered disabled state [ 168.136118][ T35] bridge_slave_1: left allmulticast mode [ 168.158780][ T35] bridge_slave_1: left promiscuous mode [ 168.180626][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.232010][ T35] bridge_slave_0: left allmulticast mode [ 168.240402][ T35] bridge_slave_0: left promiscuous mode [ 168.252019][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.658685][ T5113] Bluetooth: hci2: command tx timeout [ 168.942758][ T35] bond0 (unregistering): left promiscuous mode [ 168.950915][ T35] bond_slave_0: left promiscuous mode [ 168.956806][ T35] bond_slave_1: left promiscuous mode [ 168.968161][ T35] team0: Port device bond0 removed [ 168.976891][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.991348][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.003486][ T35] bond0 (unregistering): Released all slaves [ 169.042189][ T8663] validate_nla: 3 callbacks suppressed [ 169.042210][ T8663] netlink: 'syz.3.1076': attribute type 5 has an invalid length. [ 169.070178][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 169.234619][ T8651] lo speed is unknown, defaulting to 1000 [ 169.522452][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.548717][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.566783][ T8585] bridge_slave_0: entered allmulticast mode [ 169.584405][ T8585] bridge_slave_0: entered promiscuous mode [ 169.615983][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.635002][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.653013][ T8585] bridge_slave_1: entered allmulticast mode [ 169.667516][ T8585] bridge_slave_1: entered promiscuous mode [ 169.789099][ T8709] x_tables: duplicate underflow at hook 1 [ 169.942490][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.987026][ T35] hsr_slave_0: left promiscuous mode [ 170.004525][ T35] hsr_slave_1: left promiscuous mode [ 170.020897][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.038689][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.064973][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.083202][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.135511][ T35] veth1_macvtap: left promiscuous mode [ 170.148484][ T35] veth0_macvtap: left promiscuous mode [ 170.165008][ T35] veth1_vlan: left promiscuous mode [ 170.175041][ T35] veth0_vlan: left promiscuous mode [ 170.743664][ T5113] Bluetooth: hci2: command tx timeout [ 170.853486][ T35] team_slave_1 (unregistering): left promiscuous mode [ 170.863388][ T35] team0 (unregistering): Port device team_slave_1 removed [ 170.911374][ T35] team_slave_0 (unregistering): left promiscuous mode [ 170.924656][ T35] team0 (unregistering): Port device team_slave_0 removed [ 171.456943][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.822271][ T8585] team0: Port device team_slave_0 added [ 171.844001][ T8585] team0: Port device team_slave_1 added [ 172.029866][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.045027][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.083418][ T8585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.109417][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.116427][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.179207][ T8585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.475172][ T8585] hsr_slave_0: entered promiscuous mode [ 172.499000][ T8585] hsr_slave_1: entered promiscuous mode [ 172.515020][ T8585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.524340][ T8585] Cannot create hsr debugfs directory [ 172.624120][ T8773] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 172.648617][ T8773] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 172.681298][ T8773] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 172.696580][ T8773] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 172.704571][ T8773] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 172.718441][ T8773] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 172.727118][ T8773] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 172.736955][ T8773] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 172.748789][ T8773] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 172.817499][ T8779] bridge0: port 3(macsec0) entered blocking state [ 172.825105][ T5113] Bluetooth: hci2: command tx timeout [ 172.858618][ T8779] bridge0: port 3(macsec0) entered disabled state [ 172.871222][ T8779] macsec0: entered allmulticast mode [ 172.877050][ T8779] veth1_macvtap: entered allmulticast mode [ 172.887127][ T8779] macsec0: entered promiscuous mode [ 172.895598][ T8779] bridge0: port 3(macsec0) entered blocking state [ 172.902701][ T8779] bridge0: port 3(macsec0) entered forwarding state [ 173.269563][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 173.304168][ T8813] veth0_macvtap: left promiscuous mode [ 173.546866][ T8831] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1123'. [ 173.683618][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 174.027631][ T8853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.035050][ T8853] IPv6: NLM_F_CREATE should be set when creating new route [ 174.042384][ T8853] IPv6: NLM_F_CREATE should be set when creating new route [ 174.068564][ T8585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.085431][ T8585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.219261][ T8585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.244704][ T8859] sit0: entered promiscuous mode [ 174.263550][ T8863] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1133'. [ 174.291112][ T8859] validate_nla: 1 callbacks suppressed [ 174.291135][ T8859] netlink: 'syz.4.1130': attribute type 1 has an invalid length. [ 174.321892][ T8859] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1130'. [ 174.353721][ T8866] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1133'. [ 174.386463][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 174.418806][ T8585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.503108][ T8870] netlink: 6204 bytes leftover after parsing attributes in process `syz.4.1135'. [ 174.528994][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 174.540302][ T8868] xt_ecn: cannot match TCP bits for non-tcp packets [ 174.560676][ T8870] netlink: 6204 bytes leftover after parsing attributes in process `syz.4.1135'. [ 174.776598][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.814448][ T8879] syz.0.1138[8879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.814736][ T8879] syz.0.1138[8879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.854205][ T8585] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.898661][ T5113] Bluetooth: hci2: command tx timeout [ 174.906506][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.913769][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.963771][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.971064][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.675264][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.843243][ T8585] veth0_vlan: entered promiscuous mode [ 175.881514][ T8585] veth1_vlan: entered promiscuous mode [ 175.994541][ T8585] veth0_macvtap: entered promiscuous mode [ 175.996616][ T8918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.037107][ T8585] veth1_macvtap: entered promiscuous mode [ 176.111543][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.143490][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.165113][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.196295][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.209369][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.235856][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.265983][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.291409][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.322411][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.350826][ T8933] netlink: 'syz.2.1155': attribute type 33 has an invalid length. [ 176.424074][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.468587][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.488361][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.510326][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.538534][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.559083][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.572686][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.596005][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.615028][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.637915][ T8585] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.676281][ T8585] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.689457][ T8585] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.703923][ T8585] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.056500][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.075462][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.152473][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.185077][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.429719][ T8985] netlink: 'syz.0.1169': attribute type 8 has an invalid length. [ 177.457715][ T8985] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 177.629717][ T8992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.792817][ T9004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.949752][ T9012] netlink: 'syz.0.1178': attribute type 2 has an invalid length. [ 178.156508][ T9024] dccp_invalid_packet: P.Data Offset(0) too small [ 178.723874][ T9053] __nla_validate_parse: 21 callbacks suppressed [ 178.723897][ T9053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1191'. [ 178.891348][ T9061] trusted_key: syz.3.1191 sent an empty control message without MSG_MORE. [ 179.359676][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1199'. [ 180.103394][ T9119] can: request_module (can-proto-0) failed. [ 180.117555][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 180.175642][ T9131] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.185934][ T9131] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.195369][ T9131] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.204414][ T9131] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.273018][ T9131] vxlan0: entered promiscuous mode [ 180.307523][ T9137] netlink: 'syz.4.1216': attribute type 2 has an invalid length. [ 180.324138][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 180.423803][ T9142] netlink: 'syz.3.1218': attribute type 6 has an invalid length. [ 180.447980][ T9142] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1218'. [ 180.528205][ T9150] IPv6: addrconf: prefix option has invalid lifetime [ 180.591196][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1221'. [ 180.674708][ T9155] sctp: [Deprecated]: syz.4.1223 (pid 9155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.674708][ T9155] Use struct sctp_sack_info instead [ 181.015379][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1226'. [ 181.131261][ T9173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1228'. [ 181.234941][ T9177] netlink: 'syz.1.1230': attribute type 17 has an invalid length. [ 181.814168][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 181.992875][ T9214] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 182.013163][ T9213] IPVS: stopping backup sync thread 9214 ... [ 182.141124][ T9220] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1241'. [ 182.150952][ T9220] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 182.450556][ T9238] netlink: 'syz.1.1247': attribute type 5 has an invalid length. [ 182.623915][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'. [ 182.660672][ T9253] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.670353][ T9253] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.679629][ T9253] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.688489][ T9253] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.731241][ T9256] syz.0.1252[9256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.731429][ T9256] syz.0.1252[9256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.760133][ T9253] vxlan0: entered promiscuous mode [ 183.030353][ T9265] netlink: 'syz.2.1255': attribute type 5 has an invalid length. [ 183.057782][ T9265] : entered promiscuous mode [ 183.081842][ T9265] bridge_slave_1: left allmulticast mode [ 183.087574][ T9265] bridge_slave_1: left promiscuous mode [ 183.102685][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.127982][ T9265] bridge_slave_0: left allmulticast mode [ 183.143972][ T9265] bridge_slave_0: left promiscuous mode [ 183.154916][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.159312][ T9271] dccp_invalid_packet: P.Data Offset(172) too large [ 183.482576][ T9276] dvmrp0: entered allmulticast mode [ 183.495078][ T9282] netlink: 'syz.4.1262': attribute type 10 has an invalid length. [ 183.522091][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.564366][ T9282] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.649624][ T9291] netlink: 'syz.3.1264': attribute type 5 has an invalid length. [ 183.756704][ T9291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.191280][ T9327] __nla_validate_parse: 3 callbacks suppressed [ 184.191308][ T9327] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1273'. [ 184.489425][ T929] IPVS: starting estimator thread 0... [ 184.618509][ T9348] IPVS: using max 17 ests per chain, 40800 per kthread [ 184.927887][ T9373] netlink: 'syz.0.1286': attribute type 9 has an invalid length. [ 184.966938][ T9373] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1286'. [ 185.104990][ T9383] netlink: 'syz.4.1288': attribute type 11 has an invalid length. [ 185.338043][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1292'. [ 185.430405][ T9393] netlink: 'syz.3.1292': attribute type 5 has an invalid length. [ 185.457437][ T9401] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1294'. [ 185.498456][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 185.522052][ T9403] ipt_ECN: cannot use operation on non-tcp rule [ 185.548148][ T9403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1295'. [ 185.822756][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 185.879501][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 185.940176][ T9414] ip6gretap0: entered promiscuous mode [ 185.947084][ T9414] macvtap1: entered promiscuous mode [ 185.956178][ T9414] macvtap1: entered allmulticast mode [ 185.970571][ T9414] ip6gretap0: entered allmulticast mode [ 186.249865][ T9435] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1305'. [ 186.394974][ T9442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.466394][ T9442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.563637][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 186.884643][ T9473] netlink: 'syz.4.1317': attribute type 1 has an invalid length. [ 186.892714][ T9473] netlink: 'syz.4.1317': attribute type 8 has an invalid length. [ 186.971542][ T9477] netlink: 'syz.4.1318': attribute type 1 has an invalid length. [ 186.980794][ T9477] netlink: 'syz.4.1318': attribute type 1 has an invalid length. [ 187.832608][ T9524] lo speed is unknown, defaulting to 1000 [ 189.150544][ T9566] x_tables: duplicate underflow at hook 3 [ 189.946183][ T9583] netlink: 'syz.0.1348': attribute type 5 has an invalid length. [ 190.253915][ T9588] pimreg: entered allmulticast mode [ 190.329793][ T9590] pimreg: left allmulticast mode [ 190.481149][ T9592] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 190.649019][ T9597] __nla_validate_parse: 7 callbacks suppressed [ 190.649046][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1351'. [ 190.738203][ T9602] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1354'. [ 190.861627][ T9606] sctp: [Deprecated]: syz.2.1355 (pid 9606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.861627][ T9606] Use struct sctp_sack_info instead [ 191.105608][ T9625] netlink: 'syz.2.1363': attribute type 5 has an invalid length. [ 191.472428][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 191.510380][ T9656] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1373'. [ 191.741377][ T9662] netlink: 'syz.1.1377': attribute type 5 has an invalid length. [ 192.322557][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1392'. [ 192.332461][ T9698] lo speed is unknown, defaulting to 1000 [ 192.338628][ T9705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1391'. [ 192.387843][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1391'. [ 192.942634][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 193.000868][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 193.007885][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.015925][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.023834][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.031956][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.039871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.047826][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.055737][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.063746][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.071651][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.079657][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.087516][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.095513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.103458][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.111524][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.119434][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.127385][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.135307][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.143307][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.151208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.159188][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.167059][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.175059][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.182963][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.190949][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.198856][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.206821][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.214760][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.222756][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.230660][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.238673][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.246643][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.254646][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.262558][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.270567][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.278470][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.286421][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.288684][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1403'. [ 193.294294][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.294425][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.294444][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.294528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.294546][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.294640][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.294657][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.294743][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.294759][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.294854][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.294870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.390743][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.398723][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.406684][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.414616][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.422616][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.430508][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.438484][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.446359][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.697893][ T9765] netlink: 'syz.1.1408': attribute type 3 has an invalid length. [ 193.728889][ T9765] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1408'. [ 193.858809][ T9772] netlink: 'syz.2.1410': attribute type 1 has an invalid length. [ 193.866992][ T9772] netlink: 'syz.2.1410': attribute type 1 has an invalid length. [ 193.875651][ T9772] netlink: 'syz.2.1410': attribute type 2 has an invalid length. [ 194.684033][ T9803] syzkaller0: entered promiscuous mode [ 194.702813][ T9803] syzkaller0: entered allmulticast mode [ 197.005866][ T9817] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.027071][ T9817] syzkaller0: entered promiscuous mode [ 197.034342][ T9817] syzkaller0: entered allmulticast mode [ 199.192719][ T9848] netlink: 'syz.4.1428': attribute type 10 has an invalid length. [ 199.450064][ T9874] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 199.507972][ T9874] __nla_validate_parse: 4 callbacks suppressed [ 199.507996][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 199.745241][ T9889] netlink: 'syz.1.1441': attribute type 5 has an invalid length. [ 200.033957][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.073094][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'. [ 200.212513][ T9903] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 200.270352][ T9903] syzkaller0: entered promiscuous mode [ 200.286515][ T9903] syzkaller0: entered allmulticast mode [ 200.719853][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 203.046791][ T9927] netlink: 'syz.3.1455': attribute type 5 has an invalid length. [ 203.207525][ T9940] netlink: 'syz.2.1459': attribute type 8 has an invalid length. [ 203.731902][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 203.973297][ T9976] netlink: 'syz.2.1468': attribute type 5 has an invalid length. [ 204.012693][ T9980] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1470'. [ 204.052459][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 204.077881][ T9982] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 204.111804][ T9982] syzkaller0: entered promiscuous mode [ 204.135755][ T9982] syzkaller0: entered allmulticast mode [ 204.183305][ T9991] Bluetooth: MGMT ver 1.22 [ 204.435088][ T9999] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 204.466135][T10005] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1476'. [ 204.488661][ T9999] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 204.671906][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'. [ 204.700258][T10011] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 204.705547][T10013] netlink: 'syz.1.1479': attribute type 10 has an invalid length. [ 204.744475][T10013] bond0: (slave bond_slave_0): Releasing backup interface [ 204.806618][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 204.852125][T10018] vlan5: entered promiscuous mode [ 207.138455][ T5114] Bluetooth: hci3: command 0x0406 tx timeout [ 207.144597][ T4492] Bluetooth: hci1: command 0x0406 tx timeout [ 207.340760][T10040] netlink: 'syz.1.1486': attribute type 4 has an invalid length. [ 207.554912][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 