last executing test programs: 3.729607797s ago: executing program 0 (id=1744): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8810) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000014) syz_genetlink_get_family_id$ipvs(&(0x7f0000004140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 3.040539045s ago: executing program 4 (id=1753): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x744, 0x6}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20044000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 2.82732905s ago: executing program 0 (id=1754): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.72352422s ago: executing program 0 (id=1755): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write$nbd(r2, 0x0, 0xd6) 2.717989784s ago: executing program 4 (id=1756): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.60366851s ago: executing program 4 (id=1757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}}, 0x0) 2.385267409s ago: executing program 2 (id=1758): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) close(0xffffffffffffffff) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 2.231485966s ago: executing program 3 (id=1760): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getpid() connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) 2.060672806s ago: executing program 4 (id=1761): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) 1.627904998s ago: executing program 0 (id=1764): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8810) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000014) syz_genetlink_get_family_id$ipvs(&(0x7f0000004140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 1.383568052s ago: executing program 1 (id=1765): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b8c4a8", 0x3}], 0x1}}], 0x1, 0x801) 1.301106774s ago: executing program 1 (id=1766): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x744, 0x6}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20044000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 1.214307146s ago: executing program 3 (id=1767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 1.12329216s ago: executing program 4 (id=1768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x20000054) 1.053605691s ago: executing program 2 (id=1769): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) 1.045279384s ago: executing program 3 (id=1770): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010042) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x1}, 0xfffd, 0x7, 0x0, 0xb1a, 0x2}, {0xbffffffffffffffe, 0x3, 0x0, 0xd, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x2, 0x0, 0x3}}, 0xe8) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000cc0), 0x0, 0xc0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10], 0x48) sendto$inet(r3, &(0x7f0000000640)="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", 0x947, 0x20000000, 0x0, 0x0) 913.50356ms ago: executing program 2 (id=1771): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}}, 0x0) 901.814938ms ago: executing program 3 (id=1772): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x8, 0x2}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x8}}}, 0x0, 0x0, 0x2d, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) listen(r3, 0x71e4) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) listen(r0, 0x1ff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) accept4(r6, 0x0, &(0x7f00000000c0), 0x800) sendto$inet(r6, &(0x7f0000000040)="ab", 0x1, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 821.418483ms ago: executing program 1 (id=1773): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x94, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}}, 0x0, 0x0, 0x30, 0x0, "0c9e089c1b4a044959de79f04103c458187eb4022d996aff1f7154e786455269c425a7519c5319d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d138500"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x4, @empty, 0x6}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 595.450646ms ago: executing program 0 (id=1774): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 568.039799ms ago: executing program 3 (id=1775): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 497.70264ms ago: executing program 1 (id=1776): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 404.471774ms ago: executing program 0 (id=1777): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000014) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000004140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet(0x2, 0xa, 0x4) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 359.531247ms ago: executing program 2 (id=1778): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) sendto$inet6(r6, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 249.831857ms ago: executing program 1 (id=1779): r0 = socket(0x2, 0x80805, 0x0) connect$vsock_stream(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r1, 0x800454d2, &(0x7f0000000340)={'veth1\x00'}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 212.909836ms ago: executing program 2 (id=1780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x400}) close(r0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 137.790152ms ago: executing program 4 (id=1781): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'wlan0\x00', 0x800}) shutdown(r0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendto(r0, &(0x7f00000000c0)="91c0bfd13e777b25442673a29ab505ba46a2233c0d3acfdd67842b2a90d640ef9baed55055f37306bbb6844794118ca84fcd871299412ff1d2e5164477fa8e004ac9499de185c39d45d7efec060686357a2f8734f4cefe7c1a9e7cd25d486c8fe1d183b1ff8108a03c2de0bbf6b652acbc10114a16f8f148f05017ae4ab0b6fb0570cfedcb33dcbeebf21c4d7c0bc2abf0fe0fc42819b0212a9074002256ee8acf68ff3a27e7970f68c6bde0fbe04c025f18c4c5a9722479ac", 0xb9, 0x4090, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5, 0x1}, 0x80) 63.528032ms ago: executing program 3 (id=1782): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) 63.198532ms ago: executing program 1 (id=1783): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20044000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 0s ago: executing program 2 (id=1784): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. [ 72.274946][ T5825] cgroup: Unknown subsys name 'net' [ 72.451665][ T5825] cgroup: Unknown subsys name 'cpuset' [ 72.460671][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.099384][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.529884][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.558732][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.566888][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.576102][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.587662][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.596046][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.604780][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.613524][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.622443][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.631172][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.634560][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.639082][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.655652][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.661665][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.663403][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.673007][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.683128][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.686671][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.693861][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.707207][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.709859][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.714871][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.724855][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.730274][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.739485][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.743447][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.750024][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.765253][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.765389][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.796873][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.309392][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 77.326294][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 77.366096][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 77.444274][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 77.610968][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.622239][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.634927][ T5835] bridge_slave_0: entered allmulticast mode [ 77.643192][ T5835] bridge_slave_0: entered promiscuous mode [ 77.684051][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.691392][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.699587][ T5835] bridge_slave_1: entered allmulticast mode [ 77.706493][ T5835] bridge_slave_1: entered promiscuous mode [ 77.722644][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.730353][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.737791][ T5843] bridge_slave_0: entered allmulticast mode [ 77.744602][ T5843] bridge_slave_0: entered promiscuous mode [ 77.768485][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.775651][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.783195][ T5836] bridge_slave_0: entered allmulticast mode [ 77.790142][ T5836] bridge_slave_0: entered promiscuous mode [ 77.799351][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.806604][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.814495][ T5836] bridge_slave_1: entered allmulticast mode [ 77.822359][ T5836] bridge_slave_1: entered promiscuous mode [ 77.839992][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.847286][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.854945][ T5843] bridge_slave_1: entered allmulticast mode [ 77.862097][ T5843] bridge_slave_1: entered promiscuous mode [ 77.870504][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 77.900346][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.932729][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.940909][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.948634][ T5840] bridge_slave_0: entered allmulticast mode [ 77.955458][ T5840] bridge_slave_0: entered promiscuous mode [ 77.974735][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.986146][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.010256][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.022303][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.047707][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.055635][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.063576][ T5840] bridge_slave_1: entered allmulticast mode [ 78.071526][ T5840] bridge_slave_1: entered promiscuous mode [ 78.090370][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.151690][ T5835] team0: Port device team_slave_0 added [ 78.179216][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.206897][ T5836] team0: Port device team_slave_0 added [ 78.215558][ T5835] team0: Port device team_slave_1 added [ 78.225745][ T5843] team0: Port device team_slave_0 added [ 78.252288][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.286812][ T5836] team0: Port device team_slave_1 added [ 78.306765][ T5843] team0: Port device team_slave_1 added [ 78.324441][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.332212][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.340145][ T5839] bridge_slave_0: entered allmulticast mode [ 78.346975][ T5839] bridge_slave_0: entered promiscuous mode [ 78.395315][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.402491][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.428834][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.444074][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.451973][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.459743][ T5839] bridge_slave_1: entered allmulticast mode [ 78.466651][ T5839] bridge_slave_1: entered promiscuous mode [ 78.477029][ T5840] team0: Port device team_slave_0 added [ 78.496460][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.503634][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.530865][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.544034][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.551452][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.577849][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.606639][ T5840] team0: Port device team_slave_1 added [ 78.622985][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.633196][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.660044][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.671969][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.679243][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.705343][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.746170][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.766478][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.773984][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.800677][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.829165][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.839284][ T5850] Bluetooth: hci3: command tx timeout [ 78.839288][ T5847] Bluetooth: hci2: command tx timeout [ 78.845247][ T5847] Bluetooth: hci4: command tx timeout [ 78.850672][ T5841] Bluetooth: hci0: command tx timeout [ 78.856714][ T5855] Bluetooth: hci1: command tx timeout [ 78.877102][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.884953][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.911313][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.947192][ T5843] hsr_slave_0: entered promiscuous mode [ 78.954259][ T5843] hsr_slave_1: entered promiscuous mode [ 78.964773][ T5835] hsr_slave_0: entered promiscuous mode [ 78.971449][ T5835] hsr_slave_1: entered promiscuous mode [ 78.977780][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.985802][ T5835] Cannot create hsr debugfs directory [ 79.002805][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.014295][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.041365][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.059854][ T5839] team0: Port device team_slave_0 added [ 79.099840][ T5839] team0: Port device team_slave_1 added [ 79.122851][ T5836] hsr_slave_0: entered promiscuous mode [ 79.129957][ T5836] hsr_slave_1: entered promiscuous mode [ 79.136265][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.144879][ T5836] Cannot create hsr debugfs directory [ 79.208069][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.215171][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.242458][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.270618][ T5840] hsr_slave_0: entered promiscuous mode [ 79.277015][ T5840] hsr_slave_1: entered promiscuous mode [ 79.283566][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.291387][ T5840] Cannot create hsr debugfs directory [ 79.307101][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.314240][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.340659][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.513357][ T5839] hsr_slave_0: entered promiscuous mode [ 79.519985][ T5839] hsr_slave_1: entered promiscuous mode [ 79.526092][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.534619][ T5839] Cannot create hsr debugfs directory [ 79.787814][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.801618][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.843562][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.866079][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.906794][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.921269][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.933223][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.963639][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.023003][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.053744][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.064722][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.090016][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.154092][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.167302][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.183310][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.193783][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.292518][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.324585][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.352584][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.366236][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.409720][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.439210][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.514462][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.530342][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.553753][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.582444][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.589876][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.609489][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.616639][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.641711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.649043][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.661403][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.668721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.735105][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.752654][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.759831][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.796465][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.808860][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.816013][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.831086][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.860713][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.881761][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.888945][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.900665][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.907850][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.917978][ T5855] Bluetooth: hci0: command tx timeout [ 80.918131][ T5841] Bluetooth: hci3: command tx timeout [ 80.923459][ T5855] Bluetooth: hci1: command tx timeout [ 80.929068][ T5841] Bluetooth: hci4: command tx timeout [ 80.934894][ T5850] Bluetooth: hci2: command tx timeout [ 80.989612][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.028465][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.035639][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.064731][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.072098][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.152233][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.362895][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.530378][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.553932][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.620095][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.686203][ T5840] veth0_vlan: entered promiscuous mode [ 81.742606][ T5840] veth1_vlan: entered promiscuous mode [ 81.751749][ T5843] veth0_vlan: entered promiscuous mode [ 81.763623][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.797027][ T5843] veth1_vlan: entered promiscuous mode [ 81.865875][ T5836] veth0_vlan: entered promiscuous mode [ 81.901902][ T5840] veth0_macvtap: entered promiscuous mode [ 81.916654][ T5840] veth1_macvtap: entered promiscuous mode [ 81.940791][ T5836] veth1_vlan: entered promiscuous mode [ 81.950136][ T5843] veth0_macvtap: entered promiscuous mode [ 81.971552][ T5839] veth0_vlan: entered promiscuous mode [ 81.984064][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.001169][ T5843] veth1_macvtap: entered promiscuous mode [ 82.023644][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.044664][ T5839] veth1_vlan: entered promiscuous mode [ 82.056818][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.066478][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.075529][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.084935][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.126674][ T5836] veth0_macvtap: entered promiscuous mode [ 82.144133][ T5835] veth0_vlan: entered promiscuous mode [ 82.161400][ T5836] veth1_macvtap: entered promiscuous mode [ 82.173090][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.184598][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.196842][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.218992][ T5839] veth0_macvtap: entered promiscuous mode [ 82.232209][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.244868][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.256830][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.275482][ T5839] veth1_macvtap: entered promiscuous mode [ 82.290986][ T5835] veth1_vlan: entered promiscuous mode [ 82.303119][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.313022][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.322314][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.331141][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.372667][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.383401][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.395842][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.406853][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.419135][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.446560][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.457694][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.467962][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.479894][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.489927][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.500621][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.512726][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.541414][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.553083][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.564147][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.575813][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.588876][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.596740][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.608707][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.618965][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.629638][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.639614][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.650193][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.661593][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.702065][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.713989][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.722874][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.732756][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.777701][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.786496][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.796389][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.809790][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.824549][ T5835] veth0_macvtap: entered promiscuous mode [ 82.853727][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.868327][ T5835] veth1_macvtap: entered promiscuous mode [ 82.883650][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.912947][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.923832][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.004568][ T5850] Bluetooth: hci4: command tx timeout [ 83.010765][ T55] Bluetooth: hci2: command tx timeout [ 83.016253][ T55] Bluetooth: hci3: command tx timeout [ 83.021905][ T5855] Bluetooth: hci1: command tx timeout [ 83.022001][ T5841] Bluetooth: hci0: command tx timeout [ 83.043567][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.052874][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.063695][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.070044][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.081795][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.093903][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.103961][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.114980][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.125279][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.136504][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.150849][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.175069][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.189597][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.190944][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.215080][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.240121][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.257067][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.272568][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.277533][ T5922] modprobe (5922) used greatest stack depth: 19280 bytes left [ 83.287774][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.301447][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.312297][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.323812][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.335632][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.348616][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.391372][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.431073][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.440332][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.449291][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458084][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.494157][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.522325][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.579704][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.593364][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.731500][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.759465][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.839278][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.847187][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.985306][ T5933] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6'. [ 84.015769][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.040306][ T5933] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 84.049114][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.232332][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.387326][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.077755][ T5841] Bluetooth: hci0: command tx timeout [ 85.083998][ T5847] Bluetooth: hci3: command tx timeout [ 85.084078][ T55] Bluetooth: hci4: command tx timeout [ 85.089564][ T5847] Bluetooth: hci1: command tx timeout [ 85.096104][ T5850] Bluetooth: hci2: command tx timeout [ 85.433702][ T5968] dummy0: entered allmulticast mode [ 85.484472][ T5968] batman_adv: batadv0: Adding interface: dummy0 [ 85.503356][ T5968] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.560059][ T5968] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 85.867248][ T5981] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.951294][ T5985] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 86.434155][ T5996] bridge_slave_0: left allmulticast mode [ 86.466640][ T5996] bridge_slave_0: left promiscuous mode [ 86.497883][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.530281][ T6000] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 86.546293][ T5996] bridge_slave_1: left allmulticast mode [ 86.579395][ T5996] bridge_slave_1: left promiscuous mode [ 86.593035][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.617804][ T5996] bond0: (slave bond_slave_0): Releasing backup interface [ 86.631755][ T5996] bond0: (slave bond_slave_1): Releasing backup interface [ 86.689967][ T5996] team0: Port device team_slave_0 removed [ 86.715480][ T5996] team0: Port device team_slave_1 removed [ 86.723703][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.732392][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.749570][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.760639][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.935692][ T6000] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.146811][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.197544][ T6000] syz.3.26 (6000) used greatest stack depth: 19248 bytes left [ 87.610091][ T6033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.39'. [ 88.137936][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 88.570870][ T6053] af_packet: tpacket_rcv: packet too big, clamped from 1328 to 4294967272. macoff=96 [ 88.643665][ T6047] syz.2.47 (6047) used greatest stack depth: 18608 bytes left [ 90.200050][ T6091] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.203570][ T52] IPVS: starting estimator thread 0... [ 90.325081][ T6098] netlink: 'syz.4.67': attribute type 1 has an invalid length. [ 90.347698][ T6096] IPVS: using max 20 ests per chain, 48000 per kthread [ 90.370423][ T6098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.67'. [ 90.459404][ T6098] Zero length message leads to an empty skb [ 91.248167][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.74'. [ 91.649971][ T6119] ip6erspan0: entered promiscuous mode [ 92.099131][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 92.167695][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 92.283870][ T836] cfg80211: failed to load regulatory.db [ 92.622662][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 92.673421][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 92.701756][ T6149] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 92.729829][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 92.754941][ T6149] netlink: 10 bytes leftover after parsing attributes in process `syz.1.87'. [ 92.990897][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.93'. [ 93.250361][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'. [ 93.380244][ T6170] bridge_slave_0: entered allmulticast mode [ 93.913520][ T6186] xt_CT: No such helper "syz1" [ 94.430907][ T6206] tipc: Can't bind to reserved service type 2 [ 94.767581][ T6221] netlink: 'syz.0.115': attribute type 39 has an invalid length. [ 95.033656][ T6228] bond0: (slave wlan1): Releasing backup interface [ 95.176767][ T6230] team0: Mode changed to "loadbalance" [ 95.390416][ T6241] __nla_validate_parse: 5 callbacks suppressed [ 95.390940][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 95.844281][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 95.863540][ T6253] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 96.075477][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 96.816821][ T6270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.045654][ T6287] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 98.116284][ T6287] gretap1: entered promiscuous mode [ 98.426940][ T6294] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 98.485670][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 99.095075][ T6307] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 99.171250][ T6307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.312935][ T6307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.330861][ T6307] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 99.358856][ T6307] bond1: (slave ipip0): Error -95 calling set_mac_address [ 99.433234][ T6309] bond1: (slave ip6erspan0): making interface the new active one [ 99.459605][ T6309] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 99.662426][ T6312] syzkaller1: entered promiscuous mode [ 99.677469][ T6312] syzkaller1: entered allmulticast mode [ 99.876724][ T6316] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(196932086056862) <= P.seqno(0) <= S.SWH(196932086056936)) and (P.ackno exists or LAWL(68599739700844) <= P.ackno(68599739700845) <= S.AWH(68599739700845), sending SYNC... [ 100.143818][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 100.188091][ T6330] bond1: entered promiscuous mode [ 100.193697][ T6330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.464093][ T6342] Bluetooth: MGMT ver 1.23 [ 100.499833][ T6340] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 100.566531][ T6347] syz.4.159: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.635144][ T6347] CPU: 1 UID: 0 PID: 6347 Comm: syz.4.159 Not tainted 6.14.0-rc6-syzkaller-00121-gd9c743b6990b #0 [ 100.635177][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.635193][ T6347] Call Trace: [ 100.635206][ T6347] [ 100.635217][ T6347] dump_stack_lvl+0x241/0x360 [ 100.635260][ T6347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.635284][ T6347] ? __pfx__printk+0x10/0x10 [ 100.635312][ T6347] ? __rcu_read_unlock+0xa1/0x110 [ 100.635350][ T6347] warn_alloc+0x278/0x410 [ 100.635378][ T6347] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 100.635406][ T6347] ? __pfx_warn_alloc+0x10/0x10 [ 100.635431][ T6347] ? kasan_save_track+0x3f/0x80 [ 100.635457][ T6347] ? __kasan_kmalloc+0x98/0xb0 [ 100.635486][ T6347] ? xsk_setsockopt+0x4aa/0x810 [ 100.635511][ T6347] ? do_sock_setsockopt+0x3af/0x720 [ 100.635533][ T6347] ? __x64_sys_setsockopt+0x1ee/0x280 [ 100.635555][ T6347] ? do_syscall_64+0xf3/0x230 [ 100.635586][ T6347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.635626][ T6347] __vmalloc_node_range_noprof+0x126/0x1380 [ 100.635677][ T6347] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.635715][ T6347] ? __kasan_kmalloc+0x98/0xb0 [ 100.635746][ T6347] vmalloc_user_noprof+0x74/0x80 [ 100.635769][ T6347] ? xskq_create+0xb6/0x170 [ 100.635792][ T6347] xskq_create+0xb6/0x170 [ 100.635818][ T6347] xsk_init_queue+0xa1/0x100 [ 100.635846][ T6347] xsk_setsockopt+0x4aa/0x810 [ 100.635873][ T6347] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.635897][ T6347] ? __pfx_aa_sk_perm+0x10/0x10 [ 100.635932][ T6347] ? aa_sock_opt_perm+0x79/0x120 [ 100.635970][ T6347] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.635993][ T6347] do_sock_setsockopt+0x3af/0x720 [ 100.636022][ T6347] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 100.636049][ T6347] ? __fget_files+0x395/0x410 [ 100.636079][ T6347] ? __fget_files+0x2a/0x410 [ 100.636118][ T6347] __x64_sys_setsockopt+0x1ee/0x280 [ 100.636147][ T6347] do_syscall_64+0xf3/0x230 [ 100.636176][ T6347] ? clear_bhb_loop+0x35/0x90 [ 100.636209][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.636251][ T6347] RIP: 0033:0x7fcbce38d169 [ 100.636276][ T6347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.636294][ T6347] RSP: 002b:00007fcbcf1b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.636319][ T6347] RAX: ffffffffffffffda RBX: 00007fcbce5a5fa0 RCX: 00007fcbce38d169 [ 100.636335][ T6347] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 100.636347][ T6347] RBP: 00007fcbce40e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 100.636360][ T6347] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.636373][ T6347] R13: 0000000000000000 R14: 00007fcbce5a5fa0 R15: 00007fffecfdab98 [ 100.636405][ T6347] [ 100.636677][ T6347] Mem-Info: [ 100.973748][ T6347] active_anon:4946 inactive_anon:0 isolated_anon:0 [ 100.973748][ T6347] active_file:1051 inactive_file:38305 isolated_file:0 [ 100.973748][ T6347] unevictable:768 dirty:257 writeback:75 [ 100.973748][ T6347] slab_reclaimable:9878 slab_unreclaimable:97550 [ 100.973748][ T6347] mapped:30706 shmem:1427 pagetables:926 [ 100.973748][ T6347] sec_pagetables:0 bounce:0 [ 100.973748][ T6347] kernel_misc_reclaimable:0 [ 100.973748][ T6347] free:1346975 free_pcp:436 free_cma:0 [ 101.080432][ T6352] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 101.123122][ T6347] Node 0 active_anon:19684kB inactive_anon:0kB active_file:4204kB inactive_file:153148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122724kB dirty:820kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11296kB pagetables:3604kB sec_pagetables:0kB all_unreclaimable? no [ 101.188034][ T6347] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 101.222083][ T6348] syz.0.160 (6348) used greatest stack depth: 18224 bytes left [ 101.236869][ T6347] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.283784][ T6347] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 101.290332][ T6347] Node 0 DMA32 free:1469536kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19552kB inactive_anon:0kB active_file:4204kB inactive_file:152824kB unevictable:1536kB writepending:808kB present:3129332kB managed:2549828kB mlocked:0kB bounce:0kB free_pcp:2404kB local_pcp:1820kB free_cma:0kB [ 101.322385][ T6347] lowmem_reserve[]: 0 0 0 0 0 [ 101.328329][ T6347] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.428869][ T6347] lowmem_reserve[]: 0 0 0 0 0 [ 101.433818][ T6347] Node 1 Normal free:3903648kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 101.504643][ T6347] lowmem_reserve[]: 0 0 0 0 0 [ 101.534166][ T6347] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.548186][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 101.567592][ T6366] bridge_slave_1: left allmulticast mode [ 101.573325][ T6366] bridge_slave_1: left promiscuous mode [ 101.594920][ T6347] Node 0 DMA32: 635*4kB (UME) 351*8kB (UME) 568*16kB (UME) 109*32kB (UME) 98*64kB (UME) 54*128kB (UME) 21*256kB (UME) 16*512kB (UM) 5*1024kB (UM) 4*2048kB (UM) 345*4096kB (UM) = 1471108kB [ 101.596974][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.636444][ T6347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 101.650624][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 101.669642][ T6372] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 101.679285][ T6347] Node 1 Normal: 258*4kB (UE) 61*8kB (UME) 45*16kB (UME) 213*32kB (UME) 95*64kB (UME) 31*128kB (UME) 10*256kB (UM) 8*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3903648kB [ 101.698928][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.2.167'. [ 101.708501][ T6347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.724243][ T6366] bridge_slave_0: left allmulticast mode [ 101.730693][ T6366] bridge_slave_0: left promiscuous mode [ 101.736605][ T6347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.747081][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.755148][ T6347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.766437][ T6347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.777766][ T6347] 40861 total pagecache pages [ 101.794847][ T6347] 0 pages in swap cache [ 101.809204][ T6347] Free swap = 124996kB [ 101.813482][ T6347] Total swap = 124996kB [ 101.819321][ T6347] 2097051 pages RAM [ 101.823334][ T6347] 0 pages HighMem/MovableOnly [ 101.829569][ T6347] 427872 pages reserved [ 101.838628][ T6347] 0 pages cma reserved [ 101.905295][ T6368] vlan3: entered promiscuous mode [ 101.911590][ T6368] vlan3: entered allmulticast mode [ 101.919293][ T6368] hsr_slave_1: entered allmulticast mode [ 102.001979][ T6371] hsr_slave_1 (unregistering): left allmulticast mode [ 102.035685][ T6371] hsr_slave_1 (unregistering): left promiscuous mode [ 102.061223][ T6372] team0: Port device geneve0 added [ 102.079860][ T6374] bridge1: entered allmulticast mode [ 102.598083][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.603379][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 102.619220][ T6399] C: renamed from lo (while UP) [ 102.658760][ T6399] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 102.699068][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 102.720818][ T6400] bridge_slave_1: left allmulticast mode [ 102.726563][ T6400] bridge_slave_1: left promiscuous mode [ 102.733093][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.758831][ T6400] bridge_slave_0: left allmulticast mode [ 102.764544][ T6400] bridge_slave_0: left promiscuous mode [ 102.777675][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.796288][ T6406] netlink: 'syz.0.178': attribute type 4 has an invalid length. [ 102.859551][ T6409] netlink: 'syz.0.178': attribute type 4 has an invalid length. [ 102.884331][ T6396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.922885][ T6396] team0: Port device bond0 added [ 102.935245][ T6405] bridge0: port 1(team0) entered blocking state [ 102.967673][ T6405] bridge0: port 1(team0) entered disabled state [ 103.001612][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 103.006893][ T6405] team0: entered allmulticast mode [ 103.025639][ T6405] bond0: entered allmulticast mode [ 103.047744][ T6405] team0: entered promiscuous mode [ 103.053011][ T6405] bond0: entered promiscuous mode [ 103.708979][ T6432] netlink: 'syz.4.189': attribute type 39 has an invalid length. [ 103.768484][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.192'. [ 103.798801][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.191'. [ 103.827195][ T6439] veth0_to_batadv: entered promiscuous mode [ 103.836637][ T6439] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 103.860307][ T6436] bond0: entered promiscuous mode [ 103.866901][ T6436] bond_slave_0: entered promiscuous mode [ 103.890458][ T6436] bond_slave_1: entered promiscuous mode [ 103.910523][ T6436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.930648][ T6436] bond0: left promiscuous mode [ 103.937731][ T6436] bond_slave_0: left promiscuous mode [ 103.943566][ T6436] bond_slave_1: left promiscuous mode [ 104.065886][ T6449] tipc: Started in network mode [ 104.095083][ T6449] tipc: Node identity c612ef4e71f2, cluster identity 4711 [ 104.127126][ T6449] tipc: Enabled bearer , priority 0 [ 104.175218][ T6455] syzkaller0: entered promiscuous mode [ 104.204205][ T6455] syzkaller0: entered allmulticast mode [ 104.242117][ T6449] tipc: Resetting bearer [ 104.285701][ T6448] tipc: Resetting bearer [ 104.361013][ T6448] tipc: Disabling bearer [ 104.433724][ T6464] Bluetooth: MGMT ver 1.23 [ 104.742276][ T6470] syzkaller0: entered allmulticast mode [ 105.253493][ T6479] xt_CT: No such helper "snmp_trap" [ 105.388392][ T6489] netlink: 'syz.0.208': attribute type 4 has an invalid length. [ 105.427559][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.211'. [ 105.994065][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 106.248738][ T6518] GUP no longer grows the stack in syz.3.221 (6518): 400000004000-40000000a000 (400000003000) [ 106.261758][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.3.221 Not tainted 6.14.0-rc6-syzkaller-00121-gd9c743b6990b #0 [ 106.261791][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.261804][ T6518] Call Trace: [ 106.261812][ T6518] [ 106.261821][ T6518] dump_stack_lvl+0x241/0x360 [ 106.261858][ T6518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.261882][ T6518] ? __pfx__printk+0x10/0x10 [ 106.261901][ T6518] ? find_vma+0xf9/0x170 [ 106.261935][ T6518] __get_user_pages+0x3b07/0x4140 [ 106.261978][ T6518] ? mark_lock+0x9a/0x360 [ 106.262011][ T6518] ? __pfx___get_user_pages+0x10/0x10 [ 106.262034][ T6518] ? __gup_longterm_locked+0xd2f/0x17f0 [ 106.262052][ T6518] ? __pfx_down_read_killable+0x10/0x10 [ 106.262074][ T6518] ? __pfx_lock_acquire+0x10/0x10 [ 106.262099][ T6518] ? try_get_folio+0xf1/0x6f0 [ 106.262131][ T6518] ? __pfx_lock_release+0x10/0x10 [ 106.262160][ T6518] __gup_longterm_locked+0xe64/0x17f0 [ 106.262186][ T6518] ? mark_lock+0x9a/0x360 [ 106.262203][ T6518] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.262226][ T6518] ? __pfx___gup_longterm_locked+0x10/0x10 [ 106.262242][ T6518] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.262270][ T6518] ? gup_fast_fallback+0x207e/0x29c0 [ 106.262287][ T6518] gup_fast_fallback+0x2266/0x29c0 [ 106.262334][ T6518] ? __pfx_gup_fast_fallback+0x10/0x10 [ 106.262374][ T6518] ? __mutex_trylock_common+0x183/0x2e0 [ 106.262391][ T6518] ? __pfx___might_resched+0x10/0x10 [ 106.262411][ T6518] ? is_valid_gup_args+0x124/0x200 [ 106.262429][ T6518] get_user_pages_fast+0xcc/0x160 [ 106.262446][ T6518] ? __pfx_get_user_pages_fast+0x10/0x10 [ 106.262460][ T6518] ? rcu_is_watching+0x15/0xb0 [ 106.262479][ T6518] ? trace_contention_end+0x3c/0x120 [ 106.262497][ T6518] ? __mutex_lock+0x397/0x1010 [ 106.262522][ T6518] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 106.262548][ T6518] ? __se_sys_vmsplice+0x4b7/0x14a0 [ 106.262573][ T6518] iov_iter_get_pages2+0xcf/0x130 [ 106.262596][ T6518] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 106.262624][ T6518] __se_sys_vmsplice+0x739/0x14a0 [ 106.262643][ T6518] ? plist_del+0x3f1/0x410 [ 106.262677][ T6518] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 106.262700][ T6518] ? __pfx_futex_wake+0x10/0x10 [ 106.262756][ T6518] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.262788][ T6518] ? do_syscall_64+0x100/0x230 [ 106.262813][ T6518] ? do_syscall_64+0xb6/0x230 [ 106.262837][ T6518] do_syscall_64+0xf3/0x230 [ 106.262869][ T6518] ? clear_bhb_loop+0x35/0x90 [ 106.262904][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.262932][ T6518] RIP: 0033:0x7fac1f18d169 [ 106.262951][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.262968][ T6518] RSP: 002b:00007fac1ffc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 106.262990][ T6518] RAX: ffffffffffffffda RBX: 00007fac1f3a5fa0 RCX: 00007fac1f18d169 [ 106.263005][ T6518] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000008 [ 106.263018][ T6518] RBP: 00007fac1f20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.263031][ T6518] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 106.263041][ T6518] R13: 0000000000000000 R14: 00007fac1f3a5fa0 R15: 00007fffe73db0b8 [ 106.263072][ T6518] [ 108.656785][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 108.692225][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 108.737584][ T6539] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 108.760766][ T6539] netlink: 10 bytes leftover after parsing attributes in process `syz.1.229'. [ 108.796842][ T6547] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 108.817597][ T6547] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 108.861478][ T55] block nbd0: Receive control failed (result -32) [ 108.881364][ T6548] tipc: Started in network mode [ 108.886315][ T6548] tipc: Node identity 7e294e852b3c, cluster identity 4711 [ 108.935062][ T6548] tipc: Enabled bearer , priority 0 [ 108.944164][ T6548] syzkaller0: entered promiscuous mode [ 108.949963][ T6548] syzkaller0: entered allmulticast mode [ 108.966282][ T6548] tipc: Resetting bearer [ 109.016034][ T6546] tipc: Resetting bearer [ 109.085718][ T6546] tipc: Disabling bearer [ 109.135821][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 109.155858][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 109.181780][ T6561] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 109.200122][ T6561] netlink: 10 bytes leftover after parsing attributes in process `syz.1.237'. [ 109.217677][ T6561] block nbd1: Unsupported socket: shutdown callout must be supported. [ 109.343513][ T6564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.351158][ T6564] IPv6: NLM_F_CREATE should be set when creating new route [ 109.388862][ T6569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 109.559176][ T6572] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 109.746619][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 109.758335][ T6577] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.854531][ T6577] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.864256][ T6577] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.873517][ T6577] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.886362][ T6577] bond1: (slave geneve2): making interface the new active one [ 109.895829][ T6577] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 110.033454][ T6572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.326068][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 110.834334][ T6611] tipc: Enabled bearer , priority 0 [ 111.354167][ T6614] syzkaller0: entered promiscuous mode [ 111.363901][ T6614] syzkaller0: entered allmulticast mode [ 111.402985][ T6620] bond0: (slave bond_slave_0): Releasing backup interface [ 111.430988][ T6620] bond0: (slave bond_slave_1): Releasing backup interface [ 111.481876][ T6620] team0: Failed to send options change via netlink (err -105) [ 111.498374][ T6620] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 111.527863][ T6620] team0: Port device team_slave_0 removed [ 111.550336][ T6620] team0: Failed to send options change via netlink (err -105) [ 111.578763][ T6620] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 111.583022][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.256'. [ 111.598050][ T6620] team0: Port device team_slave_1 removed [ 111.606917][ T6620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.615404][ T6620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.626031][ T6620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.640495][ T6620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.668398][ T6620] team0: Failed to send options change via netlink (err -105) [ 111.676522][ T6620] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 111.692497][ T6620] team0: Port device geneve0 removed [ 111.701435][ T6620] bond1: (slave ip6erspan0): Releasing active interface [ 111.716528][ T6623] team0: Failed to send options change via netlink (err -105) [ 111.735695][ T6623] team0: Mode changed to "loadbalance" [ 111.744144][ T6609] tipc: Resetting bearer [ 111.750945][ T6634] TCP: TCP_TX_DELAY enabled [ 111.792807][ T6609] tipc: Disabling bearer [ 112.099620][ T6641] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 112.170735][ T6641] nbd: socks must be embedded in a SOCK_ITEM attr [ 112.193286][ T6641] block nbd1: shutting down sockets [ 112.676247][ T6661] wlan0 speed is unknown, defaulting to 1000 [ 112.728447][ T6661] wlan0 speed is unknown, defaulting to 1000 [ 112.780193][ T6661] wlan0 speed is unknown, defaulting to 1000 [ 112.851433][ T6661] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.932101][ T6661] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 113.093795][ T6661] wlan0 speed is unknown, defaulting to 1000 [ 113.148528][ T6661] wlan0 speed is unknown, defaulting to 1000 [ 113.188961][ T6661] wlan0 speed is unknown, defaulting to 1000 [ 113.209778][ T6661] wlan0 speed is unknown, defaulting to 1000 [ 113.244182][ T6661] wlan0 speed is unknown, defaulting to 1000 [ 113.307896][ T6681] Unknown options in mask 1f4 [ 113.408224][ T6686] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 113.503141][ T6686] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 113.516032][ T6686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.521545][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 113.660124][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 113.866023][ T6706] __nla_validate_parse: 6 callbacks suppressed [ 113.866045][ T6706] netlink: 52 bytes leftover after parsing attributes in process `syz.3.276'. [ 113.946130][ T6706] geneve2: entered promiscuous mode [ 113.968624][ T6706] geneve2: entered allmulticast mode [ 114.220885][ T6710] wlan0 speed is unknown, defaulting to 1000 [ 115.009154][ T6727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.026238][ T6727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.044824][ T6727] bond0 (unregistering): Released all slaves [ 119.006818][ T6799] delete_channel: no stack [ 119.055979][ T6789] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.372102][ T6810] netlink: 'syz.0.300': attribute type 39 has an invalid length. [ 119.403626][ T6810] veth0_macvtap: left promiscuous mode [ 119.971853][ T6826] trusted_key: syz.4.305 sent an empty control message without MSG_MORE. [ 120.090030][ T6833] syzkaller0: create flow: hash 2286287781 index 2 [ 120.123670][ T5920] wlan0 speed is unknown, defaulting to 1000 [ 120.240757][ T6840] netlink: 9 bytes leftover after parsing attributes in process `syz.2.310'. [ 120.295595][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 120.305758][ T6833] syzkaller0: delete flow: hash 2286287781 index 2 [ 120.308193][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 120.324060][ T6840] 0·: renamed from hsr_slave_1 (while UP) [ 120.328082][ T6842] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 120.346396][ T6842] netlink: 10 bytes leftover after parsing attributes in process `syz.0.312'. [ 120.358205][ T6840] 0·: entered allmulticast mode [ 120.364315][ T6840] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 120.432519][ T55] block nbd1: Receive control failed (result -107) [ 120.634222][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 120.887720][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034c05c00: rx timeout, send abort [ 121.383404][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034c05400: rx timeout, send abort [ 121.397489][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034c05c00: abort rx timeout. Force session deactivation [ 121.893857][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034c05400: abort rx timeout. Force session deactivation [ 122.560518][ T6871] netlink: 188 bytes leftover after parsing attributes in process `syz.0.323'. [ 122.577872][ T6871] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 122.704095][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 123.039033][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 123.204192][ T6889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.578070][ T6902] warning: `syz.3.337' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.699683][ T6902] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 123.708727][ T976] IPVS: starting estimator thread 0... [ 123.799230][ T6911] IPVS: using max 18 ests per chain, 43200 per kthread [ 123.961965][ T6915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.341'. [ 123.975943][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 124.266946][ T6927] netlink: 'syz.3.346': attribute type 21 has an invalid length. [ 124.418525][ T6932] bond0: (slave bond_slave_0): Releasing backup interface [ 124.451424][ T6932] bond0: (slave bond_slave_1): Releasing backup interface [ 124.544496][ T6932] team0: Port device team_slave_0 removed [ 124.606370][ T6932] team0: Port device team_slave_1 removed [ 124.631543][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.679399][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.717133][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.749065][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.808561][ T6932] bond0: (slave macvlan0): Releasing backup interface [ 124.833159][ T6932] veth0_to_batadv: left promiscuous mode [ 124.902767][ T6936] team0: Mode changed to "loadbalance" [ 125.330817][ T6962] __nla_validate_parse: 3 callbacks suppressed [ 125.330839][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 125.622035][ T6969] dccp_close: ABORT with 4111 bytes unread [ 125.904980][ T6983] openvswitch: netlink: Flow key attribute not present in set flow. [ 125.935378][ T6986] lo speed is unknown, defaulting to 1000 [ 125.957701][ T6986] lo speed is unknown, defaulting to 1000 [ 125.964219][ T6986] lo speed is unknown, defaulting to 1000 [ 126.011867][ T6986] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 126.206609][ T6986] lo speed is unknown, defaulting to 1000 [ 126.231787][ T6986] lo speed is unknown, defaulting to 1000 [ 126.278823][ T6986] lo speed is unknown, defaulting to 1000 [ 126.314545][ T6986] lo speed is unknown, defaulting to 1000 [ 126.355707][ T6986] lo speed is unknown, defaulting to 1000 [ 126.498907][ T7003] wlan0 speed is unknown, defaulting to 1000 [ 126.555373][ T7003] lo speed is unknown, defaulting to 1000 [ 127.771319][ T7042] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.203240][ T7056] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 128.212093][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 128.226076][ T7031] dccp_close: ABORT with 128 bytes unread [ 128.274016][ T7057] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.682061][ T7072] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 128.707515][ T7072] netlink: 224 bytes leftover after parsing attributes in process `syz.2.399'. [ 128.767787][ T5850] Bluetooth: hci3: command 0x0405 tx timeout [ 129.201188][ T7085] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 129.242244][ T7085] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 129.771349][ T7107] netlink: 9 bytes leftover after parsing attributes in process `syz.4.407'. [ 129.782537][ T7107] 0·: renamed from hsr_slave_1 (while UP) [ 129.793119][ T7107] 0·: entered allmulticast mode [ 129.799412][ T7107] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 130.834047][ T7143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 132.776073][ T7153] pimreg: entered allmulticast mode [ 133.241857][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.241863][ T7183] bridge_slave_0: left allmulticast mode [ 133.295610][ T7180] wlan0 speed is unknown, defaulting to 1000 [ 133.357041][ T7180] lo speed is unknown, defaulting to 1000 [ 134.097491][ T7209] No such timeout policy "syz0" [ 134.580807][ T7229] netlink: 'syz.4.435': attribute type 10 has an invalid length. [ 134.818895][ T7235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.029531][ T7243] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 135.156861][ T7243] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 135.202901][ T7243] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 135.239585][ T7243] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.290807][ T53] bridge0: port 1(team0) entered blocking state [ 135.297184][ T53] bridge0: port 1(team0) entered forwarding state [ 135.880708][ T7274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.453644][ T7384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.502'. [ 139.003513][ T7406] wlan0 speed is unknown, defaulting to 1000 [ 139.049384][ T7406] lo speed is unknown, defaulting to 1000 [ 139.881515][ T7444] netlink: 'syz.2.522': attribute type 33 has an invalid length. [ 139.913266][ T7444] netlink: 152 bytes leftover after parsing attributes in process `syz.2.522'. [ 140.088878][ T7450] tipc: Started in network mode [ 140.093825][ T7450] tipc: Node identity , cluster identity 4711 [ 140.147451][ T7450] tipc: Failed to set node id, please configure manually [ 140.164301][ T7450] tipc: Enabling of bearer rejected, failed to enable media [ 140.400541][ T55] Bluetooth: hci3: link tx timeout [ 140.405976][ T55] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.833493][ T7472] "syz.2.532" (7472) uses obsolete ecb(arc4) skcipher [ 141.029670][ T7489] batman_adv: batadv0: Removing interface: dummy0 [ 141.085266][ T7495] netlink: 'syz.4.539': attribute type 10 has an invalid length. [ 141.104576][ T7489] bridge_slave_0: left allmulticast mode [ 141.119519][ T7489] bridge_slave_0: left promiscuous mode [ 141.125366][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.180156][ T7489] bridge_slave_1: left allmulticast mode [ 141.185903][ T7489] bridge_slave_1: left promiscuous mode [ 141.210278][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.270577][ T7489] team0: Port device team_slave_0 removed [ 141.310377][ T7489] team0: Port device team_slave_1 removed [ 141.316903][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.335257][ T7489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.346390][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.354651][ T7489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.371265][ T7489] bond1: (slave geneve2): Releasing active interface [ 141.384210][ T7489] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 141.396391][ T7489] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 141.408273][ T7489] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 141.418815][ T7489] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 142.439625][ T55] Bluetooth: hci3: command 0x0405 tx timeout [ 143.183889][ T7569] netlink: 277 bytes leftover after parsing attributes in process `syz.0.574'. [ 144.027112][ T7600] team0: Unable to change to the same mode the team is in [ 144.174983][ T7606] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 144.283924][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.314808][ T7610] gretap1: entered promiscuous mode [ 144.328040][ T7610] bond0: (slave gretap1): making interface the new active one [ 144.337277][ T7610] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 144.545464][ T7606] bond0: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 144.766014][ T7610] syz.4.593 (7610) used greatest stack depth: 17272 bytes left [ 145.170332][ T7641] team0: Unable to change to the same mode the team is in [ 146.264557][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.625'. [ 146.988030][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 147.671083][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 147.877609][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 147.976964][ T7758] netlink: 277 bytes leftover after parsing attributes in process `syz.4.655'. [ 147.979715][ T7756] syzkaller1: entered promiscuous mode [ 147.992815][ T7756] syzkaller1: entered allmulticast mode [ 148.231182][ T7762] veth0_to_batadv: entered promiscuous mode [ 148.279899][ T7762] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 149.118256][ T7792] syzkaller1: entered promiscuous mode [ 149.140110][ T7792] syzkaller1: entered allmulticast mode [ 149.173645][ T7796] bridge1: entered allmulticast mode [ 149.213093][ T7798] netlink: 'syz.2.675': attribute type 4 has an invalid length. [ 149.268035][ T7801] netlink: 'syz.2.675': attribute type 4 has an invalid length. [ 150.289548][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 150.396779][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 150.465876][ T7832] wlan0 speed is unknown, defaulting to 1000 [ 150.479321][ T7832] lo speed is unknown, defaulting to 1000 [ 150.676017][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.693'. [ 150.714182][ T7850] netlink: 'syz.4.695': attribute type 10 has an invalid length. [ 150.723135][ T7850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.695'. [ 150.769241][ T7850] team0: Port device geneve0 added [ 151.213191][ T976] IPVS: starting estimator thread 0... [ 151.337496][ T7864] IPVS: using max 20 ests per chain, 48000 per kthread [ 151.575307][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.705'. [ 151.653793][ T7874] bond0: entered promiscuous mode [ 151.707551][ T7874] bond_slave_0: entered promiscuous mode [ 151.731437][ T7874] bond_slave_1: entered promiscuous mode [ 151.796057][ T7874] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.901017][ T7874] bond0: left promiscuous mode [ 151.957674][ T7874] bond_slave_0: left promiscuous mode [ 151.989398][ T7874] bond_slave_1: left promiscuous mode [ 152.493999][ T7898] netlink: 'syz.0.712': attribute type 39 has an invalid length. [ 152.927020][ T7915] wlan0 speed is unknown, defaulting to 1000 [ 152.941891][ T7915] lo speed is unknown, defaulting to 1000 [ 153.596168][ T7933] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 153.717247][ T7936] No such timeout policy "syz0" [ 153.992816][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 154.280042][ T7957] tipc: Enabled bearer , priority 0 [ 154.298772][ T7957] syzkaller0: entered promiscuous mode [ 154.315566][ T7957] syzkaller0: entered allmulticast mode [ 154.359310][ T7957] tipc: Resetting bearer [ 154.396263][ T7956] tipc: Resetting bearer [ 154.488305][ T7956] tipc: Disabling bearer [ 154.563850][ T7970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 154.569984][ T7967] wlan0 speed is unknown, defaulting to 1000 [ 154.633793][ T7967] lo speed is unknown, defaulting to 1000 [ 154.884185][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 154.907430][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 154.939779][ T7979] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 154.976577][ T7979] netlink: 10 bytes leftover after parsing attributes in process `syz.3.748'. [ 155.060806][ T7979] block nbd2: Unsupported socket: shutdown callout must be supported. [ 155.292281][ T7986] team0: Unable to change to the same mode the team is in [ 155.333741][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.751'. [ 155.583758][ T7999] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 155.616416][ T7996] xt_CT: No such helper "snmp_trap" [ 155.706949][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.753'. [ 155.723528][ T8007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.841859][ T8002] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.851862][ T8002] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.897520][ T8002] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.941084][ T8002] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.024266][ T8002] bond2: (slave geneve2): making interface the new active one [ 156.041968][ T8002] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 156.419104][ T8029] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 156.516928][ T8029] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 156.533794][ T8029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.548495][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 156.678989][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 156.867680][ T8039] tipc: Enabled bearer , priority 0 [ 156.909087][ T8039] syzkaller0: entered promiscuous mode [ 156.914638][ T8039] syzkaller0: entered allmulticast mode [ 156.949212][ T8039] tipc: Resetting bearer [ 156.965404][ T8037] tipc: Resetting bearer [ 156.978265][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 157.005746][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 157.015708][ T8041] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 157.025263][ T8041] netlink: 10 bytes leftover after parsing attributes in process `syz.2.768'. [ 157.063023][ T8037] tipc: Disabling bearer [ 157.138220][ T5850] block nbd2: Receive control failed (result -32) [ 157.713131][ T8064] netlink: 'syz.1.779': attribute type 1 has an invalid length. [ 157.762470][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 157.831061][ T8064] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.843354][ T8064] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.854247][ T8064] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.863652][ T8064] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.874844][ T8064] bond2: (slave geneve2): making interface the new active one [ 157.884531][ T8064] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 157.906750][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.779'. [ 