last executing test programs: 2m7.775448536s ago: executing program 4 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x0, 0x1, 0x1, 0x74, 0x81, 0x8, 0x40, 0x8, 0x9, 0x0, 0x7, 0x9, 0x7}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = epoll_create1(0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000380)={0x10}) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="81ec", 0x2}], 0x1}}], 0x1, 0x4008010) sendmsg$tipc(r3, &(0x7f0000000980)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000780)="9c6f803f85dd76454a4a0cbb01d917736bdf7f72031e3253cf1332dcb4db34909393ba8c22e6b8d62db5e215cbc72395c6200d9911c7143212355a997144ffb49c51fcfcf61cb4a8edc9e9babb7102df67eb613c323f123769e77908149e057737adb56dda69e74a897b7257470fbbc9075c93305fdfede751ec863a770f79cc3cfff7bd8452d9e612cef1698b7fc906771ae06a08bbfa7dd47969e1af87fe75eeb0eb2fc47fbca9183b5133decd8d1a2579e13eac0e9d4e2d15611c01da7c4dcebba8160a9b41feebfa0467d8766dc4005af32d", 0xd4}, {&(0x7f0000000600)="b58059a6e47ab74db2a266451323e7493ff63587a86c9aa967180111978da7b4b2af54a939cd39279dcf83eddad144bb238bc1a7b54702c99f90662d991f4d515c5fa8b477067065a2ba0f15e32da0212ab7a8825184ffaf32acb3b15d7c", 0x5e}, {&(0x7f00000003c0)="ba32a3", 0x3}, {&(0x7f00000009c0)="b77ca03dca6bc9f7ae6b321e038a2915eadbb03b33134b7e18b77c0266e3c6bd687e3e8f649b7db1db835b0200000070e772ba050a2cddc88b372a3ea805a913b4b2d6edadd53c45b088030192a6b95075b4b1125a61c32263e43f8cb38094fe5555a0bbdb80477427db97864610fdc1fcd6bed47219f792b7ac4522a28e968377fa19fa37f9a6707ec067c0eac7cb72242179917c17d0a17e2be86d35441ef576ca6e91278190c3e2cc407e52fb45de38b399c8ffc47495236f1f5ac502f07fbfe63720e99a4a0a44115a1d51fe8151470836cb8793ea27c0cab22ef96bbbe9874b317ab9f1c1c3", 0xe8}], 0x4, &(0x7f0000000940)="acb03ab36f39fe07594343ee4c982db60f362d258e147c04fd3a2962a6ab4274f8b3692356", 0x25}, 0x4) close(r3) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000ac0)={0x118, r10, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5904dec2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10e9de09}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79c3c2d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48f8c20b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50db40bd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e06674e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1099542c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46005344}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x399f8e90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28daee5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1824d019}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x602ac51d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48a82ca3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c19382d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e146474}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63acb8fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e643a7b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x771baf61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}]}]}]}, 0x118}}, 0x0) sendmsg$can_raw(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1d, r8}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)=@canfd={{0x4, 0x1, 0x1}, 0x3d, 0x1, 0x0, 0x0, "5f885520c668977d43b8bd2b5f39b902b0c20db4b66adb2e85dc4f514782eb811768d5b969cf6bab67db5f7998bb972819eca27236e391986b7b05e455c78bb0"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x240088c0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 2m7.57730213s ago: executing program 4 (id=128): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e23, @local}}) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e23, @local}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x200) (async) listen(r1, 0x200) sendto$inet(r1, &(0x7f00000002c0)="f0", 0x1, 0xe61e2840a554b0d0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf251a000000060021006200000008002280042000"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r6, 0x8008b705, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x11, &(0x7f0000000080)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004900080000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="04000080"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004900080000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="04000080"], 0x1c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m6.869249071s ago: executing program 4 (id=136): syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[], 0xb5) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2m6.089394112s ago: executing program 4 (id=147): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x11, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8a6"}]}, 0x24}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000540000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) 2m5.868541813s ago: executing program 4 (id=151): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000810400000100000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000c00100000002000040000100005f1075394a529216c96ac75cddc3b4c187abdae1c2fe585c67e7075d59b690d8e1d9fda371bb24790aacba93329742a6ef2a04852591cf498f"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4044) sendmsg$can_bcm(r0, 0x0, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001e686000000"], 0x30}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_SEC_TRIM_FILE(r9, 0x4018f514, &(0x7f00000001c0)={0x6, 0xfffffffffffffff7, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffe}}}}}}}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000380)={r6, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) 2m5.309619974s ago: executing program 4 (id=158): ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x5f) (async) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x5f) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r4, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0xc00, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000001ac0)={&(0x7f0000000540)=@in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x40000) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000020000000000000000000000f00000003410f99054df8c0fac85aba810afd9be6fec8d88b83e0ce223e2356d41b90fb6d9b5992969578853f8a76104d02b4ea2c822658bb8bd010000000000000081e0b08b7e1ef8"], &(0x7f0000000340)=0x62) (async) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000020000000000000000000000f00000003410f99054df8c0fac85aba810afd9be6fec8d88b83e0ce223e2356d41b90fb6d9b5992969578853f8a76104d02b4ea2c822658bb8bd010000000000000081e0b08b7e1ef8"], &(0x7f0000000340)=0x62) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 1m50.233748198s ago: executing program 32 (id=158): ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x5f) (async) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x5f) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r4, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0xc00, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000001ac0)={&(0x7f0000000540)=@in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x40000) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000020000000000000000000000f00000003410f99054df8c0fac85aba810afd9be6fec8d88b83e0ce223e2356d41b90fb6d9b5992969578853f8a76104d02b4ea2c822658bb8bd010000000000000081e0b08b7e1ef8"], &(0x7f0000000340)=0x62) (async) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000020000000000000000000000f00000003410f99054df8c0fac85aba810afd9be6fec8d88b83e0ce223e2356d41b90fb6d9b5992969578853f8a76104d02b4ea2c822658bb8bd010000000000000081e0b08b7e1ef8"], &(0x7f0000000340)=0x62) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 1m10.237649966s ago: executing program 2 (id=280): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x241) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 55.823743603s ago: executing program 2 (id=280): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x241) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 42.231798846s ago: executing program 2 (id=280): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x241) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 28.323939715s ago: executing program 2 (id=280): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x241) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 18.831018901s ago: executing program 2 (id=280): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x241) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 7.867956194s ago: executing program 2 (id=280): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x241) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 5.348758168s ago: executing program 1 (id=1157): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@loopback, r2}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) 5.15616838s ago: executing program 1 (id=1160): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x3}, 0x2000) 3.558348282s ago: executing program 1 (id=1167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xfffffffffffffd4b}}}]}]}, 0x48}}, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x40000c4) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="c694936b9cebbb479e373727bfac96f5f0a207f4f0c27fc2656be8d812fe8e0f872662f738adf98b6ed2dec4dc2b7aa07620439c4de394756fcab654929b3e", 0x3f}, {&(0x7f00000000c0)="e1dbdcf36abfcbac6da4ff8deaba0c0b45bbd28c5d073be4598e83757103f80f78f88955dae3d84c2ee6571f27a2ba7c88a2062085fad05c3d4f756fb6719bf6eb37ecf6", 0x44}, {&(0x7f0000000140)="5a44b751989ba9071cad102bf5ded91409d20d45da447f822831164792ea8197001532a91d747ee739245eb8f9ef2ba4a3fa0a725b1724e928fa28af1e036e49f432e1940096c0b6885f41412f40f425c1d0a6490fcf17341ce4b87227c6d1d87561a63a6b4196adee02ce208ce9f261216d445e04df8fb916004cd9cd9e", 0x7e}, {&(0x7f00000001c0)="77a1af638eb8e5c57b34d6717bcf7b3312ed6b65e6a0ae5b4563eb2b77c61eedaba462f98cacd49c0e196d25b3903282b7894f3de581fa12a4f8", 0x3a}], 0x4}, 0x20000001) 3.356146045s ago: executing program 1 (id=1170): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x70, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54e4, @empty, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @mcast2, 0x80}}}}]}]}, 0x70}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56, 0x0, 0x2}, 0x20) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.47709269s ago: executing program 5 (id=1184): syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[], 0xb5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newtfilter={0x24, 0x28, 0x823, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="47017f00d1aa23763fd0425191d7dc52ddb55b395cbbd84085cff412f3aa52a514a381518b23c8487698fe86d4195a36308b477aae17ed30a74ad4b6ba950e4911fba99f8f2f0acda3739c969f29f0048e4b5c92740a0fe9a3c139e25cba50145b15ce09c5a82b908c8e2de10955030e85809bac7545982d90fb18a6d2ab734a0d2cc99d0293a1567fb5895d86bbb3cbb8b11938829da2887abdd06d55694fc6ab87259b5a2f8a6bb489f64c0a45dccb0587015603ee876a41ce2341dbe196295d899ca120b39dcead69b6c5f442ee692b8138a6c8a1f4ceb4d1c76c5a803ad45223fe0a5d8d1263d2ec77ff9fa2ed8370ef831256f444ed27b8a3c002e8a3d5f040bfbf2fb732bc776ec08b45677f8d70d1958a558384644f258ba260c08ee49ee74eaa5781640616c3cebe26b5f70e9310e2ace9e9ce2d59bd060802110000003c040101380300c8017f00250300af043c0400058c076512505050505050ffffffffffff0802110000012a010505e004aec0db9994336b75108b6cccebf0e3e2c7ddd8305c94e40e30e2eaed3b7ecfacdf62cc28d512aab781bcf71f2883343cc4c9ab6e6950e61e5f1c16ade1ad241fcf40aea97bbd417002f544a1f955f3835d784b10b5373250b381f78f64e97966177626e3fc84f8091865582b1a959c362fe7074ba478f5df9188c6d06b1bc6ec415dd093fb62cd9fdf7c584d4c80b1c79cbe53981450afe14307413cbd7bd97a103bbced5ae970214cff19142c927965fb668ee6496af7a982e55f414ddb70897832589d2628d1001b1737c4a6efc2f30286d960e1f9a46ffe8bb9b0afe0066512505050505050ffffffffffffffffffffffff2a010405a71cb500206ce0ff311a0831f0679df913a0a117fbf9cdfa39e6d66358cc090a2aa75d73e506e2507a1f296ff8f173143d59d73cada98509f0ef90825d88a1d284c1e896d37e4f038e6e96ec36cf161771fb6eaacd97455f395f296491090e8f74149492675005e4d96683521ad283ee3ad83ca6330db1befabfcb8827fe4247a349474eba125985f26d7a039835ef308170a6e9b3cd865404eb9ac9b02627b381cdba07e0dfabfe"], 0x32c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) close(r11) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2.361738653s ago: executing program 0 (id=1186): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)={0x2, 0xef, "6e8ba3fa65fb81a42a1aa3f53b8136ff4c622e63b2334b2bd3b91ff42e855a678a8347418387317284ba679d06b8c9921ae3f742efdba27a0b4d86a91f3d757ff49c38971be4e50f9281898ab1b51f41b88f105cc016055c7b4fdec9b982003acba14551ffc8cb2cb5602cd41951b764729f1f26f0e0c49027df937636cde9dea2969059460129efa5baf91b74229e94a109f63adb99d59c0e9317d182bbeea60d29e5e6c65b4927e3dca38ec3acd77ac12c0f6397e8a9a820ae759a21b9ff0617f84026aefc338733ac19a7781dd5c34c20782a5fe29908b6b776e546badae6f93551d1b99bc896aa193c5e71252f"}) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x5, 0x36, 0x0, &(0x7f0000000380)="259a53f271a76d2686dd4c6588a89ada9e4fa25088bbe05bea24045ef84cc5861322ba00294da9cc2cdb3db46a3efbc06bcca84d4588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x50) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000040), 0x0}, 0x20) (async) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r6, 0x0) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write(r10, &(0x7f00000004c0)="25b17bbe5423078df34d2ac668bce9bc5e1d1871f3b5117362833c394b5234a2a8934df882677c5597bc56b7fe6c8daae89515c131a33930da889dbd3e44159718c51a64867e2c3b3f7264c9e215583f3071e2d573356badc0bea512f8c8b83bd71678e206ae6b05722b739f8009d1b00579f0b0b0b4f4f39f7828a6400b7bb9f2749a050459374501cb1212f0", 0x8d) (async) sendto(r10, &(0x7f0000000140)="ce3f32ef", 0x4, 0x4000000, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x3, 0x0, 0x2, 0x1}}, 0x80) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) getsockopt$bt_hci(r7, 0x84, 0x2, 0x0, &(0x7f0000000700)) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team0\x00'}) (rerun: 64) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xd7d7, @remote, 0xd71}, 0x1c) 2.141223093s ago: executing program 0 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x02W'}]}]}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) r3 = socket$inet_icmp(0x2, 0x2, 0x1) close(r3) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0xc0}}, 0x0) 2.055580812s ago: executing program 0 (id=1189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0x218, 0x229, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'pim6reg1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0xaccb0db791436cff, 0x6, 0x30, 0xfffffffe, 0x20, @mcast2, @local, 0x2e, 0x7800, 0xfffff0e0, 0x2}}) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d80", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendto$packet(r1, &(0x7f00000000c0)="d95c0c40ff6ac39f46fbbe5b713405eb537b7c08bb98ebddf1dfbe8eab315789b121071dfeca7d92c1665c97dd8309e3cd6c381ee91e161cda8360ec8f71a7b2caab606a9ccff52a37dfcbc1c69e034c921fa6792559844c90f6e6e4dd31aa19e920d958c580a15c14bfcdf7e0f2de1b1798fd1d42bd", 0x76, 0x20000805, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) 1.801306439s ago: executing program 0 (id=1191): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x21) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x6, @remote, 0xbef}}}, &(0x7f00000000c0)=0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xa4}}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 1.711123603s ago: executing program 5 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0000", @ANYRES32=r1, @ANYBLOB="08000100e000000208000200ffffffff08000400ac1414aa080004009d1414aa08000a000100200008000200"], 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 1.571087457s ago: executing program 5 (id=1196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000005000125000000000000000085000000cd96c700950000"], &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r2]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r7, 0x114, 0x3f, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r8, r9, 0x81, 0x0) close(0x4) (async) close(0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r10, 0x1, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.470473065s ago: executing program 5 (id=1198): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000012000103"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x4048000) recvmsg$qrtr(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000002061108e00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4000010) 1.048034742s ago: executing program 3 (id=1202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000590, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) unshare(0x22020400) readv(r0, 0x0, 0xffffffffffffffab) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x1410, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000300)={0x0, 0x0, "c107a20b781960ef05dedbf8ccec684f"}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x46, &(0x7f00000001c0)=[{&(0x7f0000000340)="00126fc4c50a8227a61137907bf25fa7bd1d0ef41bf37c752bd08d1d37978830a92b544a1ccf603909ee3d82fb", 0x18}, {&(0x7f0000000d00)="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", 0xffffffffffffffd4}], 0x2}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc66465063423149cbefaf5b88b54ca2d8034c4ca29e0d99c3b66b90000000000000098c4b460eaa36a9af45438a54981be310aad92ae545b1c96", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x4, 0x0, 0x10000}, 0x27) 924.955813ms ago: executing program 3 (id=1203): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x14090) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0xf8, 0xf8, 0x1c0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x9000000, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) 845.367244ms ago: executing program 0 (id=1204): socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18300000feffffff00000000030000009510000400000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006a40)={&(0x7f0000006940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x12}]}}, 0x0, 0x26}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18300000feffffff00000000030000009510000400000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006a40)={&(0x7f0000006940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x12}]}}, 0x0, 0x26}, 0x20) (async) 773.327556ms ago: executing program 0 (id=1205): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@bridge_setlink={0x17, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES]}, 0x2c}}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000740)=[{&(0x7f00000001c0)="629ef49efe", 0x5}], 0x1}, 0x44006) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x43) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x4ac, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x1f7, 0x2a, [@link_id={0x65, 0x12, {@random="4d5de274e0c2", @broadcast, @device_b}}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0xfd, {0xfa, 0x4, 0x3, "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"}}, @ssid={0x0, 0x4, @random="3134c0c5"}, @perr={0x84, 0xb0, {0x4, 0xc, [{{}, @device_a, 0x6, @void, 0x1f}, {{0x0, 0x1}, @device_b, 0x10000, @value=@device_b, 0x31}, {{}, @broadcast, 0x56a8, @void, 0x24}, {{}, @device_a, 0x7, @void, 0x2c}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x3c}, {{}, @device_b, 0x8ffd, @void, 0x12}, {{}, @device_b, 0x3, @void, 0x1b}, {{}, @broadcast, 0x2, @void, 0x38}, {{}, @broadcast, 0x9, @void, 0x32}, {{0x0, 0x1}, @broadcast, 0x81, @value=@broadcast, 0x1a}, {{}, @device_b, 0xef, @void, 0x30}, {{}, @device_a, 0x6, @void, 0x1a}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @channel_switch={0x25, 0x3, {0x0, 0xb5, 0x6}}, @peer_mgmt={0x75, 0x16, {0x1, 0x8, @val=0xfff9, @void, @val="75dc75abd28731054a4462b07210b396"}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x288, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x3d, 0x3, "d47c49994d666e97c9c9ffce6cd8e8ce86a141f64fad036d0622f821970f6701297314f6267db702e324524bd0c8a494736fa0cdc15d45a4d4"}, @NL80211_BAND_5GHZ={0x1d, 0x1, "bde1d20d20f3e30bd103ed4d4802e7f12bf9d7e6cade929e03"}, @NL80211_BAND_5GHZ={0x16, 0x1, "77702c907c9a17ec4b51fcc8c5eedeb3b9ae"}, @NL80211_BAND_6GHZ={0x38, 0x3, "7143c766047b70683aefa196383f9e8671185065d97acb702bbe8077f7a73f58ec6ba0ecb5ecee0e1affdc30f6a2bc0a2a39c24c"}, @NL80211_BAND_60GHZ={0xea, 0x2, "8e8f1771fd035ca1aef7569167ef57cd78578c981284a35237f93571b5092a8b258019a65fa2cda52ce28b658a87d493b5c0f12e69a693486d869262edce124af443d40c9ba75bdb0b850a20037983ddba93472ac7a4f9b58d7220a16267293c7e05b10a5e6532d5dc4070dfb2b953764545a8d160fdc986c11353ca20748811694a0f8cf2bac2b242b626a6a07240c8973ef51c66596fecb5cd7be2943810bc138f7e60a42d5316b06ebbe8716c18984c5ce7cb76a4eb97cd87b40f5fe2f844809b210e5a953db35412ff49f1a1698faa8e625f0fdb71cef577003a6ad771ebd92208fa8ae5"}, @NL80211_BAND_6GHZ={0x92, 0x3, "a76a403e8e18a2d8377f63b6db7381b177528a7f994b3656b933e83987c2c18ba5acf5243005c0ec2aa33a1a9aad2521cdc026bf9295402edf442d5a991df5bb03fbbd6212441664b30921b1383c22fefcbe7bcf67a13a280640c86038433c3a5cf222b585a96c67f171dd5799dd7a222f5b35dec1f185ded0eb60da72be01663f7b25dd6540574ab031e643332d"}, @NL80211_BAND_6GHZ={0x4e, 0x3, "cb52d7912c37ffcd3b36f0c976f2fbb917b48f713d64cb7649a95db7f7fa0b78b8aacc3797df3ede763aa7018a8571e4395d28cbc712c41cdfaf3c27c15a3a9f3a8d5336797911f1bac6"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x10001}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x20040085}, 0x4050) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@mcast1={0xff, 0x5}, @remote, @loopback={0xff00000000000000}, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8144008a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x0, 0x4, 0x2, 0x6}, {0x1, 0x5, 0x9, 0x7}, {0x3, 0x2, 0xc}], 0x10, 0x4f}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 729.349677ms ago: executing program 3 (id=1206): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8cc}, @IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 557.224185ms ago: executing program 3 (id=1207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000100), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x4, 0x1, 0x4, 0xbb, 0x8}}}}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 539.45337ms ago: executing program 5 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xed}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40005) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f00000001c0)="efe13307948137fd2b73bf49d642de5aca22472c846b27dc5402b04d832b8a95a8aae8ab27828c82d6", 0x29}, {&(0x7f0000000200)="4d04cbfe1e913022249e2a0e478fea654cee2b787dd606c01365084d1f8c5c3a8a1ef28ba019516398fb049a20f9", 0x2e}, {&(0x7f0000000240)="af8c8b06d15001fe2b69c91c1d3871cf023dcaf4499722e8975866f219260cb4fcfe62107a78569e6f1f7f828c9d6c400301b582ca1dec332d95e1b05fe29e1ba528b7f77d254e42c1e06a083b8a3fac37113c7388d95fd5e7fc217c67cfa6cdf66742015793b78660be2f51d7fa6ca65fa7337d676702cbb4d0c85069a65c33759764dec2e894bcc58ca92177146acd3f6956dd518ea5f69c1986e5371e28cc2f5ec7bec6cb5c5d8c8fb0aca885171c24fcd2151c0d37dfa1a6eea8637881d62fac31483c14ca042d07551e4512563f2231a2deaf5e4feba0117455592110ce796bee1074d8e985804d4798b33f9a724e474be478466eddc54b62f3e3", 0xfd}, {&(0x7f0000000340)="ec99b3ad75343dc58907df0e5a8d17df98ef0def3435386a07", 0x19}, {&(0x7f0000000380)="dc8ec41a321d69a64b7712bfad7c72fec6140e35d14756a7e687206b5a8fa9333a20d5277c13dfc2da5492565e14c106831de66a5f178f15c06088129b62dd28b5b1566997c37f955e1367b0eb1ef4451f9f47ee03f67be30a9c88c53a62f992d34100ac2bbc706d9c8599610b778d927357c3103043f2f47ff9eb3b83183919268506ac904413be7f5ec734dee8fad45a46d025149276b5e0cad539108541c484fd27cc248eb2a42c01f6d1258f06", 0xaf}], 0x5}, 0x40000801) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xdc, r1, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xad, 0xc5, "ed655ce1bea71143692e97b7d7e05dbaf68a18c3320bdbc9e6313bfad66d9bb1eabcc301e92b60fc6149c42cada79a8673a7af368f74abf31908b3f8133eed8d5bf835bb8d591a96f7ea1d6165c15fb37c647efa60278158a662b7c92d80fbfe0851100d6c2b5444ed6607f55c613bf7e5b9e58630408204ade03f3b8b89b8c6f6ec28ec7412736839e73b6f19ce3cac1bed2074a465313ebdcdb79b98de33ae31006461a30013c78c"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x10, 0xc5, "190c2eccaba1eee06f018ced"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4068084}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa4, r1, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x50, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xff, 0x8, @broadcast, 0x6, @value=@broadcast, 0x5, 0x7f, @broadcast, 0x200}}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x1, 0x0, {0x1, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0xf0, 0x7}}, @supported_rates={0x1, 0x7, [{0x18}, {0xb}, {0x60, 0x1}, {0x9, 0x1}, {0xb, 0x1}, {0x24, 0x1}, {0x4c, 0x1}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=@gettaction={0xd4, 0x32, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x66}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x19}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff801}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20001010}, 0x8000) r8 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000a40)={0x40000010}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) recvmsg$can_j1939(r5, &(0x7f0000000d40)={&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/76, 0x4c}, {&(0x7f0000000c00)=""/176, 0xb0}], 0x2, &(0x7f0000000d00)=""/64, 0x40}, 0x40) pipe(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r10, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x67}, @void, @val={0xc, 0x99, {0xfffffffd, 0x3e}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r12, 0x84, 0x12, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000f40)={0x0, 0x7}, &(0x7f0000000f80)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000fc0)={r13, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0x3}}}, &(0x7f0000001080)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f00000010c0)={r14, 0x7}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000001180)={r15, 0x0, &(0x7f0000001140)}, &(0x7f00000011c0)=0x10) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000001200)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000001240)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001280)=0x20) 418.22829ms ago: executing program 5 (id=1209): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x10011, 0x2, 0x2, 0x5, 0xc}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000001080)) 289.125995ms ago: executing program 3 (id=1210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e24, @remote}, {0x6, @multicast}, 0x4, {0x2, 0x4e20, @multicast1}, 'bond_slave_0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)={0x11c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x10b, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e24, @remote}, {0x6, @multicast}, 0x4, {0x2, 0x4e20, @multicast1}, 'bond_slave_0\x00'}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)={0x11c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x10b, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) (async) 173.326313ms ago: executing program 1 (id=1211): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40800, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.707327ms ago: executing program 1 (id=1212): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000002000240000002400000006000000020000000000000c040000000900000000000008030000001e0000000000001205000000002e6f5f000091441592d680c301d0d53375741e9e4d91346562d8c7288b942071eef1176c3f7abf5fd98eaa5b3972e3c84b2d0fc31dd590b3394329b4c459756b73768db416eea1ca9c12220d93fa9b18694ee2b8e77938ae76f634772b69483729572bf5b4d1e64d974e929454d193"], &(0x7f0000000280)=""/224, 0x42, 0xe0, 0x0, 0x101}, 0x28) r1 = socket(0x1, 0x5, 0x7) close(r1) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x1, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r4, &(0x7f0000000140)=ANY=[], 0xc) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x80, 0x801076469c94fa07}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x48080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', r5, @cgroup_sock_addr=0x32, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=1213): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x24008004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'rlimit'}, {0x2b, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpuset'}, {0x2d, 'cpu'}, {0x2b, 'rdma'}, {0x2d, 'cpuacct'}, {0x2d, 'rlimit'}, {0x2d, 'blkio'}]}, 0x3f) kernel console output (not intermixed with test programs): 92.827467][ T5866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.837798][ T5866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.847141][ T5866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.856605][ T5866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.876747][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7'. [ 92.987286][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.995979][ T5853] veth1_macvtap: entered promiscuous mode [ 93.010107][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.126769][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.201948][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.254422][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.264761][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.284159][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.294471][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.303193][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.316016][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.468787][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.491187][ T6001] raw_sendmsg: syz.3.13 forgot to set AF_INET. Fix it! [ 93.498770][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.685234][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.791944][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.837798][ T6009] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.837836][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.868794][ T6006] Zero length message leads to an empty skb [ 93.908761][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.941369][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.941442][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 94.000403][ T5168] Bluetooth: hci3: command tx timeout [ 94.005862][ T5168] Bluetooth: hci0: command tx timeout [ 94.016010][ T5168] Bluetooth: hci1: command tx timeout [ 94.059613][ T5856] Bluetooth: hci2: command tx timeout [ 94.066976][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.131278][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.140993][ T5856] Bluetooth: hci4: command tx timeout [ 94.187730][ T6019] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18'. [ 94.236880][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.716920][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.766344][ T6038] vlan2: entered allmulticast mode [ 94.815632][ T6038] veth1: entered allmulticast mode [ 94.822799][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 96.092429][ T6100] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.149715][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 96.158485][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'. [ 96.188946][ T6107] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 96.210446][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 96.210595][ T6107] netlink: 224 bytes leftover after parsing attributes in process `syz.0.43'. [ 96.513393][ T6124] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 96.730406][ T6133] netlink: 'syz.2.49': attribute type 12 has an invalid length. [ 96.926629][ T6141] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 97.548828][ T6173] netlink: 'syz.0.62': attribute type 39 has an invalid length. [ 97.796055][ T6182] veth0: entered promiscuous mode [ 98.045732][ T6198] ip6t_REJECT: ECHOREPLY is not supported [ 98.097466][ T6187] __nla_validate_parse: 13 callbacks suppressed [ 98.097481][ T6187] netlink: 666 bytes leftover after parsing attributes in process `syz.3.67'. [ 98.113724][ T6181] veth0: left promiscuous mode [ 98.691356][ T6220] xt_ecn: cannot match TCP bits for non-tcp packets [ 98.978189][ T6233] netlink: 14 bytes leftover after parsing attributes in process `syz.0.80'. [ 99.126245][ T6246] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 99.177229][ T6233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.201696][ T6233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.212651][ T6233] bond0 (unregistering): Released all slaves [ 100.362585][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.811894][ T6332] openvswitch: netlink: Key type 29 is not supported [ 101.597029][ T6368] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 101.619284][ T6368] netlink: 232 bytes leftover after parsing attributes in process `syz.1.119'. [ 101.646776][ T6370] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 101.729044][ T6368] pimreg3: entered allmulticast mode [ 101.750058][ T6376] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 101.790508][ T6376] netlink: 232 bytes leftover after parsing attributes in process `syz.1.119'. [ 101.868937][ T2153] IPVS: starting estimator thread 0... [ 101.875458][ T6381] netlink: 'syz.4.122': attribute type 24 has an invalid length. [ 101.989814][ T6384] IPVS: using max 24 ests per chain, 57600 per kthread [ 102.063719][ T6390] netlink: 'syz.4.126': attribute type 10 has an invalid length. [ 102.075683][ T6391] netlink: 'syz.1.124': attribute type 10 has an invalid length. [ 102.088992][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 102.103303][ T6391] team0: Device ipvlan1 failed to register rx_handler [ 102.423414][ T6398] netlink: 'syz.4.128': attribute type 10 has an invalid length. [ 102.465916][ T6398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.128'. [ 102.493978][ T6406] x_tables: unsorted entry at hook 2 [ 102.644842][ T6411] trusted_key: syz.3.132 sent an empty control message without MSG_MORE. [ 102.740134][ T6411] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 102.753603][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 102.767256][ T6398] team0: Port device geneve0 added [ 102.875934][ T6418] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.132'. [ 102.926943][ T6423] tipc: Started in network mode [ 102.949933][ T6423] tipc: Node identity 5ab17bb94b19, cluster identity 4711 [ 102.990504][ T6423] tipc: Enabled bearer , priority 0 [ 103.010415][ T6426] syzkaller0: entered promiscuous mode [ 103.018574][ T6425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.032942][ T6429] netlink: 64 bytes leftover after parsing attributes in process `syz.1.137'. [ 103.038465][ T6426] syzkaller0: entered allmulticast mode [ 103.110814][ T6423] tipc: Resetting bearer [ 103.142333][ T6431] syz.1.138 uses obsolete (PF_INET,SOCK_PACKET) [ 103.567093][ T6451] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 103.675430][ T6454] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 103.753174][ T6454] team0: Device hsr_slave_0 failed to register rx_handler [ 103.794483][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.147'. [ 103.856031][ T6422] tipc: Resetting bearer [ 103.987187][ T6422] tipc: Disabling bearer [ 104.000176][ T5854] tipc: Node number set to 296254393 [ 104.030936][ T6474] netlink: 128 bytes leftover after parsing attributes in process `syz.3.150'. [ 104.050941][ T6474] netlink: 128 bytes leftover after parsing attributes in process `syz.3.150'. [ 104.092952][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 104.102714][ T6474] netlink: 48 bytes leftover after parsing attributes in process `syz.3.150'. [ 104.532163][ T6501] netlink: 32 bytes leftover after parsing attributes in process `syz.1.157'. [ 104.626931][ T6497] tun0: tun_chr_ioctl cmd 1074025675 [ 104.647896][ T6497] tun0: persist disabled [ 104.676945][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 104.938690][ T6523] tipc: Started in network mode [ 104.953902][ T6523] tipc: Node identity 76d431a49e5f, cluster identity 4711 [ 104.975546][ T6523] tipc: Enabled bearer , priority 10 [ 105.101908][ T6535] netlink: 56 bytes leftover after parsing attributes in process `syz.1.166'. [ 105.468558][ T6557] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 105.490053][ T6557] netlink: 236 bytes leftover after parsing attributes in process `syz.0.173'. [ 105.693176][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 106.104339][ T5854] tipc: Node number set to 3901436324 [ 107.087893][ T6621] openvswitch: netlink: Key type 303 is out of range max 32 [ 107.738156][ T6646] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 107.839059][ T6648] bridge_slave_0: left allmulticast mode [ 107.894544][ T6648] bridge_slave_0: left promiscuous mode [ 107.902965][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.928353][ T6648] bridge_slave_1: left allmulticast mode [ 107.944923][ T6648] bridge_slave_1: left promiscuous mode [ 107.955006][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.977853][ T6648] bond0: (slave bond_slave_0): Releasing backup interface [ 108.003000][ T6648] bond0: (slave bond_slave_1): Releasing backup interface [ 108.037798][ T6648] team0: Port device team_slave_0 removed [ 108.050526][ T6648] team0: Port device team_slave_1 removed [ 108.080195][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.087633][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.101690][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.109586][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.423161][ T6669] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.637763][ T6741] __nla_validate_parse: 10 callbacks suppressed [ 109.637793][ T6741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.223'. [ 109.657478][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 109.744387][ T6740] netlink: 'syz.2.225': attribute type 11 has an invalid length. [ 109.750421][ T6745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.792694][ T6740] netlink: 224 bytes leftover after parsing attributes in process `syz.2.225'. [ 109.873093][ T6747] openvswitch: netlink: Duplicate or invalid key (type 0). [ 109.888137][ T6747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.945533][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 110.061274][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 110.106305][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 110.173908][ T6762] netlink: 96 bytes leftover after parsing attributes in process `syz.1.231'. [ 110.641148][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 110.829913][ T6794] netlink: 11 bytes leftover after parsing attributes in process `syz.2.240'. [ 110.850144][ T6794] netlink: 11 bytes leftover after parsing attributes in process `syz.2.240'. [ 111.190197][ T6819] validate_nla: 1 callbacks suppressed [ 111.190214][ T6819] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 111.208858][ T6819] team0: Device hsr_slave_0 failed to register rx_handler [ 111.511231][ T6828] netlink: 'syz.1.253': attribute type 33 has an invalid length. [ 111.979557][ T6853] openvswitch: netlink: Unknown key attributes 2 [ 112.004908][ T6852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.225315][ T6865] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 112.256249][ T6865] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 112.742612][ T6897] netlink: 'syz.0.277': attribute type 7 has an invalid length. [ 113.173086][ T1101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.336088][ T1101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.456877][ T1101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.611778][ T1101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.978601][ T1101] bridge_slave_1: left allmulticast mode [ 113.998309][ T1101] bridge_slave_1: left promiscuous mode [ 114.021787][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.058644][ T1101] bridge_slave_0: left allmulticast mode [ 114.064952][ T1101] bridge_slave_0: left promiscuous mode [ 114.071558][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.088416][ T6931] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 114.298108][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.314785][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.327176][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.336060][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.343528][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bccec00: rx timeout, send abort [ 114.355345][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.639772][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.655566][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.666003][ T1101] bond0 (unregistering): Released all slaves [ 114.683622][ T6940] __nla_validate_parse: 15 callbacks suppressed [ 114.683641][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 114.705984][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 114.844078][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bccec00: abort rx timeout. Force session deactivation [ 115.080490][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 115.525830][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 115.683189][ T1101] hsr_slave_0: left promiscuous mode [ 115.707178][ T1101] hsr_slave_1: left promiscuous mode [ 115.715778][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.735592][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.747955][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.767540][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.805790][ T1101] veth1_macvtap: left promiscuous mode [ 115.811823][ T1101] veth0_macvtap: left promiscuous mode [ 115.817686][ T1101] veth1_vlan: left promiscuous mode [ 115.823714][ T1101] veth0_vlan: left promiscuous mode [ 116.279364][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 116.309809][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 116.381103][ T5168] Bluetooth: hci2: command tx timeout [ 116.603277][ T6995] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 116.613322][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'. [ 116.632088][ T6995] netlink: 244 bytes leftover after parsing attributes in process `syz.3.300'. [ 116.736646][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 116.763824][ T7002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.771771][ T7004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.868117][ T7002] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 116.901099][ T6939] chnl_net:caif_netlink_parms(): no params data found [ 117.027651][ T7010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.303'. [ 117.262676][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.276911][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.286379][ T6939] bridge_slave_0: entered allmulticast mode [ 117.294753][ T6939] bridge_slave_0: entered promiscuous mode [ 117.341295][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.357412][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.375236][ T6939] bridge_slave_1: entered allmulticast mode [ 117.395383][ T6939] bridge_slave_1: entered promiscuous mode [ 117.513195][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.533821][ T7032] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 117.561978][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.713736][ T6939] team0: Port device team_slave_0 added [ 117.758921][ T6939] team0: Port device team_slave_1 added [ 117.882441][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.902980][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.948146][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.971385][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.978461][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.042357][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.266110][ T6939] hsr_slave_0: entered promiscuous mode [ 118.290852][ T6939] hsr_slave_1: entered promiscuous mode [ 118.297277][ T6939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.326287][ T6939] Cannot create hsr debugfs directory [ 118.459712][ T5168] Bluetooth: hci2: command tx timeout [ 118.850389][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.321'. [ 118.864676][ T7084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.869401][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 118.882750][ T7084] bond0: (slave rose0): Enslaving as an active interface with an up link [ 119.078965][ T7087] veth3: entered allmulticast mode [ 120.369496][ T7143] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 120.376705][ T7143] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 120.498698][ T6939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.536076][ T6939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.545142][ T5168] Bluetooth: hci2: command tx timeout [ 120.565807][ T6939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.580388][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.588755][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.597317][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.605714][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.614009][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.666364][ T6939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.668658][ T7154] __nla_validate_parse: 3 callbacks suppressed [ 120.668677][ T7154] netlink: 100 bytes leftover after parsing attributes in process `syz.1.337'. [ 120.981937][ T7171] vlan2: entered allmulticast mode [ 120.987554][ T7171] team0: entered allmulticast mode [ 120.992905][ T7171] team_slave_0: entered allmulticast mode [ 120.998841][ T7171] team_slave_1: entered allmulticast mode [ 121.005745][ T7171] team0: Device vlan2 is already an upper device of the team interface [ 121.256703][ T7188] netlink: 'syz.1.341': attribute type 21 has an invalid length. [ 121.269283][ T7188] netlink: 156 bytes leftover after parsing attributes in process `syz.1.341'. [ 121.462781][ T6939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.556025][ T6939] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.597763][ T7150] chnl_net:caif_netlink_parms(): no params data found [ 121.618425][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.625779][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.633659][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805b4b9400: rx timeout, send abort [ 121.643365][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805b4b9400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 121.758057][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.765384][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.973518][ T7208] netlink: 'syz.3.345': attribute type 10 has an invalid length. [ 121.991002][ T7219] bridge_slave_0: left allmulticast mode [ 121.996698][ T7219] bridge_slave_0: left promiscuous mode [ 122.003151][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.022078][ T7219] bridge_slave_1: left allmulticast mode [ 122.027942][ T7219] bridge_slave_1: left promiscuous mode [ 122.034734][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.056576][ T7219] bond0: (slave bond_slave_0): Releasing backup interface [ 122.075913][ T7219] bond0: (slave bond_slave_1): Releasing backup interface [ 122.093051][ T7219] team_slave_0: left allmulticast mode [ 122.108452][ T7219] team0: Port device team_slave_0 removed [ 122.115734][ T7219] team_slave_1: left allmulticast mode [ 122.137413][ T7219] team0: Port device team_slave_1 removed [ 122.157175][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.174534][ T7219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.197806][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.205781][ T7219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.246723][ T7208] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 122.334038][ T7221] team0: Mode changed to "loadbalance" [ 122.392280][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.403164][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.434253][ T7150] bridge_slave_0: entered allmulticast mode [ 122.464952][ T7150] bridge_slave_0: entered promiscuous mode [ 122.527506][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.557147][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.589442][ T7150] bridge_slave_1: entered allmulticast mode [ 122.610562][ T7150] bridge_slave_1: entered promiscuous mode [ 122.621016][ T5856] Bluetooth: hci2: command tx timeout [ 122.699782][ T5856] Bluetooth: hci5: command tx timeout [ 122.856662][ T7150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.896528][ T7150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.937143][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 123.113535][ T7150] team0: Port device team_slave_0 added [ 123.165630][ T7150] team0: Port device team_slave_1 added [ 123.334475][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 123.446763][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.464652][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.496571][ T7150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.540825][ T7273] nbd0: detected capacity change from 0 to 63 [ 123.560352][ T7275] block nbd0: NBD_DISCONNECT [ 123.567466][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.574736][ T7275] block nbd0: Disconnected due to user request. [ 123.589872][ T7275] block nbd0: shutting down sockets [ 123.591004][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.626388][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.635660][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 123.643542][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.652665][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 123.660536][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.663324][ T7150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.669622][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 123.669714][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.669741][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 123.705034][ T6017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.813747][ T6017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 123.848235][ T6017] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.888973][ T6017] Buffer I/O error on dev nbd0, logical block 1, async page read [ 123.912074][ T6017] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.966139][ T6017] Buffer I/O error on dev nbd0, logical block 2, async page read [ 123.987362][ T6017] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.005638][ T7150] hsr_slave_0: entered promiscuous mode [ 124.015620][ T6017] Buffer I/O error on dev nbd0, logical block 3, async page read [ 124.026596][ T7150] hsr_slave_1: entered promiscuous mode [ 124.032701][ T7296] netlink: 'syz.3.363': attribute type 4 has an invalid length. [ 124.040377][ T6017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.040426][ T6017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.040581][ T6017] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.040607][ T6017] Buffer I/O error on dev nbd0, logical block 1, async page read [ 124.043861][ T6017] ldm_validate_partition_table(): Disk read failed. [ 124.090687][ T7150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.098291][ T7150] Cannot create hsr debugfs directory [ 124.135526][ T6017] Dev nbd0: unable to read RDB block 0 [ 124.183832][ T6017] nbd0: unable to read partition table [ 124.226648][ T6017] ldm_validate_partition_table(): Disk read failed. [ 124.281604][ T6017] Dev nbd0: unable to read RDB block 0 [ 124.315968][ T6017] nbd0: unable to read partition table [ 124.602286][ T6939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.709642][ T7326] nftables ruleset with unbound chain [ 124.789452][ T5856] Bluetooth: hci5: command tx timeout [ 124.799289][ T7327] team0: Device gtp0 is up. Set it down before adding it as a team port [ 124.835499][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 125.005933][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.373'. [ 125.171659][ T6939] veth0_vlan: entered promiscuous mode [ 125.207951][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 125.234444][ T6939] veth1_vlan: entered promiscuous mode [ 125.241666][ T7346] netlink: 'syz.0.374': attribute type 2 has an invalid length. [ 125.264614][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.374'. [ 125.287490][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 125.415387][ T7150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.465004][ T7150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.495404][ T7150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.517394][ T7150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.921175][ T6939] veth0_macvtap: entered promiscuous mode [ 126.013694][ T6939] veth1_macvtap: entered promiscuous mode [ 126.133139][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.176837][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.244832][ T6939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.264115][ T6939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.281430][ T6939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.300419][ T6939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.344266][ T7387] netlink: 64 bytes leftover after parsing attributes in process `syz.0.381'. [ 126.417330][ T7387] syzkaller0 speed is unknown, defaulting to 1000 [ 126.447012][ T7387] syzkaller0 speed is unknown, defaulting to 1000 [ 126.495685][ T7387] syzkaller0 speed is unknown, defaulting to 1000 [ 126.552636][ T7387] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.558882][ T7150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.610461][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.619152][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.632240][ T7387] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 126.718949][ T7150] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.737454][ T7387] syzkaller0 speed is unknown, defaulting to 1000 [ 126.739994][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.764409][ T7387] syzkaller0 speed is unknown, defaulting to 1000 [ 126.771461][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.783388][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.790643][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.826392][ T7387] syzkaller0 speed is unknown, defaulting to 1000 [ 126.848980][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.856209][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.865090][ T5856] Bluetooth: hci5: command tx timeout [ 126.892458][ T7387] syzkaller0 speed is unknown, defaulting to 1000 [ 126.914865][ T7387] syzkaller0 speed is unknown, defaulting to 1000 [ 126.947326][ T7387] syzkaller0 speed is unknown, defaulting to 1000 [ 127.254098][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 127.401452][ T7395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.472857][ T7413] x_tables: unsorted entry at hook 2 [ 127.529961][ T7415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.387'. [ 127.544444][ T1159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.676985][ T7413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.386'. [ 127.939039][ T1159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.199991][ T1159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.314424][ T7444] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 128.352018][ T7150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.552396][ T1159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.736554][ T7464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.391'. [ 128.770798][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 128.944675][ T5856] Bluetooth: hci5: command tx timeout [ 128.949224][ T7472] Cannot find add_set index 0 as target [ 129.082074][ T1159] bridge_slave_1: left allmulticast mode [ 129.119099][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.129940][ T1159] bridge_slave_1: left promiscuous mode [ 129.139715][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.147602][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.170890][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.183358][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.192591][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.258163][ T1159] bridge_slave_0: left allmulticast mode [ 129.284716][ T1159] bridge_slave_0: left promiscuous mode [ 129.305318][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.907610][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.923353][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.934475][ T1159] bond0 (unregistering): Released all slaves [ 129.949751][ T7480] netlink: 'syz.1.395': attribute type 3 has an invalid length. [ 130.081190][ T7476] syzkaller0 speed is unknown, defaulting to 1000 [ 130.127210][ T7150] veth0_vlan: entered promiscuous mode [ 130.163132][ T7507] netlink: 76 bytes leftover after parsing attributes in process `syz.1.399'. [ 130.205545][ T7507] nbd: illegal input index -8454144 [ 130.278030][ T7150] veth1_vlan: entered promiscuous mode [ 130.288208][ T7516] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 130.417617][ T7518] netlink: 'syz.1.402': attribute type 8 has an invalid length. [ 130.545726][ T7512] bond1: (slave bridge2): making interface the new active one [ 130.557627][ T7525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.403'. [ 130.596426][ T7512] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 130.697100][ T7535] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 130.896577][ T1159] hsr_slave_0: left promiscuous mode [ 130.927417][ T1159] hsr_slave_1: left promiscuous mode [ 130.934467][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.946495][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.961738][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.970056][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.001468][ T1159] veth1_macvtap: left promiscuous mode [ 131.007887][ T1159] veth0_macvtap: left promiscuous mode [ 131.018991][ T1159] veth1_vlan: left promiscuous mode [ 131.024698][ T5856] Bluetooth: hci5: command tx timeout [ 131.032229][ T1159] veth0_vlan: left promiscuous mode [ 131.260230][ T5856] Bluetooth: hci2: command tx timeout [ 131.697714][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 131.770959][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 132.074696][ T7150] veth0_macvtap: entered promiscuous mode [ 132.118430][ T7150] veth1_macvtap: entered promiscuous mode [ 132.212759][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.257525][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.280450][ T7150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.289234][ T7150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.297998][ T7150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.319851][ T7150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.583110][ T7574] netlink: 'syz.1.412': attribute type 2 has an invalid length. [ 132.606985][ T7574] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 132.708330][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.936649][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.976286][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.021923][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 133.044031][ T7476] chnl_net:caif_netlink_parms(): no params data found [ 133.052656][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.079445][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.341103][ T5856] Bluetooth: hci2: command tx timeout [ 133.402505][ T7604] bridge0: entered promiscuous mode [ 133.498942][ T7601] bridge0: left promiscuous mode [ 133.689195][ T5856] block nbd5: Receive control failed (result -32) [ 133.741986][ T7624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.816883][ T7626] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 133.950493][ T7639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 133.957215][ T7639] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 133.962410][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.027939][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.053317][ T7476] bridge_slave_0: entered allmulticast mode [ 134.119683][ T7476] bridge_slave_0: entered promiscuous mode [ 134.160993][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.191046][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.213978][ T7476] bridge_slave_1: entered allmulticast mode [ 134.247461][ T7476] bridge_slave_1: entered promiscuous mode [ 134.292698][ T7649] bond0: entered promiscuous mode [ 134.347145][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 134.363203][ T7649] batadv0: entered promiscuous mode [ 134.400662][ T7649] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 134.430906][ T7649] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 134.479588][ T7649] bond0: left promiscuous mode [ 134.500539][ T7649] batadv0: left promiscuous mode [ 134.791994][ T7476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.850887][ T7476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.037809][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.435'. [ 135.061283][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 135.076215][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 135.086145][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.435'. [ 135.216390][ T7476] team0: Port device team_slave_0 added [ 135.296699][ T7476] team0: Port device team_slave_1 added [ 135.419230][ T5856] Bluetooth: hci2: command tx timeout [ 135.529364][ T7708] netlink: 68 bytes leftover after parsing attributes in process `syz.5.440'. [ 135.703431][ T7716] netlink: 124 bytes leftover after parsing attributes in process `syz.1.438'. [ 136.075727][ T7734] Bluetooth: MGMT ver 1.23 [ 136.437391][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.463181][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.535336][ T7739] netlink: 244 bytes leftover after parsing attributes in process `syz.5.445'. [ 136.566107][ T7476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.680405][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.687406][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.750032][ T7476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.774656][ T7749] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 137.024420][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 137.085418][ T7476] hsr_slave_0: entered promiscuous mode [ 137.120365][ T7476] hsr_slave_1: entered promiscuous mode [ 137.126697][ T7476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.178126][ T7476] Cannot create hsr debugfs directory [ 137.291202][ T7782] netlink: 'syz.3.456': attribute type 7 has an invalid length. [ 137.499271][ T5856] Bluetooth: hci2: command tx timeout [ 137.503807][ T7793] netlink: 'syz.0.457': attribute type 13 has an invalid length. [ 137.597257][ T7796] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 137.755320][ T7803] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 137.783732][ T7803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.791334][ T7803] IPv6: NLM_F_CREATE should be set when creating new route [ 138.476812][ T7829] netlink: 'syz.3.467': attribute type 2 has an invalid length. [ 138.487970][ T7829] __nla_validate_parse: 8 callbacks suppressed [ 138.487985][ T7829] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.467'. [ 138.555333][ T7829] nbd: must specify a device to reconfigure [ 139.504485][ T7476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.587182][ T7476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.680113][ T7476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.753965][ T7476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.792372][ T7873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.836277][ T7873] netlink: 'syz.5.478': attribute type 4 has an invalid length. [ 140.149500][ T7476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.243218][ T7476] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.291411][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.298607][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.385775][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.393020][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.942464][ T7914] netlink: 'syz.0.486': attribute type 1 has an invalid length. [ 140.976420][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 141.352875][ T7929] tipc: Enabling of bearer rejected, failed to enable media [ 141.396826][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.568386][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 141.609341][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 141.611208][ T7476] veth0_vlan: entered promiscuous mode [ 141.652715][ T7936] netlink: 'syz.1.491': attribute type 13 has an invalid length. [ 141.694974][ T7476] veth1_vlan: entered promiscuous mode [ 141.893702][ T7476] veth0_macvtap: entered promiscuous mode [ 141.921592][ T7476] veth1_macvtap: entered promiscuous mode [ 142.008709][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.038194][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.101725][ T7476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.139166][ T7476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.155635][ T7476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.177537][ T7957] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.499'. [ 142.179175][ T7476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.483187][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.508883][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.612896][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.635110][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.928936][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 143.545120][ T7990] ip6erspan0: entered promiscuous mode [ 143.774444][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.048755][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.155616][ T8013] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 144.163556][ T8013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.512'. [ 144.269635][ T8013] geneve0: entered allmulticast mode [ 144.305490][ T8013] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 144.330006][ T8013] team0: Failed to send options change via netlink (err -105) [ 144.337531][ T8013] team0: Port device geneve0 added [ 144.474186][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.532959][ T8020] xt_CT: No such helper "pptp" [ 144.543736][ T8018] tipc: MTU too low for tipc bearer [ 144.738758][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.828419][ T8032] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 145.243432][ T8049] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.521'. [ 145.269999][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.281299][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.289591][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.297946][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.312765][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.396411][ T8045] geneve2: entered promiscuous mode [ 145.401887][ T8045] geneve2: entered allmulticast mode [ 145.451239][ T64] bridge_slave_1: left allmulticast mode [ 145.456944][ T64] bridge_slave_1: left promiscuous mode [ 145.477886][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.532960][ T64] bridge_slave_0: left allmulticast mode [ 145.538653][ T64] bridge_slave_0: left promiscuous mode [ 145.569504][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.078949][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.092094][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.104034][ T64] bond0 (unregistering): Released all slaves [ 146.153731][ T8063] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 146.193185][ T8063] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 146.214133][ T8050] syzkaller0 speed is unknown, defaulting to 1000 [ 146.457980][ T8072] tipc: Enabled bearer , priority 0 [ 146.490206][ T8073] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 146.539832][ T8073] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 146.770285][ T43] syzkaller0 speed is unknown, defaulting to 1000 [ 146.777773][ T8080] syzkaller0: mtu greater than device maximum [ 146.794297][ T5938] syzkaller0 speed is unknown, defaulting to 1000 [ 146.800931][ T43] syz2: Port: 1 Link ACTIVE [ 147.131311][ T8098] netlink: 'syz.0.534': attribute type 11 has an invalid length. [ 147.192010][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 147.286271][ T8110] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.536'. [ 147.345516][ T8101] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 147.384348][ T8101] netlink: 'syz.3.535': attribute type 2 has an invalid length. [ 147.421212][ T5856] Bluetooth: hci2: command tx timeout [ 147.592952][ T64] hsr_slave_0: left promiscuous mode [ 147.613777][ T64] hsr_slave_1: left promiscuous mode [ 147.637104][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.650633][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.680520][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.695599][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.722727][ T8122] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 147.761246][ T64] veth1_macvtap: left promiscuous mode [ 147.773729][ T64] veth0_macvtap: left promiscuous mode [ 147.785753][ T64] veth1_vlan: left promiscuous mode [ 147.799928][ T64] veth0_vlan: left promiscuous mode [ 149.105270][ T64] team0 (unregistering): Port device team_slave_1 removed [ 149.164379][ T64] team0 (unregistering): Port device team_slave_0 removed [ 149.500289][ T5856] Bluetooth: hci2: command tx timeout [ 149.948633][ T8050] chnl_net:caif_netlink_parms(): no params data found [ 150.107666][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'. [ 150.653897][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.684903][ T8139] syz.0.543 (8139) used greatest stack depth: 19608 bytes left [ 150.709461][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.716744][ T8050] bridge_slave_0: entered allmulticast mode [ 150.743810][ T8050] bridge_slave_0: entered promiscuous mode [ 150.767536][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.799268][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.806530][ T8050] bridge_slave_1: entered allmulticast mode [ 150.846094][ T8050] bridge_slave_1: entered promiscuous mode [ 150.941570][ T8171] xt_TCPMSS: Only works on TCP SYN packets [ 151.008702][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.296267][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.493420][ T8175] syzkaller1: entered promiscuous mode [ 151.501214][ T8175] syzkaller1: entered allmulticast mode [ 151.516913][ T8050] team0: Port device team_slave_0 added [ 151.580799][ T5168] Bluetooth: hci2: command tx timeout [ 151.660427][ T8050] team0: Port device team_slave_1 added [ 151.803970][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.811344][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.888172][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.952320][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.985038][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.119200][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.407203][ T8050] hsr_slave_0: entered promiscuous mode [ 152.432440][ T8050] hsr_slave_1: entered promiscuous mode [ 152.457786][ T8050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.482517][ T8206] netlink: 'syz.0.554': attribute type 12 has an invalid length. [ 152.484671][ T8050] Cannot create hsr debugfs directory [ 152.523418][ T8206] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 153.070851][ T8217] netlink: 'syz.0.557': attribute type 21 has an invalid length. [ 153.116732][ T8217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.557'. [ 153.659674][ T5168] Bluetooth: hci2: command 0x0419 tx timeout [ 153.895836][ T8241] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 154.542476][ T8270] netlink: 'syz.0.569': attribute type 11 has an invalid length. [ 154.602048][ T8270] netlink: 64 bytes leftover after parsing attributes in process `syz.0.569'. [ 154.814854][ T8050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.830092][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 154.852368][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.573'. [ 154.892331][ T8050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.920643][ T8276] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.973529][ T8050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.052535][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 155.124506][ T8291] netlink: 14 bytes leftover after parsing attributes in process `syz.0.575'. [ 155.167847][ T8050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.484512][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 155.650702][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.743917][ T5856] Bluetooth: hci2: command 0x0419 tx timeout [ 155.767218][ T8050] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.816656][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.823934][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.888338][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.895597][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.925957][ T1209] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1 [ 155.953836][ T1209] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 156.593772][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 156.627162][ T8351] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 156.700663][ T8351] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 156.969599][ T8050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.027291][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 157.191247][ T8050] veth0_vlan: entered promiscuous mode [ 157.203795][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.5.596'. [ 157.276518][ T8050] veth1_vlan: entered promiscuous mode [ 157.306100][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 157.395050][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 157.466224][ T8383] netlink: 192 bytes leftover after parsing attributes in process `syz.0.597'. [ 157.487298][ T8050] veth0_macvtap: entered promiscuous mode [ 157.494396][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 157.535320][ T8050] veth1_macvtap: entered promiscuous mode [ 157.595653][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.616864][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.644562][ T8050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.656448][ T8050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.730836][ T8050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.760198][ T8050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.815149][ T8391] IPVS: Unknown mcast interface: pim6reg1 [ 157.821783][ T8397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.600'. [ 158.189768][ T8410] netlink: 'syz.0.603': attribute type 3 has an invalid length. [ 158.232998][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.253648][ T8414] netlink: 'syz.3.605': attribute type 15 has an invalid length. [ 158.276575][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.357133][ T8420] IPVS: Error joining to the multicast group [ 158.450180][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.458094][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.584915][ T8465] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20002 [ 159.711003][ T8477] netlink: 'syz.1.619': attribute type 2 has an invalid length. [ 159.715130][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.956178][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.080899][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.174864][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.394552][ T13] bridge_slave_1: left allmulticast mode [ 160.401105][ T13] bridge_slave_1: left promiscuous mode [ 160.406914][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.428289][ T13] bridge_slave_0: left allmulticast mode [ 160.438105][ T13] bridge_slave_0: left promiscuous mode [ 160.446204][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.782599][ T8496] netlink: 'syz.3.622': attribute type 83 has an invalid length. [ 160.794187][ T8503] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3354 [ 161.421980][ T8524] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 161.570723][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.582841][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.596392][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.605355][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.613545][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.897110][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.917726][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.941786][ T13] bond0 (unregistering): Released all slaves [ 161.980199][ T8516] tipc: Enabling of bearer rejected, failed to enable media [ 162.417980][ T8529] syzkaller0 speed is unknown, defaulting to 1000 [ 162.431887][ T8543] dvmrp1: entered allmulticast mode [ 162.741878][ T8561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.279547][ T8586] __nla_validate_parse: 5 callbacks suppressed [ 163.279565][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 163.306405][ T13] hsr_slave_0: left promiscuous mode [ 163.332051][ T13] hsr_slave_1: left promiscuous mode [ 163.347467][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.356035][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.374241][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.389485][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.460291][ T13] veth1_macvtap: left promiscuous mode [ 163.482726][ T13] veth0_macvtap: left promiscuous mode [ 163.488500][ T13] veth1_vlan: left promiscuous mode [ 163.498172][ T13] veth0_vlan: left promiscuous mode [ 163.662640][ T5168] Bluetooth: hci2: command tx timeout [ 163.937325][ T13] team0 (unregistering): Port device team_slave_1 removed [ 163.977764][ T13] team0 (unregistering): Port device team_slave_0 removed [ 164.339240][ T8585] netlink: 'syz.5.640': attribute type 3 has an invalid length. [ 164.545684][ T8602] netlink: 'syz.3.644': attribute type 33 has an invalid length. [ 164.567562][ T8602] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.644'. [ 164.675217][ T8611] nbd: must specify at least one socket [ 164.915608][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 165.000335][ T8623] netlink: 'syz.5.651': attribute type 39 has an invalid length. [ 165.008140][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.651'. [ 165.033384][ T8624] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 165.059718][ T8624] netlink: 224 bytes leftover after parsing attributes in process `syz.1.650'. [ 165.192334][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.201135][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.555823][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.654'. [ 165.585710][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.604586][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.627748][ T8529] bridge_slave_0: entered allmulticast mode [ 165.644161][ T8529] bridge_slave_0: entered promiscuous mode [ 165.675456][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.704771][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.733341][ T8529] bridge_slave_1: entered allmulticast mode [ 165.741223][ T5168] Bluetooth: hci2: command tx timeout [ 165.761076][ T8529] bridge_slave_1: entered promiscuous mode [ 166.052174][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.131547][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.182982][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 166.298772][ T8529] team0: Port device team_slave_0 added [ 166.346383][ T8529] team0: Port device team_slave_1 added [ 166.446034][ T8689] netlink: 48 bytes leftover after parsing attributes in process `syz.1.665'. [ 166.470031][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.664'. [ 166.502738][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.529266][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.571278][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.610620][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.618003][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.650916][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.797035][ T8706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 166.851620][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 166.957922][ T8710] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 167.081734][ T8529] hsr_slave_0: entered promiscuous mode [ 167.108801][ T8529] hsr_slave_1: entered promiscuous mode [ 167.125821][ T8529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.148301][ T8529] Cannot create hsr debugfs directory [ 167.544446][ T8731] x_tables: duplicate underflow at hook 2 [ 167.835993][ T5168] Bluetooth: hci2: command tx timeout [ 168.243601][ T8754] netlink: 'syz.5.681': attribute type 1 has an invalid length. [ 168.391660][ T9] IPVS: starting estimator thread 0... [ 168.407640][ T8759] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.462041][ T8754] __nla_validate_parse: 2 callbacks suppressed [ 168.462060][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.681'. [ 168.541465][ T8761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.550592][ T8761] bond1: (slave bond2): making interface the new active one [ 168.558902][ T8761] bond1: (slave bond2): Enslaving as an active interface with an up link [ 168.599457][ T8763] IPVS: using max 32 ests per chain, 76800 per kthread [ 168.768064][ T8757] syzkaller0 speed is unknown, defaulting to 1000 [ 168.776912][ T8754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.081866][ T8529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.160937][ T8529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.226456][ T8786] x_tables: duplicate underflow at hook 1 [ 169.409321][ T8529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.438773][ T8529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.473809][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 169.750154][ T8812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'. [ 169.780475][ T8798] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 169.807950][ T8801] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 169.884422][ T8810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.688'. [ 169.900375][ T5168] