last executing test programs: 1m10.172000757s ago: executing program 4 (id=972): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast1, 0x20006, 0x3}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 56.97570346s ago: executing program 4 (id=972): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast1, 0x20006, 0x3}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 42.538157716s ago: executing program 4 (id=972): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast1, 0x20006, 0x3}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 28.64892568s ago: executing program 4 (id=972): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast1, 0x20006, 0x3}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 16.020490213s ago: executing program 4 (id=972): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast1, 0x20006, 0x3}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 5.934345156s ago: executing program 1 (id=2016): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r0, 0x8911, &(0x7f0000000040)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4020010) r3 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0xb, 0x0, 0x3}, 0xc) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x40010) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12b}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000157000/0x4000)=nil, 0x4000, 0x2000002, 0x8010, r5, 0xc5a48000) (async) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x30, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x400, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 5.760158536s ago: executing program 1 (id=2017): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x35, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) write(r7, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r7, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100003042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4a5af8840000000140012801dfeb10062617461647600000400028008001f0003000000"], 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x40080c0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xffffff51, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x9, 0xb}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x4, 0x1, 0x7fffffff, 0x47b}, 0x2, 0x0, 0x2, 0x4, 0x7, 0x16, 0x17, 0x3, 0x4, 0x8, {0x3, 0x80000001, 0x2, 0x1, 0xfffffff8, 0x100}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x8c4}, 0x4048885) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x2c}}, 0x24040084) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) 4.541979322s ago: executing program 1 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xd, @private2, 0x4}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x40, 0x5a1, 0x0, 0x7}, 0x9c) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9f1b}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xdcaf}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x98) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r3, &(0x7f0000001780)={&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000100)="f2", 0x1}], 0x1}, 0x4044041) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0xfffffffffffffe57, 0x7, 0x1}]}}]}, 0x40}}, 0x0) sendmsg$inet(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002540)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000040)="e43b3e1e283b9c8dae225e7ad851c9bb4ed3b7af3aa0fa6eaa78cf2d17128343db4ca9c60b470f16233f6a258d8843728e8c65e74441b2c9c95ca1a5a3d979e69691a82ed84e7e6f135f590befccefe1c4ba5b63d911e531f9ba7f81eb7e4b4d25ab75e1875e0e16122d65421d7a34cc2c7d0addb3c9c5705d12c21342b192f989a4159bad959f0023b0a6ff2e609513137e51fa7625afac4e6cc6a5875ae2a7e153b6177bba72ed66fba119601a4c1877933d79497633ac16c3ad2f7c8a7c59d9cd0d4372fcaae92cfe800281bc5849c19b6c3be5c26529b4dd63115678100a2706", 0xe2}, {&(0x7f0000000140)="1b484ac7a638e201ed42092a405806c488641fc1da4a", 0x16}, {&(0x7f0000000180)="7086c4a8aa66a53a837b77c14ab3a4cbb1e8bdaa9d5e6436ffeaa669b56220531c8c77e9f42323da39f8ed", 0x2b}, {&(0x7f0000001240)="9478796e2f5e7ead7c08605895352e6a7537b2c844df2aea4b256aa11678795d7e11cafa09646729c386d1588cc08f6d47fb7f6ae73ec4047bb1e314ba1b14ad09162a3420", 0x45}, {&(0x7f0000001380)="549eb1f9548f1093ad0ecb1915bc1ebe246032433b945b0b0c61e00c652329339190ed6848f8bb14a095a864d85bff7e2ed94ca91e2a7b7c8e22146459bd952c88dfe4a0c9e3cbbed429437399723cf7bdb9027ab160a6302a52536ab96f5e741cd5ef63fe", 0x65}], 0x6, &(0x7f00000025c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xf6, 0x0, 0xe, [0x5, 0x8001]}, @rr={0x7, 0x13, 0x8d, [@empty, @multicast2, @empty, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], 0x98}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000002680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af80700000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006cca74fd84bc8288a46b180000e4000000000000000000000000950000002304f8576a2393ae6ab4307c9d4908665136aad2eaae57ebb0b524c0d0757214ae04a60abae77a9d936ef82797d33e5d58e98062343c"], &(0x7f0000000200)='syzkaller\x00', 0x10401, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={r2, 0x1}, 0x8) 3.879951869s ago: executing program 3 (id=2027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x80) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000003d00)={r6, 0x2, 0x6, "744cba7712b7"}, 0xe) (async) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040), 0x4) (async) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x25, @none, 0x0, 0x1}, 0xe) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r7, &(0x7f00000001c0)=""/18, 0x12) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000801) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x10000, 0x100, 0x1}) write$cgroup_int(r10, &(0x7f0000000140)=0xffffffffffffff81, 0x12) (async) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000080bfb7963e943e6ac6f8686befd2765b6e85ab703879c1a637cc89e3c11f14852f7181841dbb2768f509c2b01a7e037c3a7da6c2a692d3bce74f3e383e314e91782701d72bc5cb7505ba6835938cd3fabc5ca4c9d19e7a7ba36e8674b09834c8e4f8ca7a059297a8e9cf6a5bdec7d7d79db9a168b480c0cb3bb9b781e12faad4ad142e1f4059423ec44b32e15f6e6ab069d8f3c6f571a5b7ff3648c606eb029bbc8148161dbb138a0125cdf394819fd48477bda749c7f0b7e700ee4e990cf2bd4a402384d73344", @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf250100000008000700000000000e0001006e65742f6c326361700000000800020003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async, rerun: 64) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x270}, 0x8) (rerun: 64) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) 3.766358982s ago: executing program 2 (id=2028): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@remote}, 0x0, @in=@private, 0x0, 0xc17845d3a4071853}}, 0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000030000000500000000100000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000100000000000000200"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) r4 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10, 0x110, 0xa}], 0x30}, 0x0) connect$netrom(r4, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}, 0x48) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/95, 0x0, 0x1800, 0x38f, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008001300000000000500050002000000050004000000020016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3.722670944s ago: executing program 2 (id=2030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf0c5935ffd74731b44505e53a808dce2ca4620a1a48340844832bfa4e15fe2c65cde6f9c0605fd46fda462ecd"], 0xfc}}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0069000000001c00128009000100626f6e74000000000c00028005001b000100000014003500626f6e643000"/56], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408000000000000731141000000000085100002000000b7000000000000009500c20000001d00d500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffe1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000059c0)={r5, &(0x7f00000058c0)="4f3384f8a44281a4d36ce33f0c1443b003b1b9d79b05a2a36a0a122622fd667a5a013b15748865c5124ef111f8192e2c862a94337ee3c844291d20afa84c0c5666dc0258f06f2f122349d1ca558b5f676f15f660cfefdd4ad683ab0121cc116ed7e69e1cdbf2e0851836d1521202af9bc3359518d20df54ceb6995728849ef8ab6", &(0x7f0000005980)=@tcp=r6, 0x4}, 0x20) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'ip_vti0\x00'}}, 0x1e) pipe(&(0x7f00000005c0)) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) 3.624359107s ago: executing program 1 (id=2031): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES64=r0, @ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r6, &(0x7f0000006280)=[{{&(0x7f0000000340)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x130}}], 0x2, 0x4000) sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0xffffffffffffff4a, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="dc9f92673f5ef5df8b2d6917724e64b5c9c35ece21777115db3266fe7c98df2db9e2a8b090dae403fd32e0557ee235d4fe2b8d1129fc4dea9ef036763448d2df01fcd48f1f823ca8f45393d45864b64b5b62caf44375a5023c0db2d4c3a864eaed59c96f61238c87bef1645cacf761c7f6cbc505dc19593ba02c552024654f39ccf7e96d"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r7, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r9, {0xd, 0x9}, {0x4}, {0x10, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="0200000002"], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="0200000006"], 0x10) 3.623767587s ago: executing program 3 (id=2032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.622605359s ago: executing program 0 (id=2033): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x40}}, 0x40c1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4, 0x3}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000800) syz_emit_ethernet(0xd6, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0xa0, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x4, 0x0, 'Qh'}, {0x1, 0x11, "78676b5529157c4a4f2468a8f55ab301a031c43b00a9d84d0a2336bb418ea68a2e44f59b8f4d4beae7bf367e646889390c945b9efb324d3ace080eaf2477ebdbb7bf1b03371a36b22c4192c19a9c68215d40fb38ed96129794604b1ff4171f0091c19f35f0e25a2626f54aad286feeb406027a12e795bf2e6c1c09b05ab4f8211753bcd1fec7"}]}}}}}}, 0x0) 3.514224853s ago: executing program 2 (id=2034): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001580)="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", 0x0, 0x20000700, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x5}, 0x1d) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)="06", 0x1}], 0x1}}], 0x2, 0x4000005) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000000300)=[{{&(0x7f0000000680)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000700)="e85ed9a35c13e0970ababf80a7b75b39270c49a9a92f389f624c84992f0aba38e7a04a6b74a470b19fd4dfaff318b42964acebfd2d2d34aba6b63093cad9d76209c64c0099d94cf2683b2570bc32805f6b6ad361251d79bae68b36669012445ebebf4dd559b0139c4a89fdb1a98c019b035b0b8beeead9c0c6321b0def", 0x7d}, {&(0x7f0000000780)="a1c21aaf7541ca564f9b3c62451c460925501e6781a1d0c1a7599b585071175c5977d80055e1f0ebb61ff2a28ffed9da2a913babef79965f0fb08cd18e71dc306d43a5f1a83d6b0a2ebd2cd2785dc48e974741c4f2a0c461a3f1d3c263adf8b5fdb59ce27c043fbb2c40f9a325676a887b9b73b74cf0387908ff6a5b15c44405490f9cc2204d", 0x86}, {&(0x7f0000000a40)="b77ed17eec4419da2eca9f86f982990d59cdd13fee5bd1c8a3a61ab51dc9862dfc27e817104b3ca994b3fc3631816ba5564399872e6005be2fa99f1bca088105036a37220ec969150f4f248e920e7b6ba7cebf91e4a26e61f4c95063bed87dbb039bd8434628ac6ac38afa176057cfc6cfcc5defd3156ae81ec154619893b54fed0bcceffd64e194270a019396c5b6cfe05e4ec79faf3e9aaf9f929a16", 0x9d}], 0x3, &(0x7f0000001bc0)=[{0x110, 0x119, 0xe, "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"}, {0xe0, 0x110, 0x800, "8471f4ca9c4fd4015e3b0d39395804dc1c6b2358d77689c6f1aa4baf2b0c01969dc2e26780fcea81597463f94a66547b0d0da098b3d513de16cb1caec6a1a7accebef4d8845e0c90a3ce1bc6b82350f187d5ac5bceed4357aba99b6e91e6992d93acdcb8a66ca2fdeee191ec6cf21bbf9def1201751a5ed3127cabdaf22a8c9395c29bd3a3a3be557cf7839e47ee0f454397db86c9b91c91d3f3fd70cc29e01e4eaee9544ec390e8846565f222b49d8e5a25ee2066e0928e38a5ba08367202fc6763d2bee76d21c5549049228b37f1"}, {0x30, 0x6, 0x400, "f3b74de74005eed6a9bba9c17237b98a18493dd6b7a3e46f2f757df704b636"}, {0xc8, 0x1, 0x7, "610f72be748388928cde770a12cb9aa1355fdace19be92dcff082561ccef808e40f537dd288a3d00ff1918ce859b26c3fca807ec14f03a1ac82bc5a343adbcdf336275a5792cc06da92f96065b3a9b8560b063978b40bdeacce3952f1345a9c7d909f003c99b0e75541a938c08758b16877850d59791dc5d0484bb0c192c7e97f6edae881fff9bf4e646a8d86f11ed820733f1ac8056f987fc96e6e518c43b378e74754d96e275337c282e1a1dd6e712515b09330f67"}, {0xf0, 0x114, 0x1ff, "75b2f5f3c007a4179f8409c0e0596c140937abf6382e542298b2284be4012b04765bf54a6a7a85d1e400008b9ce10dd8b6f894e2af46f113f7642fa43c255f02901ffd342bcf1fed300baee53e30e3c35bcb7b42ed1149aaeeea8eda6da1d18a80a687e4d770ecfaa5144b744ecf9bf30b8c9407d767e68cd2ae19a7a3668649e0e9d717b442373ed3e47b701063e187e1b04e6e3ccb715ee148400ee8fb5ee7bede208a79c1e611e612f03a97af03ca806575790068338ca01cc5df76763ff86ceb144a52992437cc74aed9b41a5e00"/218}, {0x100, 0x29, 0x9, "744bfa936cdcd0abc7f479670bbd7ce1248aadd888a0733a558efd9a49dbfe1a774f0537d435b1c1d29879f743d1c0b19b379e803e62d0e2ad144a398156b1314eeadd0b1372faaa4afb8a26c45900c919bac5326d09ccc5533cad61968df2779663ea71e013c4957a9b1cb2aa4d886ebac51f0924d2cb21f73251061a1555c2c7fa8e8e7ef359f715a1540f8dfdcf761feece79dc9b4913ea218ce81d4c9a3ada3b58ad649eafe90b8dd6f3e5487397b97438f1050193fff774cbc1734a99d47fceaa424f2dc9923d1b00613bd393743550cbd6018af26849f62d9674921b6598fd8e065b51d1027588336efa4d"}], 0x4d8}}], 0x1, 0x240400c0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000806000186dd06100003aaaaaaaaaaaafe8000000000000000000000000000bbaaaaaaaaaabbfe80000000000000000000000000003205d87242f9fd44dc895a6dbd8fd7d6a94526920bfc19553dabe23c569f816c2d19687a7c6513bfdbee9592f268fe3333647b4bd5b4225c923b2e783a58bef100"/140], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xb, @private0, 0x6}, @in6={0xa, 0x4e23, 0x8, @remote, 0x1}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x3}], 0x64) unshare(0x68060200) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x14d, &(0x7f0000000500)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0xd, 0x6, "4f022c", 0x113, 0x0, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x6, 0x21, '\x00', [@generic={0x4, 0xf9, "b55cd0c9d1cdebccff4d23e8cd050e32d9568e97fc744f63bccad46eccd89229d530bd1100d408ea65cb1ab270490064480e9df6314f70ae36f03850f80d3fbf367eec2442c07838f8f12d2c3e69fd273c6a95aeb711c3e4635d2cc9633a29362ea531381b87b520a148d86f541b0535fd6b34493127cb95bd6e6682fa273edb7e19418020330d67963ab1264c9942b4ca77af863fa61033b90e73b95b10abb07fc23117c0c532d0925bdbaf9ca10bc7623d8fee61cb55725a5730a739a0d24ca1024e0312426aa34c76c07a4aef592af87eba40b757b3d502232e4044569b48f07f4f5a10218af89de23b22af32eb776c114771d01ec796ac"}, @ra, @pad1, @jumbo={0xc2, 0x4, 0x7}]}], "a51a8d"}}}}}, 0x0) 3.489234115s ago: executing program 0 (id=2035): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) 3.093460808s ago: executing program 0 (id=2036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.046261105s ago: executing program 3 (id=2037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063012f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x84}}, @common=@hbh={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000000c0)="a517d87d0ce98543bec83cf7dc0f84b90cc6e19024005184ec4aac84166b15004bd7091584d8754d826169879c9587c69c795caa4c9510b850", 0x39}, {&(0x7f0000000100)="906603c04b8ba8ba86", 0x9}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000140)="eafcde736eabe489a4388d5e3780e104e46346d7de22607b8e7581632058c5823eb74fd3b61b181e9c6919b4c57b04e16180a68527c57dd0b8e616998a6bcce0d25e1ef59b8974df6be0dbd65b0d4da8e8aa6033f205cf0ba91e", 0x5a}, {&(0x7f00000001c0)="5eca1158c097271d407147def18b399964eccbacd090437eb7514d2f0741429a3f22dec181948728d14a9c9f7f78e5230848bcb2eca0c34e62c7b68997b6b6ffe30dbf8b5f1956efa76be83fc9c1b3be38563340730d8da3abd2dbedbb7a4679470c06e4baea865a63a9e122399ded4df45447ba0d2e58a36541ee0379619b2b40349e1aa7161f5fe04e251f", 0x8c}, {&(0x7f0000000340)="eed321c33285ed9bb27c316b43d0461d3e6a6c8da66a415ce274a7c66978859ebcf3ef", 0x23}, {&(0x7f0000000380)="3f6c86ead4f1724eceed09cee8a361abfe59a7b002d65ff7e117cca83ac5ddd355d1ef145a9d0735fa753fdf40570c59cfe30bc9c8a771afffbd428265972bbe3fc965a7343dea", 0x47}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000000400)="9d263e84ae532c8187ca64610e18", 0xe}], 0x9, &(0x7f0000002a40)="cb900f2014074e7fa6ddaf46c0612c87d799e4e34827ac898dadcdcbc988757d401479bb835d361b890d4d0fb79a894cc4d1bb4efc380de9cabd2d23c83697a6d9684ce84c6345caf0f820033195d916efe7003308952bc6860c92e0020e03d023e350740df9ccfd240b638324740bdf83fa2753f1befc4d1dea1761f73824e87f57e6062ee0ede446f0c8afc99f26db4d9849a893716e50511d1170eb37bb48f9d9d6aec71294ecf08950b09a952e87f95b8200904d2fcac564d830e6bd912edeee7a10cda3c1ddc6051a1575137604e0d9f5f82267c85fb7a537291428b18add700b4160265a164dd51576b7027f56d2e59ff0", 0xf4, 0x4044000}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) sendmsg$kcm(r1, &(0x7f0000003300)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002b40)="f6cac5acd2348f11da0e296c8b211317fb94fd065c0bfc968bbe948aaa573e65c70e199fa027219adabd7f321786dfc5a6bd4c8790c0519667ab291b0be1361badfea09613f33883a2be77d669b760ae3726536fb4a783b83c85c40d46bcfc5dc9593ed627f92f859e59132969d7694b7dca833f3a73fde99b669eda7f90c7b8c95b8d33558638bc8da0e5c3854726390d57a53418f9b529272af95fedb00fcc44768066ea82ac6a41fd50379b15933d61ac072a04fdf40e", 0xb8}, {&(0x7f0000002c00)="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", 0xfe}, {&(0x7f0000002d00)="607e955d05489317caa1d1a8fb28e5e3c2c4358ee3de2de10788f4e9fb19b1b83f0ba8b16dc08aa99b42bf971e1a9bfa4c58465b67f675d5acf0660fb7594cf24258f95dc3dcdb2fc696bfe22f00b7c645407de9215da86cb1eaa564627012ff40d6b5d460356b590bb3b2468f21f5599c33d99bd641f9c3505ab97b01478598f5d30730b7043acf9053eb2e296da7fddb86e2a3092afc278b56f92efd4ee56af9ab84b6e6a5fb4850726c0fbb16401d048af24405ddc6bc8c9eb2", 0xbb}], 0x3, &(0x7f0000002e00)=[{0x90, 0xff, 