157.921480][ T8064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.987582][ T8104] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 159.027869][ T8104] netlink: 224 bytes leftover after parsing attributes in process `syz.1.794'. [ 159.439525][ T8108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.460785][ T8108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.477207][ T8108] bond0 (unregistering): Released all slaves [ 164.257106][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 164.295322][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 164.305148][ T8284] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 164.314395][ T8284] netlink: 10 bytes leftover after parsing attributes in process `syz.3.873'. [ 164.370722][ T5850] block nbd3: Receive control failed (result -107) [ 166.149429][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 166.370045][ T8366] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.379851][ T8366] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 167.351772][ T8393] netlink: 'syz.1.918': attribute type 39 has an invalid length. [ 167.406940][ T8393] veth0_macvtap: left promiscuous mode [ 167.680953][ T8410] netlink: 188 bytes leftover after parsing attributes in process `syz.1.925'. [ 167.710884][ T8410] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 168.024112][ T8420] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 168.034033][ T8420] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 169.066778][ T8443] netlink: 188 bytes leftover after parsing attributes in process `syz.2.938'. [ 169.077627][ T8443] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 170.764092][ T8449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.771504][ T8449] IPv6: NLM_F_CREATE should be set when creating new route [ 171.170284][ T8464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.177640][ T8464] IPv6: NLM_F_CREATE should be set when creating new route [ 173.555253][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 174.235159][ T8507] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.263768][ T8507] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 175.769512][ T8551] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 175.864950][ T8551] vlan2: entered promiscuous mode [ 175.930116][ T8551] bond3: (slave vlan2): Opening slave failed [ 176.221583][ T8566] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.579426][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 183.398621][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 183.525537][ T8701] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1038'. [ 183.568032][ T8701] 0·: renamed from hsr_slave_1 (while UP) [ 183.589473][ T8701] 0·: entered allmulticast mode [ 183.595089][ T8701] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 184.124848][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 184.558494][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 185.509642][ T8757] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1064'. [ 185.808586][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 186.483345][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 187.571265][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 188.783580][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 190.046583][ T8916] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.070093][ T5892] IPVS: starting estimator thread 0... [ 190.169697][ T8919] IPVS: using max 23 ests per chain, 55200 per kthread [ 190.175514][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 190.197977][ T8925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.267143][ T8925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.619468][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1122'. [ 190.629986][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1122'. [ 190.751784][ T8938] netlink: 'syz.0.1133': attribute type 10 has an invalid length. [ 190.785798][ T5892] lo speed is unknown, defaulting to 1000 [ 191.618788][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1135'. [ 192.394182][ T9004] syzkaller1: entered promiscuous mode [ 192.403267][ T9004] syzkaller1: entered allmulticast mode [ 192.427508][ T9004] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 348 [ 192.445859][ T9004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 193.111889][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 193.713640][ T9060] netlink: 'syz.4.1163': attribute type 10 has an invalid length. [ 194.613789][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1172'. [ 194.684394][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.271253][ T9148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.296901][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 197.486980][ T9195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.662465][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 198.463812][ T9229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.814505][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 199.031670][ T9249] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 199.061207][ T9249] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 199.780939][ T9276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.363104][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 200.902259][ T9314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.750878][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 201.877833][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 201.884478][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 201.884498][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 202.076771][ T9352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.309128][ T9402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.316495][ T9402] IPv6: NLM_F_CREATE should be set when creating new route [ 203.378199][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 204.298286][ T9439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.598038][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 205.538338][ T9482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.053952][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 206.882219][ T9528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.383416][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1321'. [ 207.871093][ T9567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.619785][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 208.910939][ T9604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.811292][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 210.094258][ T9651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.452362][ T9693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.658305][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 212.810450][ T9740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.228266][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 213.984615][ T9792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.636342][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 215.224888][ T9836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.060686][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1421'. [ 216.245097][ T9877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.332770][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 217.414510][ T9918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.734904][ T9934] xt_hashlimit: size too large, truncated to 1048576 [ 217.746352][ T9930] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1444'. [ 217.823520][ T9930] gretap0: entered promiscuous mode [ 217.866638][ T9937] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1444'. [ 217.915499][ T9937] 0ªî{X¹¦: renamed from gretap0 [ 218.049060][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1446'. [ 218.261511][ T9937] 0ªî{X¹¦: left promiscuous mode [ 218.266617][ T9937] 0ªî{X¹¦: entered allmulticast mode [ 218.274839][ T9937] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 218.625440][ T9953] tipc: Failed to remove unknown binding: 66,1,1/0:3587249849/3587249851 [ 218.648983][ T9953] tipc: Failed to remove unknown binding: 66,1,1/0:3587249849/3587249851 [ 218.958818][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 219.208988][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1455'. [ 219.276264][ T9974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1455'. [ 219.422777][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 219.498399][ T9991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.505790][ T9991] IPv6: NLM_F_CREATE should be set when creating new route [ 220.669459][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 220.749882][T10035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.778217][T10078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.898003][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 223.111543][T10125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.297592][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'. [ 224.363316][T10171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.437838][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 225.395752][T10208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.658002][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 226.387799][T10243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.164776][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 227.470484][T10285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.477863][T10285] IPv6: NLM_F_CREATE should be set when creating new route [ 228.339744][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 228.610315][T10335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.617702][T10335] IPv6: NLM_F_CREATE should be set when creating new route [ 229.716418][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 229.882258][T10376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.930090][T10412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.144898][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 232.040760][T10457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.568339][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 233.060990][T10497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.928896][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'. [ 234.132680][T10534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.110384][T10573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.271635][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1647'. [ 236.437496][T10620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.481950][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 237.577011][T10667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.814029][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 238.611351][T10706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.830749][T10754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.525579][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 244.604134][T10916] wlan0 speed is unknown, defaulting to 1000 [ 244.640995][T10916] lo speed is unknown, defaulting