207.588424][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 207.638482][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1492'. [ 207.961494][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'. [ 208.013398][T10070] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.061753][T10070] syzkaller0: entered promiscuous mode [ 208.070600][T10079] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1502'. [ 208.085312][T10070] syzkaller0: entered allmulticast mode [ 208.094517][T10075] netlink: 'syz.3.1501': attribute type 4 has an invalid length. [ 208.164881][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1502'. [ 208.228598][T10085] netlink: 'syz.0.1504': attribute type 3 has an invalid length. [ 208.246089][T10085] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1504'. [ 208.281597][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'. [ 208.672679][T10112] ip6tnl1: entered promiscuous mode [ 208.684360][T10112] ip6tnl1: entered allmulticast mode [ 210.788428][T10131] bridge0: entered promiscuous mode [ 210.799407][T10132] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1518'. [ 210.901334][T10133] bridge0: left promiscuous mode [ 210.930580][T10140] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1521'. [ 210.971003][T10140] openvswitch: netlink: Flow key attribute not present in set flow. [ 211.259475][T10161] netlink: 'syz.1.1527': attribute type 4 has an invalid length. [ 211.301622][T10163] can: request_module (can-proto-0) failed. [ 211.481535][T10175] netlink: 'syz.1.1530': attribute type 1 has an invalid length. [ 211.524701][T10175] bond1: entered promiscuous mode [ 211.532483][T10176] netlink: 'syz.0.1532': attribute type 21 has an invalid length. [ 211.564017][T10176] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1532'. [ 211.597323][T10176] netlink: 'syz.0.1532': attribute type 4 has an invalid length. [ 211.618954][T10176] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1532'. [ 211.655328][T10175] bond1: (slave ip6gretap1): making interface the new active one [ 211.663541][T10175] ip6gretap1: entered promiscuous mode [ 211.673001][T10175] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 211.682148][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 211.708760][T10178] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 211.717375][T10178] ip6gretap1: left promiscuous mode [ 211.763288][T10178] bond1 (unregistering): Released all slaves [ 212.025311][T10191] pim6reg: entered allmulticast mode [ 212.086074][T10206] netlink: 'syz.1.1539': attribute type 11 has an invalid length. [ 212.092197][T10208] netlink: 'syz.4.1541': attribute type 4 has an invalid length. [ 212.110394][T10191] pim6reg: left allmulticast mode [ 212.120525][T10206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1539'. [ 212.128851][T10210] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 212.444624][T10228] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 212.556107][T10227] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 212.606720][T10227] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 212.880450][T10246] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 213.007887][T10251] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 213.165092][T10262] netlink: 'syz.1.1554': attribute type 4 has an invalid length. [ 213.599842][T10289] nicvf0: tun_chr_ioctl cmd 1074025677 [ 213.605484][T10289] nicvf0: linktype set to 1 [ 213.766014][T10297] netlink: 'syz.4.1567': attribute type 4 has an invalid length. [ 214.008187][T10318] netlink: 'syz.4.1574': attribute type 10 has an invalid length. [ 214.120114][T10315] syz.2.1573: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 214.146137][T10315] CPU: 1 PID: 10315 Comm: syz.2.1573 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 214.156554][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 214.166668][T10315] Call Trace: [ 214.169990][T10315] [ 214.172963][T10315] dump_stack_lvl+0x241/0x360 [ 214.177702][T10315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.182967][T10315] ? __pfx__printk+0x10/0x10 [ 214.187587][T10315] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 214.194028][T10315] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 214.200563][T10315] warn_alloc+0x278/0x410 [ 214.204928][T10315] ? __pfx_warn_alloc+0x10/0x10 [ 214.209811][T10315] ? xskq_create+0xb6/0x170 [ 214.214344][T10315] ? __get_vm_area_node+0x23d/0x270 [ 214.219564][T10315] __vmalloc_node_range_noprof+0x69f/0x1460 [ 214.225529][T10315] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.231883][T10315] ? __kasan_kmalloc+0x98/0xb0 [ 214.236673][T10315] ? xskq_create+0x54/0x170 [ 214.241205][T10315] vmalloc_user_noprof+0x74/0x80 [ 214.246160][T10315] ? xskq_create+0xb6/0x170 [ 214.250771][T10315] xskq_create+0xb6/0x170 [ 214.255123][T10315] xsk_init_queue+0xa1/0x100 [ 214.259740][T10315] xsk_setsockopt+0x4ea/0x950 [ 214.264442][T10315] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.269669][T10315] ? __pfx_lock_acquire+0x10/0x10 [ 214.274711][T10315] ? aa_sock_opt_perm+0x79/0x120 [ 214.279675][T10315] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 214.285255][T10315] ? security_socket_setsockopt+0x87/0xb0 [ 214.290996][T10315] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.296245][T10315] do_sock_setsockopt+0x3af/0x720 [ 214.301301][T10315] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 214.306865][T10315] ? __fget_files+0x29/0x470 [ 214.311485][T10315] ? __fget_files+0x3f6/0x470 [ 214.316194][T10315] __sys_setsockopt+0x1ae/0x250 [ 214.321073][T10315] __x64_sys_setsockopt+0xb5/0xd0 [ 214.326131][T10315] do_syscall_64+0xf3/0x230 [ 214.330676][T10315] ? clear_bhb_loop+0x35/0x90 [ 214.335369][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.341337][T10315] RIP: 0033:0x7f959f775bd9 [ 214.345863][T10315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.365497][T10315] RSP: 002b:00007f95a04c9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.373928][T10315] RAX: ffffffffffffffda RBX: 00007f959f903f60 RCX: 00007f959f775bd9 [ 214.381927][T10315] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000010 [ 214.389930][T10315] RBP: 00007f959f7e4aa1 R08: 0000000000000004 R09: 0000000000000000 [ 214.397957][T10315] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 214.405942][T10315] R13: 000000000000000b R14: 00007f959f903f60 R15: 00007ffdfa1cea78 [ 214.413946][T10315] [ 214.521753][T10315] Mem-Info: [ 214.527401][T10315] active_anon:3002 inactive_anon:0 isolated_anon:0 [ 214.527401][T10315] active_file:1450 inactive_file:38193 isolated_file:0 [ 214.527401][T10315] unevictable:768 dirty:197 writeback:0 [ 214.527401][T10315] slab_reclaimable:9188 slab_unreclaimable:98847 [ 214.527401][T10315] mapped:13593 shmem:1247 pagetables:642 [ 214.527401][T10315] sec_pagetables:0 bounce:0 [ 214.527401][T10315] kernel_misc_reclaimable:0 [ 214.527401][T10315] free:1402551 free_pcp:409 free_cma:0 [ 214.601207][T10315] Node 0 active_anon:12008kB inactive_anon:0kB active_file:5800kB inactive_file:152688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:54372kB dirty:788kB writeback:0kB shmem:3452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10128kB pagetables:2668kB sec_pagetables:0kB all_unreclaimable? no [ 214.637219][T10333] netlink: 'syz.4.1575': attribute type 1 has an invalid length. [ 214.664961][T10333] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1575'. [ 214.694111][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1578'. [ 214.708387][T10315] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 214.739759][T10315] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.809835][T10315] lowmem_reserve[]: 0 2571 2571 0 0 [ 214.832472][T10315] Node 0 DMA32 free:1643056kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:13760kB