0xf192, "cb80e3c40c9accea63313b50ec3c2870cff3b9351b9a12890be01db35e2e0aaf79dae660d7ead8e4d9a5c85552cf9893c4995afa8230a25a5f43c6a11008835c9b83c41192c9ca12278988ce8bc88b6d0f9a0364738a7cfeea711283673f45828ae0dc36ff6544b50812f4a2a3516ce6c2177a89aa5c248bd2"}, {0xa0, 0x117, 0x6, "e808d5965b09cb06df2cbba5e9222dd0ebf2ef1c9a2df32ee7b6604c0249275ebbfe186934ebc0c0362d97c6c6667c370e94b6d0f7b574412193c7435634f01caae6d8a2004c24b3289e7ae629235d9b1118d885fdaba86ad3010cc3d0f9f96dbcd0fd61fa1ec2f7dda30a6017cc6bc38919ef4cae1e6e31270e3b6761c425d324c71cbca4e00a98064c6b3ed23ff13e"}, {0xd0, 0x88, 0x366, "526ec5a402dbb5f2d781fc000e93dbf7840bbd5c3b215bb8a439266b714ff355a7cd8e819ce549709029699964af16840e48087e17d66fafc7e6b5726095ec550c3ad4665c4f97bc858add070974faa7918100665fac18970fa9be4182fa90403377dcaecf3c62287b4bff365d159aca41b4c3f0669e339ca39de3d181fe63a011081193af277e00795bd43570aa49471bfadf9dc6a7cad6f4766a5b79ec2fe4e102768367db1237ee2b4aed11f9d6faaf80e35e03e03566dc275479"}, {0x70, 0x10d, 0xffffffc0, "54141cbda77025400bf8ae9286d2c22f891b02915550ef39c1c460bdf38b22f017318182c7b768a94abec9f7ce4d73a91bda2859389a683fe7ef1a9a54596dab3d4a4951cd92510a38d9bf4f87929b98d2c94d737ba3970ec428c2"}, {0xe8, 0x10a, 0x3ff, "a64580dbe8a31072576593b68ec228e104f10d1418e3c1d3e00237a2af8806bb48c670ef006ed8a39da23e3b351424738177e1d8513791f13cd7fe10111b8d54da8d725edf7196c16b42ec103ee172354d06c656b931b15a252c6b6f990c6c733a146d851d2c2669718bde3c75b52dd428f830df030b5dd2e9e9190eace5d2f1fc5b8b21e08b66e41e4a8ca2466ca0e3023f68eb34993b3f32e306803464467f43fac515cf6e30f09a893bca7c09a9ba4d9fc6f7c6fbbbbe83f0c0489a581cb66c70cf59168dea41973238c448c51deb59c5f4a4a1"}, {0xd8, 0x112, 0x101, "dbf908f32052041515114c55149e8b4a78f4a9bcb082b15d90b06c57d3926f02d14d42b233dd84cfc69104ef71849dfb796948f7a448f17df06ce022cc9568d343057fca7c6402f69dfd0b06034558290e6a72cbb661b0259aa34dcf110ba87e3ed41dfaadef352a6343706004703421690f0e4429e226ead5dc51bf5465807e5685dd2d28e07841da9fcb04856178ad0e7bc9d4b5e9abf44e93e8b1705cbe55285f908c1ba26c7ca82b9c083d250568d90a5b5d42b4e2301e81eab8e036e298c62fcf8967"}, {0x68, 0x10a, 0x3, "87548e753d4e6ea94b6fbfab75c651c5b52d3d8d9f91d2b034ed4c3935c93dfdb9e3f4373529c4d86ce1204abe1ec0cd6b3c24f785d701abc0ecd604d5ff558b97e9bb4b9eb6c6ad592a31cef4c63adf97432787308e73"}, {0x48, 0x10a, 0x2, "0a363d55cd9b004814cca6da2de7b94261164417f20d5719c518bc35d550c25da0d324e90f4041e64ed89854509003cdb9"}], 0x4e0}, 0x4) 2.965359685s ago: executing program 3 (id=2038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r7, 0x1, {0x0, 0xff, 0x3}, 0xfd}, 0x18) sendmsg$sock(r5, &(0x7f0000000440)={&(0x7f0000000040)=@can={0x1d, r7, 0x11}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)="05", 0x1}, {0x0}], 0x2}, 0x4008080) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6cd1da7443d7f2dd}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="200029bd7000fddbdf25070000001400018008000100", @ANYRES32=r2, @ANYBLOB="080003000100000070000180140002006261746164765f736c6176655f3000001400020064756d6d793000000000000000000000080003000500000008000100", @ANYRES32=r2, @ANYBLOB="08000300020000000800030002000000140002006e657470636930000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="90ab000100", @ANYRES32=r2, @ANYBLOB="080003000100000014000200776731000000000000000000000000001400020073797a5f74756e000000000000000000140002007369743000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="14000200766c616e3100000000000000000000001400020077673000"/40], 0x21c}, 0x1, 0x0, 0x0, 0x20008045}, 0x20000000) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x24, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0x9c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010fc00"/20, @ANYRES32=r2, @ANYBLOB="0300000000000000240012800b00010062726964676500001400028005002a00000000000500180001000000"], 0x44}}, 0x0) 2.904701601s ago: executing program 4 (id=972): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast1, 0x20006, 0x3}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 2.824488998s ago: executing program 1 (id=2039): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340070f4a74d010800"/20, @ANYRES32=0x0, @ANYBLOB="2a100400000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f000000e0c0)={0x0, 0x0, &(0x7f000000e080)={&(0x7f000000e000)=@ipv6_newaddrlabel={0x1c, 0x1e, 0x1}, 0x1c}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0xe, 0xb0, 0x68, 0x0, 0xb, 0x11, 0x0, @loopback, @loopback}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "5329894699644a77569a7303e899082d563b0f054979e06160e2e8de7a2f32d5", "9932a51feff00830e084be343aa8850d4b1f4d8a96b6ba60049e698ca1e9225fe2148e5f22a09191fb05f0d08ee35daf", "54e05fa597133b78f10104b3bddc3ea3b31e600974596c6b37de894c", {"c0b78999460e00c6392fbaba87f19858", "1071f0528bfdaf4f5e82980b60f299f3"}}}}}}}, 0x0) 2.774081414s ago: executing program 0 (id=2040): socket(0x2b, 0x80801, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000002000085000000600000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x48, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff7525206cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651dde583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467c8a7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080000000000000000000000000400000000000000000000000000000000000000100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x61]}}, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)={0x24, 0x18, 0x1, 0x0, 0xfffffffe, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0x3b}]}]}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00q'], 0x44}}, 0x0) 2.773834518s ago: executing program 2 (id=2041): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c800000", @ANYRES16=0x0, @ANYBLOB="01000000000008000000030000004800018044000400200001000a00000400000002fc02000000000000000000000000000000000000200002000a00000000000000fe8000000000000000000000000000bb00000000"], 0x5c}}, 0x4000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 2.118154909s ago: executing program 0 (id=2042): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x7, 0x4, 0x410, 0x108, 0x108, 0x218, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000200), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010101, 0xffffff00, 0x0, 0x4, 0x7, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x3, 0xb, 0x2, 0xc5, 0x7, 'veth0_macvtap\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0xca}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4000, 'syz1\x00', {0x1}}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010100, 0x0, 0x0, 0xb, 0x4, {@mac=@random="1d63d64c1fed", {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x8, 0x6, 0x4, 0x5, 0x5, 'bridge_slave_1\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @private=0xa010100, 0x9, 0xffffffff}}}, {{@arp={@rand_addr=0x64010100, @multicast2, 0xff000000, 0xffffff, 0x5, 0x4, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x5, 0x7f, 0x0, 0x40, 0x1, 'ipvlan0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000280), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmmsg$inet(r2, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}], 0x18}}], 0x1, 0x84) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x38, 0x10, 0x401, 0x870bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x532b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000340)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x3, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1c}}}}}, 0x36) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000100), 0x3d) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000300)=0x1, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0xfffe}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r7, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) 2.11655232s ago: executing program 1 (id=2043): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0274206000000ff9782062f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_lru_insertion\x00', r7}, 0x18) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x100002, 0x0) 2.109807986s ago: executing program 2 (id=2044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000003400)={0x10, 0x3f6, 0x2, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x24000004}, 0x8044) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) 2.106731708s ago: executing program 3 (id=2045): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x4, 0x6, @vifc_lcl_addr=@empty, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f0000000780)=""/155, 0x9b}], 0x6, 0x86, 0x2) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r8, 0x909, 0x20000000, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bind$rds(r6, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x7fff}], 0x10, 0x8800}, 0x4000000) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xff00) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x4000810) sendto$inet6(r5, &(0x7f0000000240)="72611fa88cccd0c64a7a8f3fe5c1cfeab6", 0x11, 0x2004c804, &(0x7f00000003c0)={0xa, 0x4e22, 0x4, @mcast2, 0x8}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r6, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000009c0)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x569a8faf61674ef4, 0x5, 0x10, 0x7fff, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x5, 0xd}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000cc0)={0x1, 0x0}, 0x8) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x15, 0x1e, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0xae8}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5c}, @jmp={0x5, 0x0, 0x4, 0x5, 0x3, 0x30, 0x10}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x2, 0x2, 0x9, 0x0, 0x10, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x3, 0x9, 0x9, 0x6, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x44, '\x00', r10, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xa, 0x0, 0xa947}, 0x10, r11, r1, 0x0, &(0x7f0000000d80)=[r12], 0x0, 0x10, 0x10000000, @void, @value}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000070601020400000000200000000000080500010007000000080006400000000a"], 0x24}, 0x1, 0x0, 0x0, 0x20008808}, 0x20008000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x8, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 62.323105ms ago: executing program 2 (id=2046): r0 = socket$inet(0x2, 0xa, 0x700000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x5, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x10) 61.111534ms ago: executing program 3 (id=2047): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="4d7e00c30000000000001f000000080002"], 0x1c}, 0x4, 0x700000000000000}, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f00000000c0)=0x7fffffff, 0x4) 0s ago: executing program 0 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40) (async) shutdown(r3, 0x1) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100) (async) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xb, 0x1}, {0x3}, {0x8}, {0x4}, {0x6, 0x3}, {0x0, 0x1}, {0xf}, {0x7, 0x3}], "1ebe722399d92230"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x20000840) (async) unshare(0x36000080) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000480)={r4, 0x400}, 0x8) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x44090}, 0x800) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.2.1097'. [ 587.952539][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1097'. [ 587.980341][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 587.996790][ T9365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.026855][ T9365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.048786][ T9365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.080778][ T9826] IPVS: using max 28 ests per chain, 67200 per kthread [ 588.273869][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1099'. [ 588.283264][ T9835] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1099'. [ 588.687620][ T7595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.720832][ T7595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.798108][ T9845] lo speed is unknown, defaulting to 1000 [ 588.809273][ T6302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.838601][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.997757][ T9854] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 589.517619][ T9872] bridge0: port 3(gretap0) entered blocking state [ 589.537181][ T9881] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 589.546632][ T9881] netlink: 'syz.2.1111': attribute type 2 has an invalid length. [ 589.586614][ T9859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1106'. [ 589.601569][ T9872] bridge0: port 3(gretap0) entered disabled state [ 589.609542][ T9872] gretap0: entered allmulticast mode [ 589.622845][ T9872] gretap0: entered promiscuous mode [ 589.628960][ T9872] bridge0: port 3(gretap0) entered blocking state [ 589.635891][ T9872] bridge0: port 3(gretap0) entered forwarding state [ 589.912379][ T9886] xt_CT: No such helper "pptp" [ 590.370538][ T9911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1115'. [ 590.501984][ T9906] xt_CT: No such helper "pptp" [ 590.619418][ T7595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.630433][ T9925] netlink: 'syz.0.1118': attribute type 4 has an invalid length. [ 590.660214][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 590.671477][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 590.681004][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 590.689754][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 590.698359][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 590.725485][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 590.743535][ T5819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 590.758671][ T9914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.769179][ T9914] batadv_slave_1: entered promiscuous mode [ 590.889381][ T7595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.067670][ T7595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.115904][ T9947] bpq0: left promiscuous mode [ 591.119581][ T9927] lo speed is unknown, defaulting to 1000 [ 591.124130][ T9947] bpq0: left allmulticast mode [ 591.225725][ T7595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.336391][ T9954] IPv6: sit1: Disabled Multicast RS [ 591.368325][ T9954] sit1: entered allmulticast mode [ 591.471669][ T5819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.479637][ T5819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.634806][ T9968] wireguard1: entered promiscuous mode [ 591.724136][ T9983] x_tables: ip_tables: osf match: only valid for protocol 6 [ 591.862003][ T7595] bridge_slave_1: left allmulticast mode [ 591.900466][ T7595] bridge_slave_1: left promiscuous mode [ 591.906788][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.061921][ T7595] bridge_slave_0: left allmulticast mode [ 592.084889][ T7595] bridge_slave_0: left promiscuous mode [ 592.095639][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.557823][ T7595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.573101][ T7595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.583963][ T7595] bond0 (unregistering): Released all slaves [ 592.761242][ T5142] Bluetooth: hci2: command tx timeout [ 592.848659][T10013] lo speed is unknown, defaulting to 1000 [ 592.848932][ T9927] chnl_net:caif_netlink_parms(): no params data found [ 592.995038][T10024] __nla_validate_parse: 6 callbacks suppressed [ 592.995057][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 593.185864][ T7595] hsr_slave_0: left promiscuous mode [ 593.190853][T10033] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 593.199807][ T7595] hsr_slave_1: left promiscuous mode [ 593.212184][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.219806][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.235457][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.245853][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 593.255333][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.314301][ T7595] veth1_macvtap: left promiscuous mode [ 593.321312][ T7595] veth0_macvtap: left promiscuous mode [ 593.328589][ T7595] veth1_vlan: left promiscuous mode [ 593.344954][ T7595] veth0_vlan: left promiscuous mode [ 593.373714][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 594.047816][ T7595] team0 (unregistering): Port device team_slave_1 removed [ 594.092408][ T7595] team0 (unregistering): Port device team_slave_0 removed [ 594.548599][T10032] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 594.707207][ T9927] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.728452][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.759064][ T9927] bridge_slave_0: entered allmulticast mode [ 594.767575][ T9927] bridge_slave_0: entered promiscuous mode [ 594.786526][ T9927] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.793935][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.802437][ T9927] bridge_slave_1: entered allmulticast mode [ 594.810652][ T9927] bridge_slave_1: entered promiscuous mode [ 594.830441][ T5142] Bluetooth: hci2: command tx timeout [ 594.876865][T10063] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1153'. [ 594.887490][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 594.908433][ T9927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.002079][ T9927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.198365][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 595.213525][T10075] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 595.227769][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 595.243268][ T9927] team0: Port device team_slave_0 added [ 595.272197][ T9927] team0: Port device team_slave_1 added [ 595.281510][T10074] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 595.303763][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 595.608004][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.630301][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.675503][T10088] netlink: 'syz.1.1158': attribute type 9 has an invalid length. [ 595.695971][T10088] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 