to 1000 [ 245.466785][T10922] dccp_close: ABORT with 96 bytes unread [ 245.755648][T10953] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 245.791833][T10953] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 246.216514][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'. [ 246.719995][T10992] ------------[ cut here ]------------ [ 246.726151][T10992] WARNING: CPU: 1 PID: 10992 at net/mac80211/key.c:1162 ieee80211_free_keys+0x567/0x680 [ 246.736324][T10992] Modules linked in: [ 246.740498][T10992] CPU: 1 UID: 0 PID: 10992 Comm: syz.4.1781 Not tainted 6.14.0-rc6-syzkaller-00121-gd9c743b6990b #0 [ 246.751819][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.762104][T10992] RIP: 0010:ieee80211_free_keys+0x567/0x680 [ 246.768746][T10992] Code: 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 38 e8 3e f6 90 0f 0b 90 e9 17 fc ff ff e8 2a e8 3e f6 90 <0f> 0b 90 4c 8b 64 24 20 e9 77 fe ff ff e8 17 e8 3e f6 e9 2d fe ff [ 246.788648][T10992] RSP: 0018:ffffc90002f87360 EFLAGS: 00010287 [ 246.794786][T10992] RAX: ffffffff8b82f6e6 RBX: 0000000000000000 RCX: 0000000000080000 [ 246.803284][T10992] RDX: ffffc9000cd5b000 RSI: 00000000000010c9 RDI: 00000000000010ca [ 246.811478][T10992] RBP: ffffc90002f87430 R08: ffffffff8b82f4e7 R09: 1ffff920005f0e20 [ 246.819681][T10992] R10: dffffc0000000000 R11: fffff520005f0e21 R12: 0000000000000001 [ 246.827931][T10992] R13: ffff88802a484d80 R14: 1ffff11005490d3a R15: dffffc0000000000 [ 246.836095][T10992] FS: 00007fcbcf1b96c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 246.845293][T10992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.852026][T10992] CR2: 00007f8369e4aea1 CR3: 0000000033c0e000 CR4: 00000000003526f0 [ 246.860100][T10992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.868200][T10992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.876224][T10992] Call Trace: [ 246.879604][T10992] [ 246.882578][T10992] ? __warn+0x165/0x4d0 [ 246.886790][T10992] ? ieee80211_free_keys+0x567/0x680 [ 246.892183][T10992] ? report_bug+0x2b3/0x500 [ 246.896743][T10992] ? ieee80211_free_keys+0x567/0x680 [ 246.902180][T10992] ? handle_bug+0x60/0x90 [ 246.906556][T10992] ? exc_invalid_op+0x1a/0x50 [ 246.911413][T10992] ? asm_exc_invalid_op+0x1a/0x20 [ 246.916507][T10992] ? ieee80211_free_keys+0x367/0x680 [ 246.921908][T10992] ? ieee80211_free_keys+0x566/0x680 [ 246.927420][T10992] ? ieee80211_free_keys+0x567/0x680 [ 246.932775][T10992] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 246.938787][T10992] ? lockdep_hardirqs_on+0x99/0x150 [ 246.944068][T10992] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 246.949822][T10992] ? wiphy_work_cancel+0x1f0/0x3e0 [ 246.954997][T10992] ieee80211_do_stop+0x1085/0x2380 [ 246.960264][T10992] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 246.965803][T10992] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 246.971813][T10992] ? lockdep_hardirqs_on+0x99/0x150 [ 246.977082][T10992] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 246.983548][T10992] ? wiphy_work_cancel+0x1f0/0x3e0 [ 246.988816][T10992] ieee80211_stop+0x43b/0x490 [ 246.993586][T10992] ? __pfx_ieee80211_stop+0x10/0x10 [ 246.999012][T10992] __dev_close_many+0x216/0x350 [ 247.003963][T10992] ? __pfx___dev_close_many+0x10/0x10 [ 247.009487][T10992] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.015556][T10992] dev_close_many+0x24e/0x4c0 [ 247.020365][T10992] ? lockdep_hardirqs_on+0x99/0x150 [ 247.025727][T10992] ? __pfx_dev_close_many+0x10/0x10 [ 247.031182][T10992] ? __local_bh_enable_ip+0x168/0x200 [ 247.036680][T10992] ? dev_deactivate_many+0xa91/0xc90 [ 247.042183][T10992] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 247.048021][T10992] dev_close+0x1c0/0x2c0 [ 247.052343][T10992] ? __pfx_dev_close+0x10/0x10 [ 247.057176][T10992] ? dev_deactivate_many+0xbff/0xc90 [ 247.062612][T10992] ieee80211_stop+0xd5/0x490 [ 247.067341][T10992] ? __pfx_ieee80211_stop+0x10/0x10 [ 247.072610][T10992] __dev_close_many+0x216/0x350 [ 247.077908][T10992] ? __pfx___dev_close_many+0x10/0x10 [ 247.083360][T10992] ? dev_set_rx_mode+0x233/0x2e0 [ 247.088497][T10992] __dev_change_flags+0x30e/0x6f0 [ 247.093604][T10992] ? __pfx___dev_change_flags+0x10/0x10 [ 247.099296][T10992] ? __mutex_lock+0x397/0x1010 [ 247.104126][T10992] ? __pfx_lock_acquire+0x10/0x10 [ 247.109255][T10992] dev_change_flags+0x8b/0x1a0 [ 247.114081][T10992] dev_ifsioc+0x7c2/0xe70 [ 247.118587][T10992] ? __pfx_dev_ifsioc+0x10/0x10 [ 247.123538][T10992] ? dev_load+0x21/0x1f0 [ 247.127916][T10992] dev_ioctl+0x719/0x1340 [ 247.132507][T10992] sock_do_ioctl+0x240/0x460 [ 247.137166][T10992] ? __pfx_sock_do_ioctl+0x10/0x10 [ 247.142448][T10992] sock_ioctl+0x626/0x8e0 [ 247.146853][T10992] ? __pfx_sock_ioctl+0x10/0x10 [ 247.151855][T10992] ? __fget_files+0x2a/0x410 [ 247.156500][T10992] ? __fget_files+0x2a/0x410 [ 247.161385][T10992] ? __pfx_sock_ioctl+0x10/0x10 [ 247.166302][T10992] __se_sys_ioctl+0xf5/0x170 [ 247.171017][T10992] do_syscall_64+0xf3/0x230 [ 247.175584][T10992] ? clear_bhb_loop+0x35/0x90 [ 247.180384][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.186335][T10992] RIP: 0033:0x7fcbce38d169 [ 247.190850][T10992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.210598][T10992] RSP: 002b:00007fcbcf1b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.219225][T10992] RAX: ffffffffffffffda RBX: 00007fcbce5a5fa0 RCX: 00007fcbce38d169 [ 247.227252][T10992] RDX: 0000400000000040 RSI: 0000000000008914 RDI: 0000000000000003 [ 247.235418][T10992] RBP: 00007fcbce40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 247.243653][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.251729][T10992] R13: 0000000000000000 R14: 00007fcbce5a5fa0 R15: 00007fffecfdab98 [ 247.259849][T10992] [ 247.262924][T10992] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 247.270253][T10992] CPU: 1 UID: 0 PID: 10992 Comm: syz.4.1781 Not tainted 6.14.0-rc6-syzkaller-00121-gd9c743b6990b #0 [ 247.281045][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.291123][T10992] Call Trace: [ 247.294416][T10992] [ 247.297365][T10992] dump_stack_lvl+0x241/0x360 [ 247.302107][T10992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.307345][T10992] ? __pfx__printk+0x10/0x10 [ 247.311976][T10992] ? _printk+0xd5/0x120 [ 247.316155][T10992] ? __init_begin+0x41000/0x41000 [ 247.321213][T10992] ? vscnprintf+0x5d/0x90 [ 247.325559][T10992] panic+0x349/0x880 [ 247.329468][T10992] ? __warn+0x174/0x4d0 [ 247.333642][T10992] ? __pfx_panic+0x10/0x10 [ 247.338088][T10992] __warn+0x344/0x4d0 [ 247.342093][T10992] ? ieee80211_free_keys+0x567/0x680 [ 247.347401][T10992] report_bug+0x2b3/0x500 [ 247.351750][T10992] ? ieee80211_free_keys+0x567/0x680 [ 247.357059][T10992] handle_bug+0x60/0x90 [ 247.361232][T10992] exc_invalid_op+0x1a/0x50 [ 247.365748][T10992] asm_exc_invalid_op+0x1a/0x20 [ 247.370643][T10992] RIP: 0010:ieee80211_free_keys+0x567/0x680 [ 247.376586][T10992] Code: 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 38 e8 3e f6 90 0f 0b 90 e9 17 fc ff ff e8 2a e8 3e f6 90 <0f> 0b 90 4c 8b 64 24 20 e9 77 fe ff ff e8 17 e8 3e f6 e9 2d fe ff [ 247.396226][T10992] RSP: 0018:ffffc90002f87360 EFLAGS: 00010287 [ 247.402322][T10992] RAX: ffffffff8b82f6e6 RBX: 0000000000000000 RCX: 0000000000080000 [ 247.410306][T10992] RDX: ffffc9000cd5b000 RSI: 00000000000010c9 RDI: 00000000000010ca [ 247.418378][T10992] RBP: ffffc90002f87430 R08: ffffffff8b82f4e7 R09: 1ffff920005f0e20 [ 247.426362][T10992] R10: dffffc0000000000 R11: fffff520005f0e21 R12: 0000000000000001 [ 247.434348][T10992] R13: ffff88802a484d80 R14: 1ffff11005490d3a R15: dffffc0000000000 [ 247.442342][T10992] ? ieee80211_free_keys+0x367/0x680 [ 247.447653][T10992] ? ieee80211_free_keys+0x566/0x680 [ 247.452962][T10992] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 247.458877][T10992] ? lockdep_hardirqs_on+0x99/0x150 [ 247.464114][T10992] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 247.469775][T10992] ? wiphy_work_cancel+0x1f0/0x3e0 [ 247.474904][T10992] ieee80211_do_stop+0x1085/0x2380 [ 247.480058][T10992] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 247.485545][T10992] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 247.491455][T10992] ? lockdep_hardirqs_on+0x99/0x150 [ 247.496676][T10992] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 247.503023][T10992] ? wiphy_work_cancel+0x1f0/0x3e0 [ 247.508154][T10992] ieee80211_stop+0x43b/0x490 [ 247.512871][T10992] ? __pfx_ieee80211_stop+0x10/0x10 [ 247.518094][T10992] __dev_close_many+0x216/0x350 [ 247.522974][T10992] ? __pfx___dev_close_many+0x10/0x10 [ 247.528366][T10992] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.534461][T10992] dev_close_many+0x24e/0x4c0 [ 247.539162][T10992] ? lockdep_hardirqs_on+0x99/0x150 [ 247.544384][T10992] ? __pfx_dev_close_many+0x10/0x10 [ 247.549598][T10992] ? __local_bh_enable_ip+0x168/0x200 [ 247.554991][T10992] ? dev_deactivate_many+0xa91/0xc90 [ 247.560330][T10992] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 247.566071][T10992] dev_close+0x1c0/0x2c0 [ 247.570340][T10992] ? __pfx_dev_close+0x10/0x10 [ 247.575134][T10992] ? dev_deactivate_many+0xbff/0xc90 [ 247.580449][T10992] ieee80211_stop+0xd5/0x490 [ 247.585063][T10992] ? __pfx_ieee80211_stop+0x10/0x10 [ 247.590286][T10992] __dev_close_many+0x216/0x350 [ 247.595161][T10992] ? __pfx___dev_close_many+0x10/0x10 [ 247.600553][T10992] ? dev_set_rx_mode+0x233/0x2e0 [ 247.605513][T10992] __dev_change_flags+0x30e/0x6f0 [ 247.610582][T10992] ? __pfx___dev_change_flags+0x10/0x10 [ 247.616146][T10992] ? __mutex_lock+0x397/0x1010 [ 247.620970][T10992] ? __pfx_lock_acquire+0x10/0x10 [ 247.626020][T10992] dev_change_flags+0x8b/0x1a0 [ 247.630811][T10992] dev_ifsioc+0x7c2/0xe70 [ 247.635160][T10992] ? __pfx_dev_ifsioc+0x10/0x10 [ 247.640028][T10992] ? dev_load+0x21/0x1f0 [ 247.644289][T10992] dev_ioctl+0x719/0x1340 [ 247.648643][T10992] sock_do_ioctl+0x240/0x460 [ 247.653255][T10992] ? __pfx_sock_do_ioctl+0x10/0x10 [ 247.658421][T10992] sock_ioctl+0x626/0x8e0 [ 247.662769][T10992] ? __pfx_sock_ioctl+0x10/0x10 [ 247.667646][T10992] ? __fget_files+0x2a/0x410 [ 247.672258][T10992] ? __fget_files+0x2a/0x410 [ 247.676878][T10992] ? __pfx_sock_ioctl+0x10/0x10 [ 247.681744][T10992] __se_sys_ioctl+0xf5/0x170 [ 247.686353][T10992] do_syscall_64+0xf3/0x230 [ 247.690967][T10992] ? clear_bhb_loop+0x35/0x90 [ 247.695666][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.701576][T10992] RIP: 0033:0x7fcbce38d169 [ 247.706012][T10992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.725632][T10992] RSP: 002b:00007fcbcf1b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.734064][T10992] RAX: ffffffffffffffda RBX: 00007fcbce5a5fa0 RCX: 00007fcbce38d169 [ 247.742050][T10992] RDX: 0000400000000040 RSI: 0000000000008914 RDI: 0000000000000003 [ 247.750032][T10992] RBP: 00007fcbce40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 247.758016][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.765996][T10992] R13: 0000000000000000 R14: 00007fcbce5a5fa0 R15: 00007fffecfdab98 [ 247.774005][T10992] [ 247.777332][T10992] Kernel Offset: disabled [ 247.781744][T10992] Rebooting in 86400 seconds..