inactive_anon:0kB active_file:5800kB inactive_file:152388kB unevictable:1536kB writepending:788kB present:3129332kB managed:2659868kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:2224kB free_cma:0kB [ 214.903851][T10328] team0 (unregistering): Port device team_slave_0 removed [ 214.940212][T10315] lowmem_reserve[]: 0 0 0 0 0 [ 214.952745][T10315] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:300kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 214.992884][T10328] team0 (unregistering): Port device team_slave_1 removed [ 215.023610][T10315] lowmem_reserve[]: 0 0 0 0 0 [ 215.041048][T10315] Node 1 Normal free:3947784kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.112069][T10315] lowmem_reserve[]: 0 0 0 0 0 [ 215.124842][T10315] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.164140][T10315] Node 0 DMA32: 1*4kB (U) 167*8kB (UME) 253*16kB (UME) 67*32kB (UME) 75*64kB (UME) 41*128kB (UME) 27*256kB (UM) 14*512kB (UM) 11*1024kB (UM) 6*2048kB (UME) 386*4096kB (M) = 1636268kB [ 215.208744][T10315] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.244848][T10315] Node 1 Normal: 4*4kB (U) 7*8kB (UM) 10*16kB (UM) 9*32kB (UM) 8*64kB (U) 4*128kB (U) 3*256kB (UM) 2*512kB (UM) 0*1024kB 2*2048kB (U) 962*4096kB (M) = 3947784kB [ 215.313025][T10315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.341069][T10315] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.369642][T10315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.396536][T10315] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.426569][T10315] 44130 total pagecache pages [ 215.436876][T10315] 0 pages in swap cache [ 215.450773][T10315] Free swap = 124996kB [ 215.455011][T10315] Total swap = 124996kB [ 215.479799][T10315] 2097051 pages RAM [ 215.496784][T10315] 0 pages HighMem/MovableOnly [ 215.504287][T10315] 400874 pages reserved [ 215.514325][T10315] 0 pages cma reserved [ 215.523278][T10360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1586'. [ 216.347975][T10406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1600'. [ 216.371729][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1600'. [ 216.389262][T10406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1600'. [ 216.400367][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1600'. [ 216.743632][T10430] pimreg: entered allmulticast mode [ 216.807986][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 216.952357][T10447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'. [ 216.983628][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 217.010327][T10449] (unnamed net_device) (uninitialized): (slave tunl0): Device is not bonding slave [ 217.036997][T10449] (unnamed net_device) (uninitialized): option active_slave: invalid value (tunl0) [ 217.129287][T10457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.244947][T10468] validate_nla: 1 callbacks suppressed [ 217.244967][T10468] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 218.085966][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 218.135068][T10507] veth4: entered promiscuous mode [ 218.160000][T10507] veth4: entered allmulticast mode [ 218.448739][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1639'. [ 218.472615][T10521] openvswitch: netlink: Missing key (keys=40, expected=100) [ 218.489333][T10525] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1640'. [ 218.676487][T10533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.638609][T10575] netlink: 'syz.0.1654': attribute type 2 has an invalid length. [ 219.829351][T10582] netlink: 'syz.0.1658': attribute type 4 has an invalid length. [ 220.042661][T10591] pim6reg: entered allmulticast mode [ 220.304890][T10600] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1) [ 220.782128][T10621] netlink: 'syz.1.1673': attribute type 4 has an invalid length. [ 220.996094][T10630] netlink: 'syz.4.1675': attribute type 10 has an invalid length. [ 221.287552][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 221.308717][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.607886][T10665] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 221.841459][T10678] x_tables: ip_tables: ah match: only valid for protocol 51 [ 222.371131][T10705] rdma_rxe: rxe_newlink: failed to add bond0 [ 222.407298][T10711] tipc: Started in network mode [ 222.412486][T10711] tipc: Node identity , cluster identity 4711 [ 222.419080][T10711] tipc: Failed to set node id, please configure manually [ 222.430014][T10711] tipc: Enabling of bearer rejected, failed to enable media [ 222.501465][ T5105] Bluetooth: hci4: command 0x0406 tx timeout [ 222.883827][T10731] netlink: 'syz.4.1718': attribute type 4 has an invalid length. [ 223.084897][T10739] x_tables: duplicate underflow at hook 1 [ 223.240156][T10748] __nla_validate_parse: 5 callbacks suppressed [ 223.240179][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1722'. [ 223.299760][T10748] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 223.404168][T10752] lo speed is unknown, defaulting to 1000 [ 223.509566][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.521501][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.530513][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.562054][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.579681][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.587354][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.587999][T10761] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 223.740919][T10758] lo speed is unknown, defaulting to 1000 [ 223.902597][T10770] netlink: 'syz.4.1731': attribute type 4 has an invalid length. [ 224.378739][T10780] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 224.414570][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 224.492638][T10785] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 224.524477][T10785] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 224.545360][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'. [ 224.586829][T10790] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 224.637865][T10790] bond1 (unregistering): Released all slaves [ 224.702768][T10758] chnl_net:caif_netlink_parms(): no params data found [ 224.975608][T10809] netlink: 'syz.3.1742': attribute type 5 has an invalid length. [ 224.987456][T10811] vlan0: entered promiscuous mode [ 225.001192][T10811] vlan0: entered allmulticast mode [ 225.019845][T10811] veth0_vlan: entered allmulticast mode [ 225.057164][T10811] team0: Port device vlan0 added [ 225.066833][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.074441][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.082010][T10758] bridge_slave_0: entered allmulticast mode [ 225.090449][T10758] bridge_slave_0: entered promiscuous mode [ 225.100913][T10813] netlink: 'syz.2.1744': attribute type 4 has an invalid length. [ 225.109929][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.124923][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.132960][T10811] rdma_op ffff888062da99f0 conn xmit_rdma 0000000000000000 [ 225.140955][T10758] bridge_slave_1: entered allmulticast mode [ 225.153002][T10758] bridge_slave_1: entered promiscuous mode [ 225.162798][T10811] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1743'. [ 225.244951][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.281916][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.440690][T10758] team0: Port device team_slave_0 added [ 225.464761][T10758] team0: Port device team_slave_1 added [ 225.530059][T10835] dvmrp0: entered allmulticast mode [ 225.608695][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.626883][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.664496][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.688890][T10839] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 