595.705288][ T9927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.730453][T10088] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1158'. [ 595.749952][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.770565][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.802113][ T9927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.822377][T10085] veth0: entered promiscuous mode [ 595.843912][T10091] x_tables: duplicate entry at hook 2 [ 595.859963][T10076] veth0: left promiscuous mode [ 595.995143][ T9927] hsr_slave_0: entered promiscuous mode [ 596.012475][ T9927] hsr_slave_1: entered promiscuous mode [ 596.019391][ T9927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.046415][T10102] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 596.084010][ T9927] Cannot create hsr debugfs directory [ 596.476470][T10124] bridge3: entered promiscuous mode [ 596.482103][T10124] bridge3: entered allmulticast mode [ 596.491180][T10124] team0: Port device bridge3 added [ 596.767857][T10140] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 596.806081][T10140] bond5: entered promiscuous mode [ 596.820731][T10140] 8021q: adding VLAN 0 to HW filter on device bond5 [ 596.879892][T10144] 8021q: adding VLAN 0 to HW filter on device bond6 [ 596.889147][T10144] bond5: (slave bond6): making interface the new active one [ 596.896714][T10144] bond6: entered promiscuous mode [ 596.901879][T10140] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1174'. [ 596.912607][T10144] bond5: (slave bond6): Enslaving as an active interface with an up link [ 596.921036][ T5142] Bluetooth: hci2: command tx timeout [ 597.112807][T10158] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 597.540165][T10171] lo speed is unknown, defaulting to 1000 [ 597.548312][T10171] lo speed is unknown, defaulting to 1000 [ 597.597879][T10171] lo speed is unknown, defaulting to 1000 [ 597.636607][T10176] syzkaller1: entered promiscuous mode [ 597.658527][T10180] netlink: 'syz.3.1185': attribute type 11 has an invalid length. [ 597.671723][T10176] syzkaller1: entered allmulticast mode [ 597.748055][T10182] netlink: 'syz.3.1185': attribute type 21 has an invalid length. [ 597.828395][T10171] infiniband syz0: set down [ 597.834822][ T10] lo speed is unknown, defaulting to 1000 [ 597.841315][T10171] infiniband syz0: added lo [ 597.889802][T10171] RDS/IB: syz0: added [ 597.895066][T10171] smc: adding ib device syz0 with port count 1 [ 597.902319][T10171] smc: ib device syz0 port 1 has pnetid [ 597.931718][ T10] lo speed is unknown, defaulting to 1000 [ 597.938516][T10171] lo speed is unknown, defaulting to 1000 [ 598.208170][T10171] lo speed is unknown, defaulting to 1000 [ 598.387341][ T9927] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 598.495849][ T9927] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 598.509838][ T9927] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 598.525252][T10171] lo speed is unknown, defaulting to 1000 [ 598.535567][ T9927] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 598.783868][T10171] lo speed is unknown, defaulting to 1000 [ 598.980057][T10215] macsec1: entered promiscuous mode [ 598.988631][T10215] veth0_to_bridge: entered promiscuous mode [ 598.998965][T10215] macsec1: entered allmulticast mode [ 599.000363][ T5142] Bluetooth: hci2: command tx timeout [ 599.007447][T10215] veth0_to_bridge: entered allmulticast mode [ 599.037501][T10215] veth0_to_bridge: left allmulticast mode [ 599.043375][T10215] veth0_to_bridge: left promiscuous mode [ 599.073798][T10171] lo speed is unknown, defaulting to 1000 [ 599.170117][ T9927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.287396][ T9927] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.372680][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.379915][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.413296][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.420704][ T7595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.476367][T10230] __nla_validate_parse: 2 callbacks suppressed [ 599.476389][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 600.124188][T10251] lo speed is unknown, defaulting to 1000 [ 600.135262][T10251] lo speed is unknown, defaulting to 1000 [ 600.846840][ T9927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.116963][T10263] lo speed is unknown, defaulting to 1000 [ 601.141305][T10263] lo speed is unknown, defaulting to 1000 [ 601.514615][T10281] x_tables: duplicate underflow at hook 2 [ 601.603625][T10283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1208'. [ 601.661741][T10288] xt_hashlimit: size too large, truncated to 1048576 [ 601.719814][T10293] netlink: 'syz.0.1207': attribute type 3 has an invalid length. [ 601.768322][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1207'. [ 601.768371][T10295] xt_hashlimit: size too large, truncated to 1048576 [ 601.812391][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 601.822259][T10296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1210'. [ 601.965572][ T9927] veth0_vlan: entered promiscuous mode [ 602.008415][ T9927] veth1_vlan: entered promiscuous mode [ 602.251457][ T9927] veth0_macvtap: entered promiscuous mode [ 602.425709][ T9927] veth1_macvtap: entered promiscuous mode [ 602.507371][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.518630][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.570692][T10310] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 602.578577][T10310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1216'. [ 602.591012][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.603789][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.636368][T10313] netlink: 'syz.0.1215': attribute type 21 has an invalid length. [ 602.672430][T10313] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1215'. [ 602.673952][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 602.694734][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 602.703253][ T9927] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.743814][ T9927] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.753218][ T9927] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.777458][ T9927] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.809014][T10314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.104542][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.119644][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.286162][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.314317][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.661763][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 603.907008][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.155617][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.193123][T10383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.243888][T10384] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 604.385150][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.612072][T10393] __nla_validate_parse: 1 callbacks suppressed [ 604.612093][T10393] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1237'. [ 604.745850][T10388] syzkaller0: entered promiscuous mode [ 604.770639][T10388] syzkaller0: entered allmulticast mode [ 604.930021][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 604.978447][ T5892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 605.002560][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 605.020642][ T5892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 605.022053][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.049744][ T5892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 606.941320][T10411] lo speed is unknown, defaulting to 1000 [ 607.015286][T10411] lo speed is unknown, defaulting to 1000 [ 607.150490][ T5142] Bluetooth: hci2: command tx timeout [ 607.333294][ T36] bridge_slave_1: left allmulticast mode [ 607.379534][ T36] bridge_slave_1: left promiscuous mode [ 607.431232][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.505708][ T36] bridge_slave_0: left allmulticast mode [ 607.539683][ T36] bridge_slave_0: left promiscuous mode [ 607.574741][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.705390][ T30] audit: type=1800 audit(1746899806.358:4): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1249" name="memory.events" dev="tmpfs" ino=1427 res=0 errno=0 [ 607.761623][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 607.768242][ T30] audit: type=1804 audit(1746899806.458:5): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1249" name="memory.events" dev="tmpfs" ino=1427 res=1 errno=0 [ 607.773350][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 608.279495][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.291556][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.303774][ T36] bond0 (unregistering): Released all slaves [ 608.410389][T10456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1253'. [ 608.465023][T10458] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1254'. [ 608.529277][T10451] lo speed is unknown, defaulting to 1000 [ 608.590346][T10451] lo speed is unknown, defaulting to 1000 [ 609.007761][T10411] chnl_net:caif_netlink_parms(): no params data found [ 609.232299][ T5142] Bluetooth: hci2: command tx timeout [ 609.409114][T10474] tun0: tun_chr_ioctl cmd 2147767520 [ 609.453484][T10478] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 609.525385][T10411] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.533765][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.569162][T10411] bridge_slave_0: entered allmulticast mode [ 609.595144][T10411] bridge_slave_0: entered promiscuous mode [ 609.625275][ T36] hsr_slave_0: left promiscuous mode [ 609.633421][ T36] hsr_slave_1: left promiscuous mode [ 609.639589][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.651191][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.661578][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.669802][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.697005][T10493] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 609.705684][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1263'. [ 609.708144][T10495] netlink: 'syz.0.1264': attribute type 10 has an invalid length. [ 609.734201][ T36] veth1_macvtap: left promiscuous mode [ 609.739920][ T36] veth0_macvtap: left promiscuous mode [ 609.745748][ T36] veth1_vlan: left promiscuous mode [ 609.752488][ T36] veth0_vlan: left promiscuous mode [ 610.296281][ T36] team0 (unregistering): Port device team_slave_1 removed [ 610.347257][ T36] team0 (unregistering): Port device team_slave_0 removed [ 610.835094][T10411] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.843299][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.852271][T10411] bridge_slave_1: entered allmulticast mode [ 610.859690][T10411] bridge_slave_1: entered promiscuous mode [ 610.878804][T10493] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 610.889420][T10493] team0: Failed to send options change via netlink (err -105) [ 610.899437][T10493] team0: Port device geneve0 added [ 610.905868][T10495] wlan1: mtu less than device minimum [ 611.156556][T10411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.289213][T10411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.317528][ T5142] Bluetooth: hci2: command tx timeout [ 611.393395][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 611.624486][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1273'. [ 611.647723][T10411] team0: Port device team_slave_0 added [ 611.690922][T10411] team0: Port device team_slave_1 added [ 611.827137][T10411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.860667][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.911513][T10411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.947264][T10411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.968967][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.040393][T10411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.182673][T10411] hsr_slave_0: entered promiscuous mode [ 612.189750][T10411] hsr_slave_1: entered promiscuous mode [ 612.199968][T10411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.208352][T10411] Cannot create hsr debugfs directory [ 612.346499][T10546] x_tables: duplicate entry at hook 2 [ 612.392246][T10549] netlink: 'syz.0.1277': attribute type 1 has an invalid length. [ 612.478253][T10556] ߅uta: renamed from lo [ 612.805090][T10567] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.833265][T10572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1282'. [ 612.857227][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1282'. [ 612.872102][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 612.891605][T10562] lo speed is unknown, defaulting to 1000 [ 612.904590][T10562] lo speed is unknown, defaulting to 1000 [ 612.916377][T10567] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.016387][T10567] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.086498][T10567] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.236825][T10567] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.262586][T10567] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.283266][T10567] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.306241][T10567] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.403428][ T5142] Bluetooth: hci2: command tx timeout [ 613.678231][T10411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 613.768854][T10411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 613.800633][T10411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 613.848691][T10411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 614.022075][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 614.173645][T10411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.208631][T10411] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.228101][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.235432][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.265338][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.272595][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.850995][T10611] xt_CT: No such helper "snmp" [ 614.964600][T10620] lo speed is unknown, defaulting to 1000 [ 614.974189][T10620] lo speed is unknown, defaulting to 1000 [ 615.243122][T10411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.332689][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 615.421130][T10632] netlink: 'syz.2.1296': attribute type 2 has an invalid length. [ 615.429213][T10632] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1296'. [ 615.637448][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 615.712049][T10646] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1298'. [ 615.724286][T10640] lo speed is unknown, defaulting to 1000 [ 615.738209][T10640] lo speed is unknown, defaulting to 1000 [ 615.802692][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'. [ 615.936717][T10649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1298'. [ 616.755903][T10411] veth0_vlan: entered promiscuous mode [ 616.806724][T10411] veth1_vlan: entered promiscuous mode [ 616.813299][T10666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 616.865796][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 616.889107][T10668] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 616.902537][T10668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.976324][T10411] veth0_macvtap: entered promiscuous mode [ 617.014796][T10674] lo speed is unknown, defaulting to 1000 [ 617.024927][T10674] lo speed is unknown, defaulting to 1000 [ 617.208067][T10411] veth1_macvtap: entered promiscuous mode [ 617.327804][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.338834][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.351247][T10411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.405937][T10684] netlink: 'syz.2.1310': attribute type 11 has an invalid length. [ 617.413052][T10686] FAULT_INJECTION: forcing a failure. [ 617.413052][T10686] name failslab, interval 1, probability 0, space 0, times 0 [ 617.414070][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 617.427625][T10686] CPU: 0 UID: 0 PID: 10686 Comm: syz.3.1309 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 617.427661][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 617.427676][T10686] Call Trace: [ 617.427686][T10686] [ 617.427695][T10686] dump_stack_lvl+0x189/0x250 [ 617.427738][T10686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.427770][T10686] ? __pfx__printk+0x10/0x10 [ 617.427798][T10686] ? __pfx___might_resched+0x10/0x10 [ 617.427820][T10686] ? fs_reclaim_acquire+0x7d/0x100 [ 617.427858][T10686] should_fail_ex+0x414/0x560 [ 617.427887][T10686] should_failslab+0xa8/0x100 [ 617.427918][T10686] __kmalloc_cache_noprof+0x70/0x3d0 [ 617.427945][T10686] ? __request_module+0x2b5/0x5e0 [ 617.427979][T10686] __request_module+0x2b5/0x5e0 [ 617.428011][T10686] ? aa_get_newest_label+0xf7/0x5d0 [ 617.428038][T10686] ? __pfx___request_module+0x10/0x10 [ 617.428086][T10686] ? rcu_is_watching+0x15/0xb0 [ 617.428129][T10686] ? security_capable+0x7e/0x2e0 [ 617.428157][T10686] ? dev_load+0x21/0x1f0 [ 617.428181][T10686] dev_load+0x190/0x1f0 [ 617.428205][T10686] dev_ioctl+0x384/0x1150 [ 617.428234][T10686] sock_do_ioctl+0x22c/0x300 [ 617.428260][T10686] ? __pfx_sock_do_ioctl+0x10/0x10 [ 617.428299][T10686] sock_ioctl+0x576/0x790 [ 617.428319][T10686] ? __pfx_sock_ioctl+0x10/0x10 [ 617.428344][T10686] ? __fget_files+0x3a0/0x420 [ 617.428372][T10686] ? __fget_files+0x2a/0x420 [ 617.428403][T10686] ? bpf_lsm_file_ioctl+0x9/0x20 [ 617.428431][T10686] ? __pfx_sock_ioctl+0x10/0x10 [ 617.428451][T10686] __se_sys_ioctl+0xf9/0x170 [ 617.428477][T10686] do_syscall_64+0xf6/0x210 [ 617.428502][T10686] ? clear_bhb_loop+0x45/0xa0 [ 617.428530][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.428552][T10686] RIP: 0033:0x7fe717d8e969 [ 617.428571][T10686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.428589][T10686] RSP: 002b:00007fe718ba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.428612][T10686] RAX: ffffffffffffffda RBX: 00007fe717fb5fa0 RCX: 00007fe717d8e969 [ 617.428628][T10686] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 617.428642][T10686] RBP: 00007fe718ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 617.428655][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.428666][T10686] R13: 0000000000000000 R14: 00007fe717fb5fa0 R15: 00007ffc0961c318 [ 617.428701][T10686] [ 617.542730][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 617.550804][T10411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.830737][T10693] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 617.869353][T10694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.901875][T10411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.913492][T10411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.925006][T10411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.937585][T10411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.990710][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'. [ 618.243432][T10714] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 618.622518][T10720] lo speed is unknown, defaulting to 1000 [ 618.664442][T10720] lo speed is unknown, defaulting to 1000 [ 618.671676][ T7597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.697798][ T7597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.730202][T10732] FAULT_INJECTION: forcing a failure. [ 618.730202][T10732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.744453][T10732] CPU: 1 UID: 0 PID: 10732 Comm: syz.2.1324 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 618.744481][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.744493][T10732] Call Trace: [ 618.744502][T10732] [ 618.744510][T10732] dump_stack_lvl+0x189/0x250 [ 618.744543][T10732] ? __lock_acquire+0xaac/0xd20 [ 618.744574][T10732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.744602][T10732] ? __pfx__printk+0x10/0x10 [ 618.744621][T10732] ? __might_fault+0xb0/0x130 [ 618.744665][T10732] should_fail_ex+0x414/0x560 [ 618.744692][T10732] _copy_from_user+0x2d/0xb0 [ 618.744752][T10732] dev_ethtool+0xd0/0x1990 [ 618.744786][T10732] ? __lock_acquire+0xaac/0xd20 [ 618.744828][T10732] ? __pfx_dev_ethtool+0x10/0x10 [ 618.744868][T10732] ? dev_load+0x21/0x1f0 [ 618.744892][T10732] ? dev_load+0x21/0x1f0 [ 618.744915][T10732] dev_ioctl+0x392/0x1150 [ 618.744942][T10732] sock_do_ioctl+0x22c/0x300 [ 618.744965][T10732] ? __pfx_sock_do_ioctl+0x10/0x10 [ 618.745003][T10732] sock_ioctl+0x576/0x790 [ 618.745025][T10732] ? __pfx_sock_ioctl+0x10/0x10 [ 618.745056][T10732] ? __fget_files+0x3a0/0x420 [ 618.745081][T10732] ? __fget_files+0x2a/0x420 [ 618.745111][T10732] ? bpf_lsm_file_ioctl+0x9/0x20 [ 618.745137][T10732] ? __pfx_sock_ioctl+0x10/0x10 [ 618.745155][T10732] __se_sys_ioctl+0xf9/0x170 [ 618.745178][T10732] do_syscall_64+0xf6/0x210 [ 618.745200][T10732] ? clear_bhb_loop+0x45/0xa0 [ 618.745225][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.745251][T10732] RIP: 0033:0x7fda6878e969 [ 618.745269][T10732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.745286][T10732] RSP: 002b:00007fda695b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.745307][T10732] RAX: ffffffffffffffda RBX: 00007fda689b5fa0 RCX: 00007fda6878e969 [ 618.745321][T10732] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 618.745334][T10732] RBP: 00007fda695b1090 R08: 0000000000000000 R09: 0000000000000000 [ 618.745353][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.745365][T10732] R13: 0000000000000000 R14: 00007fda689b5fa0 R15: 00007fff16bbb1d8 [ 618.745397][T10732] [ 619.010659][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.018599][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.180142][T10740] netlink: 'syz.2.1326': attribute type 4 has an invalid length. [ 619.296923][T10735] netlink: 'syz.0.1323': attribute type 2 has an invalid length. [ 619.339388][T10741] lo speed is unknown, defaulting to 1000 [ 619.415428][T10741] lo speed is unknown, defaulting to 1000 [ 620.011036][ T7596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.127059][ T7596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.305987][ T7596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.428983][ T7596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.637131][ T7596] bridge_slave_1: left allmulticast mode [ 620.643550][ T7596] bridge_slave_1: left promiscuous mode [ 620.652025][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.703314][T10768] FAULT_INJECTION: forcing a failure. [ 620.703314][T10768] name failslab, interval 1, probability 0, space 0, times 0 [ 620.720715][ T7596] bridge_slave_0: left allmulticast mode [ 620.726485][ T7596] bridge_slave_0: left promiscuous mode [ 620.740776][T10768] CPU: 0 UID: 0 PID: 10768 Comm: syz.1.1335 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 620.740808][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.740821][T10768] Call Trace: [ 620.740829][T10768] [ 620.740837][T10768] dump_stack_lvl+0x189/0x250 [ 620.740876][T10768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.740905][T10768] ? __pfx__printk+0x10/0x10 [ 620.740943][T10768] ? __pfx___might_resched+0x10/0x10 [ 620.740967][T10768] should_fail_ex+0x414/0x560 [ 620.740993][T10768] should_failslab+0xa8/0x100 [ 620.741030][T10768] __kmalloc_cache_noprof+0x70/0x3d0 [ 620.741056][T10768] ? call_usermodehelper_setup+0x8e/0x270 [ 620.741084][T10768] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 620.741115][T10768] call_usermodehelper_setup+0x8e/0x270 [ 620.741144][T10768] ? __pfx_free_modprobe_argv+0x10/0x10 [ 620.741176][T10768] __request_module+0x39f/0x5e0 [ 620.741205][T10768] ? aa_get_newest_label+0xf7/0x5d0 [ 620.741230][T10768] ? __pfx___request_module+0x10/0x10 [ 620.741262][T10768] ? rcu_is_watching+0x15/0xb0 [ 620.741302][T10768] ? security_capable+0x7e/0x2e0 [ 620.741327][T10768] ? dev_load+0x21/0x1f0 [ 620.741348][T10768] dev_load+0x190/0x1f0 [ 620.741370][T10768] dev_ioctl+0x384/0x1150 [ 620.741397][T10768] sock_do_ioctl+0x22c/0x300 [ 620.741420][T10768] ? __pfx_sock_do_ioctl+0x10/0x10 [ 620.741458][T10768] sock_ioctl+0x576/0x790 [ 620.741479][T10768] ? __pfx_sock_ioctl+0x10/0x10 [ 620.741501][T10768] ? __fget_files+0x3a0/0x420 [ 620.741526][T10768] ? __fget_files+0x2a/0x420 [ 620.741556][T10768] ? bpf_lsm_file_ioctl+0x9/0x20 [ 620.741582][T10768] ? __pfx_sock_ioctl+0x10/0x10 [ 620.741600][T10768] __se_sys_ioctl+0xf9/0x170 [ 620.741624][T10768] do_syscall_64+0xf6/0x210 [ 620.741645][T10768] ? clear_bhb_loop+0x45/0xa0 [ 620.741669][T10768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.741688][T10768] RIP: 0033:0x7fb57f18e969 [ 620.741706][T10768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.741723][T10768] RSP: 002b:00007fb57cff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.741745][T10768] RAX: ffffffffffffffda RBX: 00007fb57f3b5fa0 RCX: 00007fb57f18e969 [ 620.741759][T10768] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 620.741772][T10768] RBP: 00007fb57cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 620.741784][T10768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.741796][T10768] R13: 0000000000000000 R14: 00007fb57f3b5fa0 R15: 00007ffc936a1218 [ 620.741828][T10768] [ 620.761585][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.340515][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 621.358754][ T5892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 621.375050][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 621.393885][ T5892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 621.402296][ T5892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 621.603473][ T7596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.614834][ T7596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.625579][ T7596] bond0 (unregistering): Released all slaves [ 621.777876][T10796] __nla_validate_parse: 8 callbacks suppressed [ 621.777897][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 621.792080][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 621.803198][T10798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1340'. [ 621.829707][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 621.838322][T10793] lo speed is unknown, defaulting to 1000 [ 621.855208][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1340'. [ 621.919379][T10796] bond_slave_0: entered promiscuous mode [ 621.925569][T10796] bond_slave_1: entered promiscuous mode [ 621.933437][T10796] macvtap1: entered promiscuous mode [ 621.939759][T10796] bond0: entered promiscuous mode [ 621.945706][T10796] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 621.953225][T10796] macvtap1: entered allmulticast mode [ 621.958744][T10796] bond0: entered allmulticast mode [ 621.964281][T10796] bond_slave_0: entered allmulticast mode [ 621.970046][T10796] bond_slave_1: entered allmulticast mode [ 621.976036][T10796] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 621.984723][T10796] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 621.994131][T10799] bond0: left allmulticast mode [ 621.999184][T10799] bond_slave_0: left allmulticast mode [ 622.004902][T10799] bond_slave_1: left allmulticast mode [ 622.010591][T10799] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 622.017517][T10799] bond0: left promiscuous mode [ 622.023207][T10799] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 622.031827][T10799] bond_slave_0: left promiscuous mode [ 622.037630][T10799] bond_slave_1: left promiscuous mode [ 622.064205][T10793] lo speed is unknown, defaulting to 1000 [ 622.547180][T10824] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 622.589434][T10824] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 623.060017][ T7596] hsr_slave_0: left promiscuous mode [ 623.106962][ T7596] hsr_slave_1: left promiscuous mode [ 623.121733][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.129201][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.154640][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.175861][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.263605][ T7596] veth1_macvtap: left promiscuous mode [ 623.269215][ T7596] veth0_macvtap: left promiscuous mode [ 623.276666][ T7596] veth1_vlan: left promiscuous mode [ 623.288385][ T7596] veth0_vlan: left promiscuous mode [ 623.336265][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 623.406208][T10864] netlink: del zone limit has 4 unknown bytes [ 623.478357][ T5142] Bluetooth: hci2: command tx timeout [ 623.845383][ T7596] team0 (unregistering): Port device team_slave_1 removed [ 623.918705][ T7596] team0 (unregistering): Port device team_slave_0 removed [ 624.401828][T10863] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 624.421976][T10865] tc_dump_action: action bad kind [ 624.457678][T10863] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 624.490587][T10863] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 624.507442][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 624.542106][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 624.714039][T10887] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1366'. [ 624.724797][T10887] netlink: 'syz.1.1366': attribute type 5 has an invalid length. [ 624.741947][T10887] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1366'. [ 624.821909][T10887] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 624.947122][T10793] chnl_net:caif_netlink_parms(): no params data found [ 625.033779][T10896] batadv_slave_0: entered promiscuous mode [ 625.288256][T10895] batadv_slave_0: left promiscuous mode [ 625.296036][T10907] batman_adv: batadv0: Adding interface: vlan1 [ 625.307630][T10907] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.312994][T10909] netlink: 'syz.0.1371': attribute type 5 has an invalid length. [ 625.334764][T10907] batman_adv: batadv0: Interface activated: vlan1 [ 625.369844][T10793] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.380684][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.388019][T10793] bridge_slave_0: entered allmulticast mode [ 625.396875][T10793] bridge_slave_0: entered promiscuous mode [ 625.424625][T10912] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 625.434529][T10907] tipc: Enabled bearer , priority 0 [ 625.441960][T10793] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.453319][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.467566][T10793] bridge_slave_1: entered allmulticast mode [ 625.491329][T10793] bridge_slave_1: entered promiscuous mode [ 625.550476][ T5142] Bluetooth: hci2: command tx timeout [ 625.654471][T10907] syzkaller0: entered promiscuous mode [ 625.660154][T10907] syzkaller0: entered allmulticast mode [ 625.667002][T10907] tipc: Resetting bearer [ 625.712722][ T67] tipc: Resetting bearer [ 625.786420][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.883588][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.913484][T10897] tipc: Resetting bearer [ 627.481900][T10897] tipc: Disabling bearer [ 627.568496][T10793] team0: Port device team_slave_0 added [ 627.591059][T10793] team0: Port device team_slave_1 added [ 627.635148][ T5142] Bluetooth: hci2: command tx timeout [ 627.788064][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.816806][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.888037][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.909765][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.917803][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.948986][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.386467][T10793] hsr_slave_0: entered promiscuous mode [ 628.408610][T10793] hsr_slave_1: entered promiscuous mode [ 628.415813][T10793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.424306][T10793] Cannot create hsr debugfs directory [ 629.053600][T11025] lo speed is unknown, defaulting to 1000 [ 629.089990][T11029] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 629.104590][T11025] lo speed is unknown, defaulting to 1000 [ 629.117321][T11029] __nla_validate_parse: 5 callbacks suppressed [ 629.117342][T11029] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1399'. [ 629.159704][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.711094][ T5142] Bluetooth: hci2: command tx timeout [ 629.852194][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1406'. [ 630.005453][T11052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1406'. [ 630.082744][T10793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 630.119039][T10793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 630.137487][T10793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 630.164934][T10793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 630.279370][T11071] geneve0: entered promiscuous mode [ 630.288060][T11071] vlan2: entered promiscuous mode [ 630.294872][T11071] team0: entered promiscuous mode [ 630.469014][T11081] x_tables: duplicate underflow at hook 3 [ 630.716028][T10793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.757002][T10793] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.805646][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.812853][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.859191][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.866406][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.425610][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1427'. [ 631.606426][T10793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.882086][T11139] netlink: 'syz.3.1432': attribute type 1 has an invalid length. [ 632.377044][T10793] veth0_vlan: entered promiscuous mode [ 632.498336][T10793] veth1_vlan: entered promiscuous mode [ 632.587754][T10793] veth0_macvtap: entered promiscuous mode [ 632.609416][T11168] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 632.646529][T11168] 8021q: adding VLAN 0 to HW filter on device bond8 [ 632.682028][T11168] 8021q: adding VLAN 0 to HW filter on device bond8 [ 632.692046][T11168] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 632.704698][T11168] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 632.731450][T11173] netlink: 'syz.2.1441': attribute type 3 has an invalid length. [ 632.744028][T10793] veth1_macvtap: entered promiscuous mode [ 632.788969][T11173] veth7: entered promiscuous mode [ 632.829639][T11176] xt_TCPMSS: Only works on TCP SYN packets [ 632.867455][T11179] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1443'. [ 632.892230][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.917773][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.940911][T10793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.954766][T11182] netlink: 'syz.2.1444': attribute type 1 has an invalid length. [ 632.976450][T10793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.049645][T11189] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 633.057944][T11189] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1445'. [ 633.103431][T11192] netlink: 'syz.2.1447': attribute type 1 has an invalid length. [ 633.124983][T11188] netlink: 'syz.1.1445': attribute type 7 has an invalid length. [ 633.137000][T11188] netlink: 'syz.1.1445': attribute type 8 has an invalid length. [ 633.147602][T11188] netlink: 'syz.1.1445': attribute type 15 has an invalid length. [ 633.195064][T11192] 8021q: adding VLAN 0 to HW filter on device bond9 [ 633.209328][T11192] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1447'. [ 633.246955][T11194] bond9: (slave veth9): Enslaving as an active interface with a down link [ 633.264530][T10793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.276431][T10793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.286038][T10793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.295167][T10793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.394434][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 633.621134][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1451'. [ 633.691467][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.699696][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.732873][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 633.757425][ T5937] IPVS: starting estimator thread 0... [ 633.806690][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.839383][T11219] openvswitch: netlink: Multiple metadata blocks provided [ 633.861809][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.880676][T11214] IPVS: using max 30 ests per chain, 72000 per kthread [ 634.241743][T11238] geneve0: entered allmulticast mode [ 634.368135][T11247] __nla_validate_parse: 1 callbacks suppressed [ 634.368157][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'. [ 634.484199][T11255] xfrm1: entered promiscuous mode [ 634.489452][T11255] xfrm1: entered allmulticast mode [ 634.521232][T11255] xt_hashlimit: size too large, truncated to 1048576 [ 634.580203][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.896163][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.084553][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.138600][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.252144][ T67] bridge_slave_1: left allmulticast mode [ 635.257821][ T67] bridge_slave_1: left promiscuous mode [ 635.263785][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.273864][ T67] bridge_slave_0: left allmulticast mode [ 635.279566][ T67] bridge_slave_0: left promiscuous mode [ 635.298369][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.783988][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.798147][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.810150][ T67] bond0 (unregistering): Released all slaves [ 635.877450][T11270] veth3: entered allmulticast mode [ 635.940787][T11285] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 636.014801][T11287] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 636.036918][T11287] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1474'. [ 636.109318][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 636.127359][ T5892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 636.136369][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 636.149573][ T5892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 636.157917][ T5892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 636.236544][T11293] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 636.426292][T11306] trusted_key: syz.2.1480 sent an empty control message without MSG_MORE. [ 636.471286][T11290] lo speed is unknown, defaulting to 1000 [ 636.488814][T11290] lo speed is unknown, defaulting to 1000 [ 636.586220][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1481'. [ 636.908257][T11332] sctp: [Deprecated]: syz.2.1485 (pid 11332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.908257][T11332] Use struct sctp_sack_info instead [ 637.115012][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 637.147776][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1488'. [ 637.297257][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1489'. [ 637.339852][T11342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1489'. [ 637.369553][ T67] hsr_slave_0: left promiscuous mode [ 637.387193][ T67] hsr_slave_1: left promiscuous mode [ 637.396560][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.410368][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.427934][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.450385][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.517844][T11352] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1491'. [ 637.557958][ T67] veth1_macvtap: left promiscuous mode [ 637.570991][ T67] veth0_macvtap: left promiscuous mode [ 637.586737][ T67] veth1_vlan: left promiscuous mode [ 637.604109][ T67] veth0_vlan: left promiscuous mode [ 637.687291][ T5892] block nbd2: Receive control failed (result -104) [ 637.700455][ T5142] block nbd3: Receive control failed (result -104) [ 637.830042][T11360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.279013][ T5142] Bluetooth: hci2: command tx timeout [ 638.341888][ T67] team0 (unregistering): Port device team_slave_1 removed [ 638.388669][ T67] team0 (unregistering): Port device team_slave_0 removed [ 638.895399][T11342] lo speed is unknown, defaulting to 1000 [ 638.964283][T11342] lo speed is unknown, defaulting to 1000 [ 639.172522][T11379] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 639.249227][T11290] chnl_net:caif_netlink_parms(): no params data found [ 640.122970][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.307733][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.327111][T11290] bridge_slave_0: entered allmulticast mode [ 640.349471][T11290] bridge_slave_0: entered promiscuous mode [ 640.356301][ T5142] Bluetooth: hci2: command tx timeout [ 640.387896][T11290] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.454059][T11401] IPVS: length: 78 != 8 [ 640.469246][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.493308][T11290] bridge_slave_1: entered allmulticast mode [ 640.510707][T11290] bridge_slave_1: entered promiscuous mode [ 640.631690][T11290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.709933][T11290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.827701][T11290] team0: Port device team_slave_0 added [ 640.878239][T11290] team0: Port device team_slave_1 added [ 640.894184][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 640.946587][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 640.991598][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 641.219126][T11290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.230391][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.290019][T11290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.298387][T11429] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 641.334026][T11290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.350564][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.383528][T11290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.452396][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 641.728130][T11290] hsr_slave_0: entered promiscuous mode [ 641.747428][T11290] hsr_slave_1: entered promiscuous mode [ 641.766359][T11290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.799206][T11290] Cannot create hsr debugfs directory [ 642.082310][T11457] veth1_to_team: entered promiscuous mode [ 642.088515][T11457] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 642.123717][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 642.255335][T11464] netlink: 'syz.3.1521': attribute type 58 has an invalid length. [ 642.260534][T11467] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1522'. [ 642.276436][T11464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1521'. [ 642.304840][T11466] macsec1: entered promiscuous mode [ 642.310108][T11466] ip6gretap0: entered promiscuous mode [ 642.320031][T11466] macsec1: entered allmulticast mode [ 642.325608][T11466] ip6gretap0: entered allmulticast mode [ 642.345892][T11466] ip6gretap0: left allmulticast mode [ 642.355165][T11466] ip6gretap0: left promiscuous mode [ 642.431201][ T5142] Bluetooth: hci2: command tx timeout [ 642.844635][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'. [ 642.871387][T11501] netlink: 'syz.3.1533': attribute type 2 has an invalid length. [ 642.879566][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 643.053942][T11506] netlink: 'syz.1.1534': attribute type 5 has an invalid length. [ 643.062012][T11506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1534'. [ 643.168790][T11516] veth0_to_bridge: entered promiscuous mode [ 643.176062][T11514] veth0_to_bridge: left promiscuous mode [ 643.268567][T11520] erspan0: entered promiscuous mode [ 643.274232][T11520] erspan0: left allmulticast mode [ 643.358807][T11290] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 643.372809][T11290] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 643.401594][T11290] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 643.419775][T11290] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 643.435640][T11529] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 643.891497][T11555] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 643.899295][T11555] netlink: 'syz.3.1543': attribute type 2 has an invalid length. [ 643.926728][T11290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.033867][T11290] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.084172][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.091455][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.105900][T11563] syzkaller0: entered promiscuous mode [ 644.113454][T11563] syzkaller0: entered allmulticast mode [ 644.125291][T11563] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 644.176142][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.183454][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.283827][T11571] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 644.511338][ T5142] Bluetooth: hci2: command tx timeout [ 644.856208][T11290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.973341][T11641] lo speed is unknown, defaulting to 1000 [ 645.983174][T11641] lo speed is unknown, defaulting to 1000 [ 646.267216][T11290] veth0_vlan: entered promiscuous mode [ 646.369249][T11290] veth1_vlan: entered promiscuous mode [ 646.491354][T11290] veth0_macvtap: entered promiscuous mode [ 646.508461][T11290] veth1_macvtap: entered promiscuous mode [ 646.535329][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.546166][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.558361][T11290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.603818][T11290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.626802][T11290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.641454][T11290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.664255][T11290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.711293][T11290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.802942][T11657] lo: entered promiscuous mode [ 646.808695][T11657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.043627][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.068333][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.182650][T11668] __nla_validate_parse: 8 callbacks suppressed [ 647.182670][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 647.198349][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.224798][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.714702][T11681] tipc: Enabled bearer , priority 0 [ 647.761575][T11681] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1580'. [ 647.780647][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 647.858595][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.913767][T11688] IPv4: Oversized IP packet from 127.202.26.0 [ 647.983006][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.099400][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.188833][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.363180][ T67] bridge_slave_1: left allmulticast mode [ 648.368912][ T67] bridge_slave_1: left promiscuous mode [ 648.375604][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.388445][ T67] bridge_slave_0: left allmulticast mode [ 648.394857][ T67] bridge_slave_0: left promiscuous mode [ 648.401344][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.724776][ T5938] tipc: Node number set to 1 [ 649.014242][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.048476][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.065816][ T67] bond0 (unregistering): Released all slaves [ 649.231727][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 649.253372][ T5892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 649.262161][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 649.279619][ T5892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 649.288207][ T5892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.342003][T11722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1594'. [ 649.686663][T11718] lo speed is unknown, defaulting to 1000 [ 649.710017][T11718] lo speed is unknown, defaulting to 1000 [ 649.841648][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1600'. [ 650.412984][T11771] netlink: 'syz.2.1608': attribute type 3 has an invalid length. [ 650.421488][T11771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 650.442250][T11768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 650.448879][T11769] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1605'. [ 650.787183][ T67] hsr_slave_0: left promiscuous mode [ 650.799784][ T67] hsr_slave_1: left promiscuous mode [ 650.807408][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.815785][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.824123][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.832298][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.857279][ T67] veth1_macvtap: left promiscuous mode [ 650.863108][ T67] veth0_macvtap: left promiscuous mode [ 650.868744][ T67] veth1_vlan: left promiscuous mode [ 650.874342][ T67] veth0_vlan: left promiscuous mode [ 650.967418][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1610'. [ 651.390393][ T5142] Bluetooth: hci2: command tx timeout [ 651.419522][ T67] team0 (unregistering): Port device team_slave_1 removed [ 651.465913][ T67] team0 (unregistering): Port device team_slave_0 removed [ 652.045982][T11802] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 652.110657][T11806] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 652.170522][T11806] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1614'. [ 652.235265][T11808] bridge0: entered promiscuous mode [ 652.242217][T11808] macvlan3: entered promiscuous mode [ 652.253322][T11808] bridge0: port 3(macvlan3) entered blocking state [ 652.262689][T11808] bridge0: port 3(macvlan3) entered disabled state [ 652.269491][T11808] macvlan3: entered allmulticast mode [ 652.286194][T11808] bridge0: entered allmulticast mode [ 652.336739][T11808] macvlan3: left allmulticast mode [ 652.343151][T11808] bridge0: left allmulticast mode [ 652.361724][T11808] bridge0: left promiscuous mode [ 652.379871][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 652.441481][T11828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1621'. [ 652.474726][T11826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1619'. [ 652.555577][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 652.575727][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 652.775351][T11718] chnl_net:caif_netlink_parms(): no params data found [ 653.041727][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'. [ 653.120914][T11718] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.129395][T11718] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.142971][T11718] bridge_slave_0: entered allmulticast mode [ 653.174221][T11718] bridge_slave_0: entered promiscuous mode [ 653.184424][T11718] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.192024][T11718] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.199321][T11718] bridge_slave_1: entered allmulticast mode [ 653.214875][T11718] bridge_slave_1: entered promiscuous mode [ 653.225950][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 653.247367][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 653.288958][T11886] netlink: 'syz.0.1638': attribute type 10 has an invalid length. [ 653.386202][T11892] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1641'. [ 653.389811][T11886] team0: Device ipvlan1 failed to register rx_handler [ 653.452021][T11718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.472376][ T5142] Bluetooth: hci2: command tx timeout [ 653.496266][T11718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.680893][T11901] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1642'. [ 653.984292][T11905] vlan2: entered promiscuous mode [ 654.009183][T11905] veth1: entered promiscuous mode [ 654.045902][T11718] team0: Port device team_slave_0 added [ 654.104039][T11718] team0: Port device team_slave_1 added [ 654.259133][T11718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.266695][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.303092][T11718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.316926][T11718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.324553][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.378959][T11718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.644317][T11718] hsr_slave_0: entered promiscuous mode [ 654.653097][T11718] hsr_slave_1: entered promiscuous mode [ 654.659693][T11718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.668845][T11718] Cannot create hsr debugfs directory [ 655.072021][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.168265][T11957] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 655.416564][T11952] batadv0: left allmulticast mode [ 655.451371][T11952] batadv0: left promiscuous mode [ 655.473631][T11952] bridge0: port 3(batadv0) entered disabled state [ 655.504178][T11952] bridge_slave_1: left promiscuous mode [ 655.510294][T11952] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.525556][T11952] bridge_slave_0: left allmulticast mode [ 655.532669][T11952] bridge_slave_0: left promiscuous mode [ 655.538479][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.550438][ T5142] Bluetooth: hci2: command tx timeout [ 655.874238][T11973] netlink: 'syz.0.1660': attribute type 15 has an invalid length. [ 655.935249][T11977] netlink: 'syz.0.1660': attribute type 15 has an invalid length. [ 656.005888][T11981] gretap3: entered promiscuous mode [ 656.011884][T11981] gretap3: entered allmulticast mode [ 656.282892][T12000] bridge0: entered promiscuous mode [ 656.288732][T12000] bridge0: entered allmulticast mode [ 656.982518][T11718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 657.072084][T11718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 657.098095][T11718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 657.122925][T11718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 657.169099][T12039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.250054][T11718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.289491][T11718] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.382067][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.389288][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.413699][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.421054][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.446863][T12049] xt_l2tp: wrong L2TP version: 0 [ 657.483048][T12047] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 657.633348][ T5142] Bluetooth: hci2: command tx timeout [ 657.693245][T12063] lo speed is unknown, defaulting to 1000 [ 657.703534][T12063] lo speed is unknown, defaulting to 1000 [ 658.296927][T12083] __nla_validate_parse: 11 callbacks suppressed [ 658.296949][T12083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1685'. [ 658.367309][T12089] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 659.065714][T11718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.320068][T12127] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 659.472397][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 659.551742][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 659.593629][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 659.610968][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 659.640598][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 659.670022][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 659.693421][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 659.703929][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 659.717900][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 659.720798][ T5892] Bluetooth: hci2: command tx timeout [ 659.789858][T12147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.826774][T12127] lo speed is unknown, defaulting to 1000 [ 659.889542][T12127] lo speed is unknown, defaulting to 1000 [ 660.137878][T11718] veth0_vlan: entered promiscuous mode [ 660.167579][T11718] veth1_vlan: entered promiscuous mode [ 660.356345][T12167] openvswitch: netlink: Key type 5136 is out of range max 32 [ 660.357291][T11718] veth0_macvtap: entered promiscuous mode [ 660.385927][T11718] veth1_macvtap: entered promiscuous mode [ 660.408755][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.421496][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.435619][T11718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.453581][T11718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.467952][T11718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.477750][T11718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.487924][T11718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.500089][T11718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.831078][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.883533][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.074776][T12191] netlink: 'syz.2.1709': attribute type 1 has an invalid length. [ 661.175472][ T7595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.194951][ T7595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.554570][T12215] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 661.642260][T12223] netlink: 'syz.2.1720': attribute type 23 has an invalid length. [ 661.787271][T12234] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 661.797120][ T5892] Bluetooth: hci2: command 0x0405 tx timeout [ 661.828144][T12227] netlink: 'syz.3.1722': attribute type 8 has an invalid length. [ 662.055990][T12247] netlink: 'syz.2.1728': attribute type 1 has an invalid length. [ 662.130188][T12251] tun0: tun_chr_ioctl cmd 35203 [ 662.141117][T12251] tun0: tun_chr_ioctl cmd 1074025677 [ 662.146650][T12251] tun0: linktype set to 776 [ 662.355747][ T7595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.421568][T12255] tipc: Enabling of bearer rejected, failed to enable media [ 662.568236][ T7595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.624429][T12245] sctp: [Deprecated]: syz.3.1726 (pid 12245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 662.624429][T12245] Use struct sctp_sack_info instead [ 662.673937][ T7595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.755588][ T7595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.869031][ T7595] bridge_slave_1: left allmulticast mode [ 662.875057][ T7595] bridge_slave_1: left promiscuous mode [ 662.881028][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.891156][ T7595] bridge_slave_0: left allmulticast mode [ 662.897111][ T7595] bridge_slave_0: left promiscuous mode [ 662.903384][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.258792][ T7595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.270869][ T7595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.282693][ T7595] bond0 (unregistering): Released all slaves [ 663.394364][T12264] netlink: 'syz.2.1734': attribute type 11 has an invalid length. [ 663.416663][T12268] __nla_validate_parse: 13 callbacks suppressed [ 663.416683][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'. [ 663.825970][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 663.836704][ T5892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 663.841232][T12281] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 663.862360][T12281] netlink: 'syz.1.1738': attribute type 2 has an invalid length. [ 663.870593][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 663.879625][ T5892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 663.893352][ T5892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 664.043671][T12285] netlink: 'syz.0.1739': attribute type 11 has an invalid length. [ 664.058364][T12282] lo speed is unknown, defaulting to 1000 [ 664.063822][T12285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1739'. [ 664.098840][T12282] lo speed is unknown, defaulting to 1000 [ 664.192310][ T7595] hsr_slave_0: left promiscuous mode [ 664.201223][ T7595] hsr_slave_1: left promiscuous mode [ 664.213889][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.238368][T12290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 664.260394][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.323330][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.366135][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.486538][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'. [ 664.525253][ T7595] veth1_macvtap: left promiscuous mode [ 664.542610][ T7595] veth0_macvtap: left promiscuous mode [ 664.556301][ T7595] veth1_vlan: left promiscuous mode [ 664.565383][ T7595] veth0_vlan: left promiscuous mode [ 665.436646][T12308] netlink: 'syz.1.1746': attribute type 8 has an invalid length. [ 665.445757][ T7595] team0 (unregistering): Port device team_slave_1 removed [ 665.487472][ T7595] team0 (unregistering): Port device team_slave_0 removed [ 665.961393][ T5892] Bluetooth: hci2: command tx timeout [ 665.978703][T12304] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 666.268955][T12323] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 666.522426][T12332] tipc: Enabled bearer , priority 10 [ 666.529213][T12328] batadv_slave_1: entered promiscuous mode [ 666.529312][T12332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'. [ 666.544726][T12328] batadv_slave_1: left promiscuous mode [ 666.710126][T12282] chnl_net:caif_netlink_parms(): no params data found [ 666.843655][T12350] syzkaller1: entered promiscuous mode [ 666.849186][T12350] syzkaller1: entered allmulticast mode [ 666.957200][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.969647][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.978499][T12282] bridge_slave_0: entered allmulticast mode [ 666.986668][T12282] bridge_slave_0: entered promiscuous mode [ 666.996954][T12357] tipc: Enabled bearer , priority 0 [ 666.998301][T12362] sctp: [Deprecated]: syz.0.1762 (pid 12362) Use of int in max_burst socket option deprecated. [ 666.998301][T12362] Use struct sctp_assoc_value instead [ 667.006421][T12357] syzkaller0: entered promiscuous mode [ 667.030480][T12357] syzkaller0: entered allmulticast mode [ 667.039147][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.046935][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.054541][T12282] bridge_slave_1: entered allmulticast mode [ 667.062948][T12282] bridge_slave_1: entered promiscuous mode [ 667.074364][T12357] tipc: Resetting bearer [ 667.098948][T12355] tipc: Resetting bearer [ 667.119699][T12355] tipc: Disabling bearer [ 667.148174][T12282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.162965][T12282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.216256][T12282] team0: Port device team_slave_0 added [ 667.229825][T12282] team0: Port device team_slave_1 added [ 667.238794][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 667.308332][T12282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.318866][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.349535][T12282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.365515][T12282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.373473][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.404818][T12282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.421902][T12369] netlink: 'syz.1.1764': attribute type 10 has an invalid length. [ 667.429831][T12369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1764'. [ 667.450133][T12368] bridge0: entered promiscuous mode [ 667.455688][T12368] macvlan3: entered promiscuous mode [ 667.463434][T12368] bridge0: port 3(macvlan3) entered blocking state [ 667.471385][T12368] bridge0: port 3(macvlan3) entered disabled state [ 667.478172][T12368] macvlan3: entered allmulticast mode [ 667.483799][T12368] bridge0: entered allmulticast mode [ 667.493458][T12368] macvlan3: left allmulticast mode [ 667.498684][T12368] bridge0: left allmulticast mode [ 667.505586][T12368] bridge0: left promiscuous mode [ 667.578151][T12369] batadv0: entered promiscuous mode [ 667.600690][T12369] batadv0: entered allmulticast mode [ 667.607797][T12369] bridge0: port 3(batadv0) entered blocking state [ 667.623181][T12369] bridge0: port 3(batadv0) entered disabled state [ 667.653933][T12369] bridge0: port 3(batadv0) entered blocking state [ 667.660646][T12369] bridge0: port 3(batadv0) entered forwarding state [ 667.669527][ T5937] tipc: Node number set to 2886997007 [ 667.738927][T12282] hsr_slave_0: entered promiscuous mode [ 667.757466][T12282] hsr_slave_1: entered promiscuous mode [ 667.771215][T12282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.785191][T12282] Cannot create hsr debugfs directory [ 667.794046][T12371] lo speed is unknown, defaulting to 1000 [ 667.898775][T12371] lo speed is unknown, defaulting to 1000 [ 667.923456][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1768'. [ 667.924478][ T5932] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 667.942090][ T5932] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 668.031720][ T5892] Bluetooth: hci2: command tx timeout [ 668.102677][T12393] x_tables: duplicate underflow at hook 1 [ 668.491470][T12396] netlink: 'syz.1.1770': attribute type 27 has an invalid length. [ 668.887714][T12396] bridge0: port 3(batadv0) entered disabled state [ 668.894445][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.083971][T12396] wg1: left promiscuous mode [ 669.090122][T12396] wg1: left allmulticast mode [ 669.105498][T12396] wg2: left promiscuous mode [ 669.129251][T12396] wg2: left allmulticast mode [ 669.163938][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1773'. [ 669.395534][T12396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.420178][T12396] batadv_slave_1: left promiscuous mode [ 669.491403][T12396] veth1_vlan: left allmulticast mode [ 669.587665][T12396] batman_adv: batadv0: Interface deactivated: vlan1 [ 669.724350][T12396] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.734078][T12396] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.750432][T12396] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.760809][T12396] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.823435][T12396] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.832868][T12396] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.841908][T12396] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.851147][T12396] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.928270][T12396] macvtap1: left promiscuous mode [ 669.940488][T12396] macvtap1: left allmulticast mode [ 669.947088][T12396] veth3: left allmulticast mode [ 670.040452][T12428] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 670.058338][T12405] lo speed is unknown, defaulting to 1000 [ 670.110532][ T5892] Bluetooth: hci2: command tx timeout [ 670.133852][T12405] lo speed is unknown, defaulting to 1000 [ 670.157895][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 670.561052][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1780'. [ 670.641546][T12461] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 670.689335][T12463] netlink: zone id is out of range [ 670.694677][T12463] netlink: zone id is out of range [ 670.699984][T12463] netlink: zone id is out of range [ 670.706292][T12463] netlink: zone id is out of range [ 670.714297][T12463] netlink: zone id is out of range [ 670.720716][T12463] netlink: zone id is out of range [ 670.732610][T12463] netlink: zone id is out of range [ 670.737885][T12463] netlink: zone id is out of range [ 670.745801][T12463] netlink: zone id is out of range [ 670.916070][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 670.925592][T12468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1785'. [ 670.953831][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1786'. [ 671.184110][T12475] xt_hashlimit: size too large, truncated to 1048576 [ 671.356669][T12483] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 671.367978][T12483] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1788'. [ 671.414110][T12484] netlink: 'syz.2.1788': attribute type 10 has an invalid length. [ 671.430427][T12484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1788'. [ 671.526042][T12484] geneve0: left allmulticast mode [ 671.604696][T12282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 671.639922][T12282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 671.665864][T12282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 671.714701][T12282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 671.716978][T12493] netlink: 'syz.0.1791': attribute type 1 has an invalid length. [ 671.729867][T12493] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1791'. [ 671.756034][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 671.818411][T12495] netlink: 'syz.2.1792': attribute type 1 has an invalid length. [ 672.055090][T12504] veth0_to_bridge: entered promiscuous mode [ 672.130109][T12282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.166524][T12507] netlink: 'syz.2.1795': attribute type 10 has an invalid length. [ 672.190414][ T5892] Bluetooth: hci2: command tx timeout [ 672.202039][T12507] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 672.211813][T12507] team0: Port device wlan1 added [ 672.227382][T12282] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.326712][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.333985][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.355893][T12501] veth0_to_bridge: left promiscuous mode [ 672.415549][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.422787][ T7595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.527390][T12514] netlink: 'syz.2.1798': attribute type 15 has an invalid length. [ 672.540138][T12514] netlink: 'syz.2.1798': attribute type 1 has an invalid length. [ 672.987593][T12282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.537680][T12556] netlink: 'syz.2.1810': attribute type 16 has an invalid length. [ 673.549182][T12556] sock: sock_timestamping_bind_phc: sock not bind to device [ 673.571962][T12557] netlink: 'syz.0.1807': attribute type 6 has an invalid length. [ 673.896824][T12567] lo speed is unknown, defaulting to 1000 [ 673.915305][T12282] veth0_vlan: entered promiscuous mode [ 673.937522][T12567] lo speed is unknown, defaulting to 1000 [ 674.021343][T12282] veth1_vlan: entered promiscuous mode [ 674.124547][T12282] veth0_macvtap: entered promiscuous mode [ 674.159492][T12282] veth1_macvtap: entered promiscuous mode [ 674.218356][T12282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.263624][T12282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.321880][T12282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.343271][T12282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.372575][T12282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.386887][T12282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.516130][T12600] x_tables: unsorted entry at hook 2 [ 674.814653][T12608] __nla_validate_parse: 10 callbacks suppressed [ 674.814676][T12608] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1820'. [ 674.908267][T12605] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1821'. [ 674.937366][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.946555][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.093112][ T7597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.168872][ T7597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.433149][T12619] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 675.553766][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1827'. [ 675.990613][T12653] netlink: 'syz.3.1833': attribute type 309 has an invalid length. [ 676.009949][T12653] netlink: 'syz.3.1833': attribute type 16 has an invalid length. [ 676.019084][T12653] netlink: 'syz.3.1833': attribute type 17 has an invalid length. [ 676.162570][T12663] netlink: 'syz.3.1833': attribute type 9 has an invalid length. [ 676.181704][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 676.230088][T12653] bridge0: port 3(gretap0) entered disabled state [ 676.869241][T12663] macvlan0: entered promiscuous mode [ 676.899526][T12663] hsr0: entered promiscuous mode [ 676.940098][T12663] macvlan0: entered allmulticast mode [ 676.959291][T12663] hsr0: entered allmulticast mode [ 676.968120][T12663] hsr_slave_0: entered allmulticast mode [ 676.974441][T12663] hsr_slave_1: entered allmulticast mode [ 677.028606][ T7596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.148425][ T7596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.237670][ T7596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.305870][ T7596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.426454][ T7596] bridge_slave_1: left allmulticast mode [ 677.432358][ T7596] bridge_slave_1: left promiscuous mode [ 677.438413][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.448111][ T7596] bridge_slave_0: left allmulticast mode [ 677.454356][ T7596] bridge_slave_0: left promiscuous mode [ 677.460130][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.661222][T12674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1836'. [ 677.774414][T12685] Cannot find add_set index 0 as target [ 678.082609][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.102884][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.113502][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.136059][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.159961][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.211067][ T7596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.224092][ T7596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.235679][ T7596] bond0 (unregistering): Released all slaves [ 678.384332][T12693] lo speed is unknown, defaulting to 1000 [ 678.434229][T12693] lo speed is unknown, defaulting to 1000 [ 678.635666][T12706] pimreg: entered allmulticast mode [ 678.648800][T12698] pimreg: left allmulticast mode [ 678.677784][T12708] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$UvyآDUDw}zR3 [ 678.708683][ T5142] block nbd4: Receive control failed (result -32) [ 678.895234][T12713] tipc: Enabling of bearer rejected, already enabled [ 679.245430][T12724] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1847'. [ 679.376692][T12725] xt_CT: No such helper "snmp" [ 679.420090][ T7596] hsr_slave_0: left promiscuous mode [ 679.427108][ T7596] hsr_slave_1: left promiscuous mode [ 679.434450][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.442243][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.456856][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.475107][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.546780][ T7596] veth1_macvtap: left promiscuous mode [ 679.555755][ T7596] veth0_macvtap: left promiscuous mode [ 679.562579][ T7596] veth1_vlan: left promiscuous mode [ 679.568266][ T7596] veth0_vlan: left promiscuous mode [ 680.119994][ T7596] team0 (unregistering): Port device team_slave_1 removed [ 680.169050][ T7596] team0 (unregistering): Port device team_slave_0 removed [ 680.190925][ T5142] Bluetooth: hci2: command tx timeout [ 680.876558][T12754] gtp0: entered promiscuous mode [ 680.895379][T12754] gtp0: entered allmulticast mode [ 680.954961][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 680.972810][T12761] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 680.983299][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 681.241839][T12693] chnl_net:caif_netlink_parms(): no params data found [ 681.454109][T12790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1861'. [ 681.520018][T12797] tap1: tun_chr_ioctl cmd 1074025677 [ 681.525631][T12797] tap1: linktype set to 778 [ 681.728535][T12693] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.743995][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.762694][T12693] bridge_slave_0: entered allmulticast mode [ 681.772860][T12693] bridge_slave_0: entered promiscuous mode [ 681.774722][T12815] netlink: 'syz.0.1871': attribute type 27 has an invalid length. [ 681.783608][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.796726][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.805244][T12693] bridge_slave_1: entered allmulticast mode [ 681.815815][T12693] bridge_slave_1: entered promiscuous mode [ 681.822446][T12815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1871'. [ 681.890552][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.904181][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.931243][T12819] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1872'. [ 681.941314][T12819] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1872'. [ 682.053722][T12693] team0: Port device team_slave_0 added [ 682.079305][T12693] team0: Port device team_slave_1 added [ 682.151078][T12824] net_ratelimit: 17 callbacks suppressed [ 682.151099][T12824] dummy0: mtu less than device minimum [ 682.203314][T12693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.220357][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.261142][T12693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.280425][ T5142] Bluetooth: hci2: command tx timeout [ 682.305958][T12693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.315392][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.346136][T12693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.434356][T12829] lo speed is unknown, defaulting to 1000 [ 682.464297][T12834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1876'. [ 682.476338][T12834] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1876'. [ 682.487782][T12835] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 682.495461][T12835] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 682.554174][T12829] lo speed is unknown, defaulting to 1000 [ 682.572582][T12693] hsr_slave_0: entered promiscuous mode [ 682.579449][T12693] hsr_slave_1: entered promiscuous mode [ 682.635588][T12693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.644129][T12693] Cannot create hsr debugfs directory [ 683.354848][T12857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1883'. [ 683.899816][T12882] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 684.078260][T12882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 684.109716][T12883] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 684.351455][ T5142] Bluetooth: hci2: command tx timeout [ 684.505287][T12905] lo speed is unknown, defaulting to 1000 [ 684.508905][T12693] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 684.555091][T12905] lo speed is unknown, defaulting to 1000 [ 684.555119][T12693] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 684.604507][T12693] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 684.789178][T12693] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 684.825210][T12907] netdevsim0: entered promiscuous mode [ 684.835957][T12907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 684.939705][T12920] lo speed is unknown, defaulting to 1000 [ 685.167241][T12921] veth0_to_bridge: entered promiscuous mode [ 685.311586][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.375854][T12693] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.397694][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.405002][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.459294][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.466643][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.496763][T12909] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1895'. [ 685.541786][T12693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.557655][T12693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.602840][T12920] lo speed is unknown, defaulting to 1000 [ 685.825251][T12919] veth0_to_bridge: left promiscuous mode [ 686.311807][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.447388][ T5892] Bluetooth: hci2: command tx timeout [ 686.763829][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 686.879153][T12969] bridge_slave_1: left allmulticast mode [ 686.887150][T12969] veth1_to_team: left promiscuous mode [ 686.984618][T12969] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 687.054407][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 687.179705][T12984] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1916'. [ 687.379175][T12693] veth0_vlan: entered promiscuous mode [ 687.418107][T12693] veth1_vlan: entered promiscuous mode [ 687.477052][T12693] veth0_macvtap: entered promiscuous mode [ 687.493333][T12693] veth1_macvtap: entered promiscuous mode [ 687.569967][T12693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.604258][T12693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.638063][T12693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.664423][T12693] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.674372][T12693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.683288][T12693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.718491][T13005] netlink: ct family unspecified [ 687.775869][T13005] openvswitch: netlink: Actions may not be safe on all matching packets [ 687.817397][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 687.827921][ T7595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.839814][ T7595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.880430][ T5892] Bluetooth: hci4: command 0x0401 tx timeout [ 687.953123][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.968972][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.060514][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'. [ 688.140108][T13023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 688.345468][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'. [ 688.386539][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'. [ 688.554898][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 688.842405][ T5932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.967848][ T5932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.997596][T13054] lo speed is unknown, defaulting to 1000 [ 689.024212][T13054] lo speed is unknown, defaulting to 1000 [ 689.187194][ T5932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.427280][ T5932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.642316][ T5932] bridge_slave_1: left allmulticast mode [ 689.648014][ T5932] bridge_slave_1: left promiscuous mode [ 689.654133][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.664191][ T5932] bridge_slave_0: left allmulticast mode [ 689.669851][ T5932] bridge_slave_0: left promiscuous mode [ 689.675900][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.062764][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1943'. [ 690.428501][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.458642][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.485578][ T5932] bond0 (unregistering): Released all slaves [ 690.746690][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 690.776535][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 690.793784][ T5892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 690.803737][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 690.819576][ T5892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 690.828107][ T5892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.931466][T13097] 8021q: adding VLAN 0 to HW filter on device bond10 [ 691.012122][T13101] lo speed is unknown, defaulting to 1000 [ 691.026361][T13101] lo speed is unknown, defaulting to 1000 [ 691.269158][T13121] lo speed is unknown, defaulting to 1000 [ 691.277106][T13125] lo speed is unknown, defaulting to 1000 [ 691.426609][T13121] lo speed is unknown, defaulting to 1000 [ 691.675675][T13125] lo speed is unknown, defaulting to 1000 [ 692.267534][T13159] __nla_validate_parse: 103 callbacks suppressed [ 692.267554][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 692.316493][T13163] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 692.325880][T13101] chnl_net:caif_netlink_parms(): no params data found [ 692.363014][T13164] netlink: 'syz.3.1966': attribute type 4 has an invalid length. [ 692.384812][T13164] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1966'. [ 692.421414][T13166] netlink: 'syz.3.1966': attribute type 13 has an invalid length. [ 692.463343][ T5932] hsr_slave_0: left promiscuous mode [ 692.497829][ T5932] hsr_slave_1: left promiscuous mode [ 692.535634][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.576181][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.622683][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.637829][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.666992][T13168] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1967'. [ 692.682943][ T5932] veth1_macvtap: left promiscuous mode [ 692.688888][ T5932] veth0_macvtap: left promiscuous mode [ 692.695468][ T5932] veth1_vlan: left promiscuous mode [ 692.701524][ T5932] veth0_vlan: left promiscuous mode [ 692.920849][ T5142] Bluetooth: hci2: command tx timeout [ 693.393731][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 693.439487][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 693.907993][T13164] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 693.958624][T13166] macvtap0: entered promiscuous mode [ 693.966921][T13166] macvtap0: refused to change device tx_queue_len [ 694.118370][T13101] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.142316][T13101] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.149657][T13101] bridge_slave_0: entered allmulticast mode [ 694.174113][T13101] bridge_slave_0: entered promiscuous mode [ 694.193258][T13101] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.202613][T13101] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.209911][T13101] bridge_slave_1: entered allmulticast mode [ 694.219781][T13101] bridge_slave_1: entered promiscuous mode [ 694.278433][T13101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.337235][T13101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.441511][T13197] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 694.449466][T13197] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1973'. [ 694.480758][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'. [ 694.531503][T13101] team0: Port device team_slave_0 added [ 694.548607][T13194] lo speed is unknown, defaulting to 1000 [ 694.558995][T13194] lo speed is unknown, defaulting to 1000 [ 694.673565][T13101] team0: Port device team_slave_1 added [ 694.990452][ T5142] Bluetooth: hci2: command tx timeout [ 695.000882][T13101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.007884][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.035641][T13101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.147428][T13101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.160709][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.220493][T13101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.241311][T13205] lo speed is unknown, defaulting to 1000 [ 695.249649][T13205] lo speed is unknown, defaulting to 1000 [ 695.297201][T13220] ip6gretap0: entered promiscuous mode [ 695.303429][T13220] ip6gretap0: entered allmulticast mode [ 695.418887][T13101] hsr_slave_0: entered promiscuous mode [ 695.426484][T13101] hsr_slave_1: entered promiscuous mode [ 695.441768][T13101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.449708][T13101] Cannot create hsr debugfs directory [ 695.739317][T13222] IPVS: length: 71 != 8 [ 696.138872][T13225] netlink: 'syz.1.1980': attribute type 6 has an invalid length. [ 696.169286][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 696.588810][T13235] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 696.631835][T13235] 8021q: adding VLAN 0 to HW filter on device bond11 [ 696.699140][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1986'. [ 696.714115][T13242] netlink: 'syz.1.1985': attribute type 29 has an invalid length. [ 696.722737][T13241] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1986'. [ 696.749068][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 696.780738][T13239] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1985'. [ 696.903340][T13101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 696.922696][T13101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 696.946973][T13101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 696.978105][T13101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 697.071173][ T5142] Bluetooth: hci2: command tx timeout [ 697.166361][T13101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.275695][T13101] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.303403][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.310657][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.351851][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.359064][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.478499][T13101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 697.498396][T13101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.568951][ T5142] block nbd5: Receive control failed (result -32) [ 697.596515][T13283] __nla_validate_parse: 1 callbacks suppressed [ 697.596537][T13283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1998'. [ 697.626023][T13286] xt_l2tp: missing protocol rule (udp|l2tpip) [ 697.634771][T13283] unsupported nlmsg_type 40 [ 697.846395][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2002'. [ 697.911421][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2002'. [ 698.025934][T13315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.037173][T13315] bond0: entered promiscuous mode [ 698.043914][T13315] team0: Port device bond0 added [ 698.217149][T13101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.307900][T13322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.325786][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2010'. [ 698.344150][T13322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.369809][T13322] x_tables: duplicate underflow at hook 1 [ 698.386308][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 698.751801][T13346] netlink: 'syz.3.2015': attribute type 4 has an invalid length. [ 698.997853][T13101] veth0_vlan: entered promiscuous mode [ 699.035549][T13101] veth1_vlan: entered promiscuous mode [ 699.042289][T13357] syz.1.2017: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 699.103136][T13357] CPU: 1 UID: 0 PID: 13357 Comm: syz.1.2017 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 699.103167][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.103181][T13357] Call Trace: [ 699.103189][T13357] [ 699.103198][T13357] dump_stack_lvl+0x189/0x250 [ 699.103238][T13357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.103268][T13357] ? __pfx__printk+0x10/0x10 [ 699.103289][T13357] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 699.103310][T13357] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 699.103333][T13357] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 699.103356][T13357] warn_alloc+0x214/0x310 [ 699.103385][T13357] ? __pfx___schedule+0x10/0x10 [ 699.103420][T13357] ? __pfx_warn_alloc+0x10/0x10 [ 699.103448][T13357] ? kasan_save_track+0x4f/0x80 [ 699.103471][T13357] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 699.103495][T13357] ? xskq_create+0x56/0x170 [ 699.103526][T13357] ? __x64_sys_setsockopt+0x18b/0x220 [ 699.103552][T13357] ? do_syscall_64+0xf6/0x210 [ 699.103571][T13357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.103613][T13357] __vmalloc_node_range_noprof+0x125/0x12c0 [ 699.103678][T13357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 699.103711][T13357] ? __kasan_kmalloc+0x93/0xb0 [ 699.103743][T13357] vmalloc_user_noprof+0x74/0x80 [ 699.103771][T13357] ? xskq_create+0xbf/0x170 [ 699.103800][T13357] xskq_create+0xbf/0x170 [ 699.103834][T13357] xsk_init_queue+0xb0/0x110 [ 699.103869][T13357] xsk_setsockopt+0x43f/0x710 [ 699.103902][T13357] ? __pfx_xsk_setsockopt+0x10/0x10 [ 699.103944][T13357] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 699.103967][T13357] ? __pfx_xsk_setsockopt+0x10/0x10 [ 699.103999][T13357] do_sock_setsockopt+0x257/0x3e0 [ 699.104029][T13357] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 699.104054][T13357] ? __fget_files+0x2a/0x420 [ 699.104085][T13357] ? __fget_files+0x3a0/0x420 [ 699.104108][T13357] ? __fget_files+0x2a/0x420 [ 699.104142][T13357] __x64_sys_setsockopt+0x18b/0x220 [ 699.104178][T13357] do_syscall_64+0xf6/0x210 [ 699.104198][T13357] ? clear_bhb_loop+0x45/0xa0 [ 699.104222][T13357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.104242][T13357] RIP: 0033:0x7fb57f18e969 [ 699.104262][T13357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.104280][T13357] RSP: 002b:00007fb57cff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 699.104301][T13357] RAX: ffffffffffffffda RBX: 00007fb57f3b5fa0 RCX: 00007fb57f18e969 [ 699.104315][T13357] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 699.104326][T13357] RBP: 00007fb57f210ab1 R08: 0000000000000004 R09: 0000000000000000 [ 699.104337][T13357] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.104350][T13357] R13: 0000000000000000 R14: 00007fb57f3b5fa0 R15: 00007ffc936a1218 [ 699.104382][T13357] [ 699.104403][T13357] Mem-Info: [ 699.112001][T13354] lo speed is unknown, defaulting to 1000 [ 699.243637][T13357] active_anon:4491 inactive_anon:0 isolated_anon:0 [ 699.243637][T13357] active_file:1558 inactive_file:39958 isolated_file:0 [ 699.243637][T13357] unevictable:768 dirty:78 writeback:0 [ 699.243637][T13357] slab_reclaimable:11900 slab_unreclaimable:116359 [ 699.243637][T13357] mapped:29071 shmem:1366 pagetables:663 [ 699.243637][T13357] sec_pagetables:0 bounce:0 [ 699.243637][T13357] kernel_misc_reclaimable:0 [ 699.243637][T13357] free:1321387 free_pcp:844 free_cma:0 [ 699.244889][ T5142] Bluetooth: hci2: command tx timeout [ 699.330047][T13357] Node 0 active_anon:17964kB inactive_anon:0kB active_file:6232kB inactive_file:159632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116284kB dirty:308kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12072kB pagetables:2552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 699.543067][T13363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2017'. [ 699.561689][T13357] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 699.595044][T13357] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.660539][T13357] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 699.669166][T13101] veth0_macvtap: entered promiscuous mode [ 699.688993][T13357] Node 0 DMA32 free:1358948kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:17948kB inactive_anon:0kB active_file:6232kB inactive_file:159540kB unevictable:1536kB writepending:304kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:1668kB local_pcp:1044kB free_cma:0kB [ 699.728495][T13357] lowmem_reserve[]: 0 0 0 0 0 [ 699.738232][T13357] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.744712][T13101] veth1_macvtap: entered promiscuous mode [ 699.784807][T13357] lowmem_reserve[]: 0 0 0 0 0 [ 699.785911][T13358] siw: device registration error -23 [ 699.789709][T13357] Node 1 Normal free:3912856kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.823415][T13101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.839775][T13357] lowmem_reserve[]: 0 0 0 0 0 [ 699.846310][T13357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 699.860064][T13357] Node 0 DMA32: 700*4kB (UM) 385*8kB (UME) 193*16kB (UME) 193*32kB (UME) 488*64kB (UME) 462*128kB (UME) 437*256kB (UME) 292*512kB (UME) 192*1024kB (UM) 6*2048kB (UM) 191*4096kB (UM) = 1358120kB [ 699.881806][T13357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 699.893873][T13357] Node 1 Normal: 194*4kB (UM) 50*8kB (UME) 38*16kB (UME) 181*32kB (UME) 90*64kB (UME) 25*128kB (UME) 10*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 947*4096kB (M) = 3912856kB [ 699.921788][T13357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.933579][T13357] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 699.953105][T13357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.963784][T13357] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 699.975637][T13357] 42878 total pagecache pages [ 699.982185][T13357] 0 pages in swap cache [ 699.986532][T13357] Free swap = 124996kB [ 699.993500][T13357] Total swap = 124996kB [ 699.997832][T13357] 2097051 pages RAM [ 700.002804][T13357] 0 pages HighMem/MovableOnly [ 700.007531][T13357] 424379 pages reserved [ 700.014778][T13357] 0 pages cma reserved [ 700.034475][T13101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.043947][T13372] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 700.119876][T13101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.152811][T13101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.162265][T13101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.174666][T13101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.188097][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2021'. [ 700.249540][T13379] veth1_to_team: entered promiscuous mode [ 700.258156][T13379] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 700.509430][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.522595][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.653745][ T5946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.688186][ T5946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.713336][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2025'. [ 700.781505][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2025'. [ 701.213119][T13416] lo speed is unknown, defaulting to 1000 [ 701.420535][T13420] lo speed is unknown, defaulting to 1000 [ 701.680135][T13428] ip6t_rpfilter: unknown options [ 702.071659][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2040'. [ 702.142375][ T6302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.274198][T13439] macsec1: entered allmulticast mode [ 702.279657][T13439] veth0: entered allmulticast mode [ 702.295852][T13439] veth0: left allmulticast mode [ 702.428469][ T6302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.538938][ T6302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.727061][ T6302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.084340][ T5896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 703.101104][ T5896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 703.123020][ T5896] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 703.147199][ T5896] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 703.159158][ T5896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 703.402611][ T5892] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 703.438099][ T5892] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 703.448064][ T5892] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 703.465449][ T5892] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 703.480289][ T5892] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 704.665878][T13466] batadv0: entered promiscuous mode [ 704.673396][T13466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.685073][T13457] lo speed is unknown, defaulting to 1000 [ 704.737131][T13474] ------------[ cut here ]------------ [ 704.743672][T13474] WARNING: CPU: 1 PID: 13474 at lib/nlattr.c:123 nla_get_range_unsigned+0xc8/0x4b0 [ 704.753528][T13474] Modules linked in: [ 704.757787][T13474] CPU: 1 UID: 0 PID: 13474 Comm: syz.0.2048 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 704.770325][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 704.781012][T13474] RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 704.787128][T13474] Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 8e 8a d3 fc 66 85 ed 0f 88 df 02 00 00 e8 e0 86 d3 fc eb 09 e8 d9 86 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8 [ 704.807182][T13474] RSP: 0018:ffffc900047673d0 EFLAGS: 00010293 [ 704.813650][T13474] RAX: ffffffff84ec4c4f RBX: ffffffff8c80a430 RCX: ffff888044f99e00 [ 704.821917][T13474] RDX: 0000000000000000 RSI: 0000000000008a3e RDI: 0000000000000000 [ 704.829921][T13474] RBP: 0000000000008a3e R08: ffff888044f99e00 R09: 0000000000000004 [ 704.838152][T13474] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8c80a43a [ 704.846253][T13474] R13: ffffc900047675b0 R14: dffffc0000000000 R15: 1ffffffff1901486 [ 704.854366][T13474] FS: 00007f1e6b1cd6c0(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 704.863823][T13474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.870550][T13474] CR2: 00007f1e6a374420 CR3: 00000000640c2000 CR4: 00000000003526f0 [ 704.878807][T13474] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 704.887570][T13474] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 704.895658][T13474] Call Trace: [ 704.898975][T13474] [ 704.902032][T13474] __netlink_policy_dump_write_attr+0x565/0xdc0 [ 704.908331][T13474] ? __pfx___netlink_policy_dump_write_attr+0x10/0x10 [ 704.915812][T13474] ? stack_trace_save+0x9c/0xe0 [ 704.921053][T13474] ? stack_depot_save_flags+0x40/0x910 [ 704.926568][T13474] ? __asan_memset+0x22/0x50 [ 704.931647][T13474] ? __nla_put+0x85/0xd0 [ 704.935938][T13474] ? __asan_memcpy+0x40/0x70 [ 704.941158][T13474] ? nla_put+0xd0/0x150 [ 704.945376][T13474] netlink_policy_dump_write+0x1e1/0x6e0 [ 704.951401][T13474] ctrl_dumppolicy+0x6f4/0xb90 [ 704.956243][T13474] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 704.961649][T13474] ? genl_dumpit+0xdb/0x1b0 [ 704.966209][T13474] ? __pfx___mutex_lock+0x10/0x10 [ 704.971353][T13474] ? __build_skb_around+0x257/0x3e0 [ 704.976602][T13474] genl_dumpit+0x108/0x1b0 [ 704.981365][T13474] netlink_dump+0x64e/0xe70 [ 704.985933][T13474] ? __pfx_netlink_dump+0x10/0x10 [ 704.991370][T13474] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.996629][T13474] ? kmem_cache_free+0x192/0x3f0 [ 705.001702][T13474] netlink_recvmsg+0x67b/0xe00 [ 705.006510][T13474] ? __lock_acquire+0xaac/0xd20 [ 705.011491][T13474] ? __pfx_netlink_recvmsg+0x10/0x10 [ 705.016825][T13474] ? __pfx_aa_sk_perm+0x10/0x10 [ 705.021789][T13474] ? aa_sock_msg_perm+0x94/0x160 [ 705.026765][T13474] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 705.032250][T13474] ? security_socket_recvmsg+0x7e/0x2e0 [ 705.037839][T13474] ? __pfx_netlink_recvmsg+0x10/0x10 [ 705.043262][T13474] sock_recvmsg+0x229/0x270 [ 705.047811][T13474] __sys_recvfrom+0x1f6/0x340 [ 705.052626][T13474] ? __pfx___sys_recvfrom+0x10/0x10 [ 705.057950][T13474] ? count_memcg_event_mm+0x92/0x3b0 [ 705.063474][T13474] __x64_sys_recvfrom+0xde/0x100 [ 705.068461][T13474] do_syscall_64+0xf6/0x210 [ 705.073144][T13474] ? clear_bhb_loop+0x45/0xa0 [ 705.077865][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.084074][T13474] RIP: 0033:0x7f1e6a390734 [ 705.088526][T13474] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 705.108517][T13474] RSP: 002b:00007f1e6b1cbf30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 705.117076][T13474] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007f1e6a390734 [ 705.125144][T13474] RDX: 0000000000001000 RSI: 00007f1e6b1cc010 RDI: 0000000000000003 [ 705.133241][T13474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 705.141430][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000340 [ 705.149440][T13474] R13: 00007f1e6b1cbfc0 R14: 000000000000000c R15: 0000000000000000 [ 705.157808][T13474] [ 705.161093][T13474] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 705.168445][T13474] CPU: 1 UID: 0 PID: 13474 Comm: syz.0.2048 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 705.180540][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 705.190626][T13474] Call Trace: [ 705.193929][T13474] [ 705.196886][T13474] dump_stack_lvl+0x99/0x250 [ 705.201520][T13474] ? __asan_memcpy+0x40/0x70 [ 705.206140][T13474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.211383][T13474] ? __pfx__printk+0x10/0x10 [ 705.216019][T13474] panic+0x2db/0x790 [ 705.219986][T13474] ? __pfx_panic+0x10/0x10 [ 705.224463][T13474] __warn+0x31b/0x4b0 [ 705.228479][T13474] ? nla_get_range_unsigned+0xc8/0x4b0 [ 705.233978][T13474] ? nla_get_range_unsigned+0xc8/0x4b0 [ 705.239475][T13474] report_bug+0x2be/0x4f0 [ 705.243848][T13474] ? nla_get_range_unsigned+0xc8/0x4b0 [ 705.249338][T13474] ? nla_get_range_unsigned+0xc8/0x4b0 [ 705.254835][T13474] ? nla_get_range_unsigned+0xca/0x4b0 [ 705.260337][T13474] handle_bug+0x84/0x160 [ 705.264616][T13474] exc_invalid_op+0x1a/0x50 [ 705.269157][T13474] asm_exc_invalid_op+0x1a/0x20 [ 705.274045][T13474] RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 [ 705.280147][T13474] Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 8e 8a d3 fc 66 85 ed 0f 88 df 02 00 00 e8 e0 86 d3 fc eb 09 e8 d9 86 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8 [ 705.299882][T13474] RSP: 0018:ffffc900047673d0 EFLAGS: 00010293 [ 705.305985][T13474] RAX: ffffffff84ec4c4f RBX: ffffffff8c80a430 RCX: ffff888044f99e00 [ 705.313994][T13474] RDX: 0000000000000000 RSI: 0000000000008a3e RDI: 0000000000000000 [ 705.321997][T13474] RBP: 0000000000008a3e R08: ffff888044f99e00 R09: 0000000000000004 [ 705.330002][T13474] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8c80a43a [ 705.338004][T13474] R13: ffffc900047675b0 R14: dffffc0000000000 R15: 1ffffffff1901486 [ 705.346023][T13474] ? nla_get_range_unsigned+0x39f/0x4b0 [ 705.351640][T13474] __netlink_policy_dump_write_attr+0x565/0xdc0 [ 705.357913][T13474] ? __pfx___netlink_policy_dump_write_attr+0x10/0x10 [ 705.364703][T13474] ? stack_trace_save+0x9c/0xe0 [ 705.369570][T13474] ? stack_depot_save_flags+0x40/0x910 [ 705.375047][T13474] ? __asan_memset+0x22/0x50 [ 705.379648][T13474] ? __nla_put+0x85/0xd0 [ 705.383904][T13474] ? __asan_memcpy+0x40/0x70 [ 705.388503][T13474] ? nla_put+0xd0/0x150 [ 705.392679][T13474] netlink_policy_dump_write+0x1e1/0x6e0 [ 705.398337][T13474] ctrl_dumppolicy+0x6f4/0xb90 [ 705.403134][T13474] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 705.408436][T13474] ? genl_dumpit+0xdb/0x1b0 [ 705.412961][T13474] ? __pfx___mutex_lock+0x10/0x10 [ 705.418007][T13474] ? __build_skb_around+0x257/0x3e0 [ 705.423242][T13474] genl_dumpit+0x108/0x1b0 [ 705.427701][T13474] netlink_dump+0x64e/0xe70 [ 705.432240][T13474] ? __pfx_netlink_dump+0x10/0x10 [ 705.437297][T13474] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.442531][T13474] ? kmem_cache_free+0x192/0x3f0 [ 705.447499][T13474] netlink_recvmsg+0x67b/0xe00 [ 705.452289][T13474] ? __lock_acquire+0xaac/0xd20 [ 705.457168][T13474] ? __pfx_netlink_recvmsg+0x10/0x10 [ 705.462485][T13474] ? __pfx_aa_sk_perm+0x10/0x10 [ 705.467376][T13474] ? aa_sock_msg_perm+0x94/0x160 [ 705.472335][T13474] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 705.477651][T13474] ? security_socket_recvmsg+0x7e/0x2e0 [ 705.483255][T13474] ? __pfx_netlink_recvmsg+0x10/0x10 [ 705.488577][T13474] sock_recvmsg+0x229/0x270 [ 705.493100][T13474] __sys_recvfrom+0x1f6/0x340 [ 705.497804][T13474] ? __pfx___sys_recvfrom+0x10/0x10 [ 705.503018][T13474] ? count_memcg_event_mm+0x92/0x3b0 [ 705.508356][T13474] __x64_sys_recvfrom+0xde/0x100 [ 705.513316][T13474] do_syscall_64+0xf6/0x210 [ 705.517833][T13474] ? clear_bhb_loop+0x45/0xa0 [ 705.522610][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.528551][T13474] RIP: 0033:0x7f1e6a390734 [ 705.532975][T13474] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 705.552606][T13474] RSP: 002b:00007f1e6b1cbf30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 705.561043][T13474] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007f1e6a390734 [ 705.569058][T13474] RDX: 0000000000001000 RSI: 00007f1e6b1cc010 RDI: 0000000000000003 [ 705.577052][T13474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 705.585039][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000340 [ 705.593018][T13474] R13: 00007f1e6b1cbfc0 R14: 000000000000000c R15: 0000000000000000 [ 705.601015][T13474] [ 705.604344][T13474] Kernel Offset: disabled [ 705.608672][T13474] Rebooting in 86400 seconds..