59592 - 0 [ 225.697995][T10839] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 59592 - 0 [ 225.707513][T10839] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 59592 - 0 [ 225.716498][ T5105] Bluetooth: hci4: command tx timeout [ 225.722167][T10839] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 59592 - 0 [ 225.722611][T10839] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 60149 - 0 [ 225.797477][T10839] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 60149 - 0 [ 225.806576][T10839] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 60149 - 0 [ 225.815788][T10839] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 60149 - 0 [ 225.824980][T10839] geneve2: entered promiscuous mode [ 225.831688][T10839] geneve2: entered allmulticast mode [ 225.844127][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.874937][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.941495][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.982391][T10854] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 226.012114][T10848] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1755'. [ 226.092150][T10758] hsr_slave_0: entered promiscuous mode [ 226.100525][T10758] hsr_slave_1: entered promiscuous mode [ 226.116347][T10758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.124377][T10758] Cannot create hsr debugfs directory [ 226.542908][T10758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.660455][T10880] netlink: 'syz.1.1765': attribute type 1 has an invalid length. [ 226.757904][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 226.767303][T10876] netlink: 'syz.1.1765': attribute type 1 has an invalid length. [ 226.775459][T10876] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1765'. [ 226.784923][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 226.887232][T10758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.039356][T10758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.213705][T10758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.234969][T10908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1775'. [ 227.248153][T10908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1775'. [ 227.554334][T10758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.594357][T10758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.609022][T10921] No such timeout policy "syz0" [ 227.618111][T10758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.645046][T10758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.788907][ T5105] Bluetooth: hci4: command tx timeout [ 227.865560][T10758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.905487][T10930] xt_bpf: check failed: parse error [ 228.004678][T10758] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.062969][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.070172][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.126496][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.133827][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.448535][T10955] netlink: 'syz.2.1787': attribute type 5 has an invalid length. [ 228.533439][T10758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.700552][T10758] veth0_vlan: entered promiscuous mode [ 228.727787][T10758] veth1_vlan: entered promiscuous mode [ 228.812074][T10758] veth0_macvtap: entered promiscuous mode [ 228.836575][T10758] veth1_macvtap: entered promiscuous mode [ 228.906030][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.917568][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.932263][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.948378][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.973479][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.994661][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.013345][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.035344][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.045849][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.056622][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.083027][T10758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.110588][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.133861][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.144711][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.156892][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.166887][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.177623][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.201204][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.225104][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.251776][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.278276][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.301240][T10758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.353625][T10971] netlink: 'syz.4.1794': attribute type 3 has an invalid length. [ 229.393995][T10758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.422236][T10758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.447396][T10758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.480279][T10758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.619086][T10978] __nla_validate_parse: 1 callbacks suppressed [ 229.619110][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1796'. [ 229.699934][T10987] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 229.751174][T10988] netlink: 'syz.3.1793': attribute type 10 has an invalid length. [ 229.799606][T10988] bond0: (slave netdevsim0): Releasing backup interface [ 229.809394][T10988] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 229.817990][T10988] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 229.838385][T10988] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 229.846136][T10988] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 229.855269][T10988] team0: Port device netdevsim0 added [ 229.869776][ T5105] Bluetooth: hci4: command tx timeout [ 229.934358][T10992] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.1799'. [ 229.978014][T10215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.978349][T10992] netlink: 'syz.4.1799': attribute type 1 has an invalid length. [ 230.000633][T10215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.137657][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 230.158072][ T3897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.199792][ T3897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.603601][T11024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1808'. [ 231.058791][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 231.536463][T11060] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 231.713579][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1826'. [ 231.765690][T11080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1827'. [ 231.845784][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 231.858809][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1831'. [ 231.874868][T11086] gtp1: entered promiscuous mode [ 231.880233][T11086] gtp1: entered allmulticast mode [ 231.890454][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 232.106534][T11099] netlink: 'syz.1.1835': attribute type 4 has an invalid length. [ 232.228026][T11105] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 232.252965][T11105] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 232.821396][ T3897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.119121][T11122] C: renamed from lo (while UP) [ 233.154479][T11122] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 233.462802][T11138] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 233.477936][ T3897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.596930][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.608876][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.630626][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.641408][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.651220][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.661971][ T3897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.668692][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.810690][ T3897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.857039][T11146] lo speed is unknown, defaulting to 1000 [ 234.337116][T11178] xt_SECMARK: invalid mode: 0 [ 234.345726][ T3897] bridge_slave_1: left allmulticast mode [ 234.359414][ T3897] bridge_slave_1: left promiscuous mode [ 234.365428][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.376842][ T3897] bridge_slave_0: left allmulticast mode [ 234.387380][ T3897] bridge_slave_0: left promiscuous mode [ 234.393501][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.195722][ T3897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.213955][ T3897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.226162][ T3897] bond0 (unregistering): Released all slaves [ 235.308593][T11210] netlink: 'syz.4.1869': attribute type 4 has an invalid length. [ 235.440221][T11146] chnl_net:caif_netlink_parms(): no params data found [ 235.610931][T11229] __nla_validate_parse: 7 callbacks suppressed [ 235.610955][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 235.698857][ T5113] Bluetooth: hci4: command tx timeout [ 235.876550][T11242] sit0: left promiscuous mode [ 236.092149][T11146] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.101314][T11146] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.114006][T11146] bridge_slave_0: entered allmulticast mode [ 236.122827][T11146] bridge_slave_0: entered promiscuous mode [ 236.158818][ T3897] hsr_slave_0: left promiscuous mode [ 236.188019][ T3897] hsr_slave_1: left promiscuous mode [ 236.195099][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.209440][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.227205][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.236383][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.267254][ T3897] veth1_macvtap: left promiscuous mode [ 236.272956][ T3897] veth0_macvtap: left promiscuous mode [ 236.278983][ T3897] veth1_vlan: left promiscuous mode [ 236.284372][ T3897] veth0_vlan: left promiscuous mode [ 236.987836][ T3897] team0 (unregistering): Port device team_slave_1 removed [ 237.049244][ T3897] team0 (unregistering): Port device team_slave_0 removed [ 237.606563][T11146] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.616808][T11146] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.624785][T11146] bridge_slave_1: entered allmulticast mode [ 237.633153][T11146] bridge_slave_1: entered promiscuous mode [ 237.779093][ T5113] Bluetooth: hci4: command tx timeout [ 237.837955][T11268] netlink: 'syz.4.1885': attribute type 5 has an invalid length. [ 237.874734][T11146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.900323][T11146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.927773][T11270] netlink: 'syz.2.1887': attribute type 3 has an invalid length. [ 238.134245][T11146] team0: Port device team_slave_0 added [ 238.170891][T11287] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 238.243658][T11146] team0: Port device team_slave_1 added [ 238.316622][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 238.350266][T11146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.377397][T11146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.465573][T11146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.535735][T11146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.559489][T11146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.662843][T11146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.798979][T11146] hsr_slave_0: entered promiscuous mode [ 238.807233][T11146] hsr_slave_1: entered promiscuous mode [ 238.827267][T11146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.835095][T11146] Cannot create hsr debugfs directory [ 239.299892][T11344] netlink: 'syz.4.1911': attribute type 10 has an invalid length. [ 239.324023][T11344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1911'. [ 239.436855][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 239.516741][T11350] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 239.860423][ T5113] Bluetooth: hci4: command tx timeout [ 239.887828][T11368] lo speed is unknown, defaulting to 1000 [ 239.956119][T11378] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 239.956394][T11146] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.971989][T11378] netlink: 112848 bytes leftover after parsing attributes in process `syz.1.1922'. [ 239.985627][T11146] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.992897][T11378] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 240.057773][T11146] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.092072][T11146] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.371674][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'. [ 240.542586][T11146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.637942][T11146] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.682774][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.690083][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.764156][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.771458][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.334750][T11146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.398586][ T2489] ================================================================== [ 241.406716][ T2489] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 241.414809][ T2489] Read of size 8 at addr ffff888079da68b8 by task kworker/u8:10/2489 [ 241.422889][ T2489] [ 241.425222][ T2489] CPU: 1 PID: 2489 Comm: kworker/u8:10 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 241.435557][ T2489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 241.445625][ T2489] Workqueue: l2tp l2tp_tunnel_del_work [ 241.451101][ T2489] Call Trace: [ 241.454383][ T2489] [ 241.457320][ T2489] dump_stack_lvl+0x241/0x360 [ 241.462013][ T2489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.467225][ T2489] ? __pfx__printk+0x10/0x10 [ 241.471837][ T2489] ? _printk+0xd5/0x120 [ 241.476011][ T2489] ? __virt_addr_valid+0x183/0x520 [ 241.481140][ T2489] ? __virt_addr_valid+0x183/0x520 [ 241.486288][ T2489] print_report+0x169/0x550 [ 241.490812][ T2489] ? __virt_addr_valid+0x183/0x520 [ 241.495942][ T2489] ? __virt_addr_valid+0x183/0x520 [ 241.501069][ T2489] ? __virt_addr_valid+0x44e/0x520 [ 241.506201][ T2489] ? __phys_addr+0xba/0x170 [ 241.510731][ T2489] ? l2tp_tunnel_del_work+0xe5/0x330 [ 241.516029][ T2489] kasan_report+0x143/0x180 [ 241.520554][ T2489] ? l2tp_tunnel_del_work+0xe5/0x330 [ 241.525854][ T2489] l2tp_tunnel_del_work+0xe5/0x330 [ 241.530978][ T2489] ? process_scheduled_works+0x945/0x1830 [ 241.536711][ T2489] process_scheduled_works+0xa2c/0x1830 [ 241.542296][ T2489] ? __pfx_process_scheduled_works+0x10/0x10 [ 241.548307][ T2489] ? assign_work+0x364/0x3d0 [ 241.552920][ T2489] worker_thread+0x86d/0xd50 [ 241.557642][ T2489] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 241.563600][ T2489] ? __kthread_parkme+0x169/0x1d0 [ 241.568655][ T2489] ? __pfx_worker_thread+0x10/0x10 [ 241.573779][ T2489] kthread+0x2f0/0x390 [ 241.577891][ T2489] ? __pfx_worker_thread+0x10/0x10 [ 241.583030][ T2489] ? __pfx_kthread+0x10/0x10 [ 241.587640][ T2489] ret_from_fork+0x4b/0x80 [ 241.592080][ T2489] ? __pfx_kthread+0x10/0x10 [ 241.596693][ T2489] ret_from_fork_asm+0x1a/0x30 [ 241.601487][ T2489] [ 241.604521][ T2489] [ 241.606845][ T2489] Allocated by task 11425: [ 241.611272][ T2489] kasan_save_track+0x3f/0x80 [ 241.615971][ T2489] __kasan_kmalloc+0x98/0xb0 [ 241.620586][ T2489] __kmalloc_noprof+0x1f9/0x400 [ 241.625453][ T2489] l2tp_session_create+0x3b/0xc20 [ 241.630503][ T2489] pppol2tp_connect+0xca3/0x17a0 [ 241.635454][ T2489] __sys_connect+0x2df/0x310 [ 241.640052][ T2489] __x64_sys_connect+0x7a/0x90 [ 241.644825][ T2489] do_syscall_64+0xf3/0x230 [ 241.649336][ T2489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.655237][ T2489] [ 241.657564][ T2489] Freed by task 11427: [ 241.661729][ T2489] kasan_save_track+0x3f/0x80 [ 241.666416][ T2489] kasan_save_free_info+0x40/0x50 [ 241.671462][ T2489] poison_slab_object+0xe0/0x150 [ 241.676609][ T2489] __kasan_slab_free+0x37/0x60 [ 241.681411][ T2489] kfree+0x149/0x360 [ 241.685323][ T2489] __sk_destruct+0x58/0x5f0 [ 241.689845][ T2489] rcu_core+0xafd/0x1830 [ 241.694103][ T2489] handle_softirqs+0x2c4/0x970 [ 241.698903][ T2489] __irq_exit_rcu+0xf4/0x1c0 [ 241.703514][ T2489] irq_exit_rcu+0x9/0x30 [ 241.707766][ T2489] sysvec_apic_timer_interrupt+0x57/0xc0 [ 241.713425][ T2489] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.719423][ T2489] [ 241.721749][ T2489] Last potentially related work creation: [ 241.727468][ T2489] kasan_save_stack+0x3f/0x60 [ 241.732249][ T2489] __kasan_record_aux_stack+0xac/0xc0 [ 241.737636][ T2489] call_rcu+0x167/0xa70 [ 241.741802][ T2489] pppol2tp_release+0x24b/0x350 [ 241.746700][ T2489] sock_close+0xbc/0x240 [ 241.750950][ T2489] __fput+0x24a/0x8a0 [ 241.754939][ T2489] task_work_run+0x24f/0x310 [ 241.759549][ T2489] syscall_exit_to_user_mode+0x168/0x360 [ 241.765207][ T2489] do_syscall_64+0x100/0x230 [ 241.769804][ T2489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.775709][ T2489] [ 241.778034][ T2489] The buggy address belongs to the object at ffff888079da6800 [ 241.778034][ T2489] which belongs to the cache kmalloc-1k of size 1024 [ 241.792097][ T2489] The buggy address is located 184 bytes inside of [ 241.792097][ T2489] freed 1024-byte region [ffff888079da6800, ffff888079da6c00) [ 241.806000][ T2489] [ 241.808327][ T2489] The buggy address belongs to the physical page: [ 241.814753][ T2489] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79da0 [ 241.823535][ T2489] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 241.832039][ T2489] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 241.839596][ T2489] page_type: 0xffffefff(slab) [ 241.844712][ T2489] raw: 00fff00000000040 ffff888015041dc0 ffffea0000ab6c00 dead000000000002 [ 241.853302][ T2489] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 241.861913][ T2489] head: 00fff00000000040 ffff888015041dc0 ffffea0000ab6c00 dead000000000002 [ 241.870605][ T2489] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 241.879295][ T2489] head: 00fff00000000003 ffffea0001e76801 ffffffffffffffff 0000000000000000 [ 241.887975][ T2489] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 241.896650][ T2489] page dumped because: kasan: bad access detected [ 241.903085][ T2489] page_owner tracks the page as allocated [ 241.908800][ T2489] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3897, tgid 3897 (kworker/u8:11), ts 92215163875, free_ts 92166906882 [ 241.929571][ T2489] post_alloc_hook+0x1f3/0x230 [ 241.934356][ T2489] get_page_from_freelist+0x2e4c/0x2f10 [ 241.939916][ T2489] __alloc_pages_noprof+0x256/0x6c0 [ 241.945131][ T2489] alloc_slab_page+0x5f/0x120 [ 241.949821][ T2489] allocate_slab+0x5a/0x2f0 [ 241.954379][ T2489] ___slab_alloc+0xcd1/0x14b0 [ 241.959061][ T2489] __slab_alloc+0x58/0xa0 [ 241.963402][ T2489] __kmalloc_noprof+0x257/0x400 [ 241.968275][ T2489] ___neigh_create+0x691/0x2470 [ 241.973139][ T2489] ip6_finish_output2+0x1631/0x1680 [ 241.978346][ T2489] ip6_finish_output+0x41e/0x810 [ 241.983392][ T2489] ndisc_send_skb+0xab2/0x1380 [ 241.988180][ T2489] ndisc_send_ns+0xcc/0x160 [ 241.992697][ T2489] addrconf_dad_work+0xb45/0x16f0 [ 241.997734][ T2489] process_scheduled_works+0xa2c/0x1830 [ 242.003289][ T2489] worker_thread+0x86d/0xd50 [ 242.007978][ T2489] page last free pid 5149 tgid 5149 stack trace: [ 242.014310][ T2489] free_unref_page+0xd22/0xea0 [ 242.019119][ T2489] __put_partials+0xeb/0x130 [ 242.023720][ T2489] put_cpu_partial+0x17c/0x250 [ 242.028500][ T2489] __slab_free+0x2ea/0x3d0 [ 242.033033][ T2489] qlist_free_all+0x9e/0x140 [ 242.037640][ T2489] kasan_quarantine_reduce+0x14f/0x170 [ 242.043116][ T2489] __kasan_slab_alloc+0x23/0x80 [ 242.047978][ T2489] __kmalloc_node_noprof+0x1d2/0x440 [ 242.053294][ T2489] kvmalloc_node_noprof+0x72/0x190 [ 242.058435][ T2489] seq_read_iter+0x202/0xd60 [ 242.063057][ T2489] vfs_read+0x9bd/0xbc0 [ 242.067236][ T2489] ksys_read+0x1a0/0x2c0 [ 242.071496][ T2489] do_syscall_64+0xf3/0x230 [ 242.076035][ T2489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.081943][ T2489] [ 242.084357][ T2489] Memory state around the buggy address: [ 242.089991][ T2489] ffff888079da6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.098062][ T2489] ffff888079da6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.106168][ T2489] >ffff888079da6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.114251][ T2489] ^ [ 242.120152][ T2489] ffff888079da6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.128312][ T2489] ffff888079da6980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.136409][ T2489] ================================================================== [ 242.144619][ T2489] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 242.151852][ T2489] CPU: 1 PID: 2489 Comm: kworker/u8:10 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 242.162230][ T2489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 242.172326][ T2489] Workqueue: l2tp l2tp_tunnel_del_work [ 242.177844][ T2489] Call Trace: [ 242.181158][ T2489] [ 242.184119][ T2489] dump_stack_lvl+0x241/0x360 [ 242.188849][ T2489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.194091][ T2489] ? __pfx__printk+0x10/0x10 [ 242.198745][ T2489] ? lock_release+0xbf/0x9f0 [ 242.203377][ T2489] ? vscnprintf+0x5d/0x90 [ 242.207750][ T2489] panic+0x349/0x860 [ 242.211692][ T2489] ? check_panic_on_warn+0x21/0xb0 [ 242.216841][ T2489] ? __pfx_panic+0x10/0x10 [ 242.221329][ T2489] ? mark_lock+0x9a/0x350 [ 242.225709][ T2489] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 242.231654][ T2489] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 242.237597][ T2489] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 242.243971][ T2489] ? print_report+0x502/0x550 [ 242.248701][ T2489] check_panic_on_warn+0x86/0xb0 [ 242.253681][ T2489] ? l2tp_tunnel_del_work+0xe5/0x330 [ 242.258997][ T2489] end_report+0x77/0x160 [ 242.263283][ T2489] kasan_report+0x154/0x180 [ 242.267840][ T2489] ? l2tp_tunnel_del_work+0xe5/0x330 [ 242.273179][ T2489] l2tp_tunnel_del_work+0xe5/0x330 [ 242.278342][ T2489] ? process_scheduled_works+0x945/0x1830 [ 242.284112][ T2489] process_scheduled_works+0xa2c/0x1830 [ 242.289722][ T2489] ? __pfx_process_scheduled_works+0x10/0x10 [ 242.295759][ T2489] ? assign_work+0x364/0x3d0 [ 242.300401][ T2489] worker_thread+0x86d/0xd50 [ 242.305049][ T2489] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 242.310991][ T2489] ? __kthread_parkme+0x169/0x1d0 [ 242.316064][ T2489] ? __pfx_worker_thread+0x10/0x10 [ 242.321218][ T2489] kthread+0x2f0/0x390 [ 242.325332][ T2489] ? __pfx_worker_thread+0x10/0x10 [ 242.330491][ T2489] ? __pfx_kthread+0x10/0x10 [ 242.335135][ T2489] ret_from_fork+0x4b/0x80 [ 242.339601][ T2489] ? __pfx_kthread+0x10/0x10 [ 242.344238][ T2489] ret_from_fork_asm+0x1a/0x30 [ 242.349065][ T2489] [ 242.352366][ T2489] Kernel Offset: disabled [ 242.356713][ T2489] Rebooting in 86400 seconds..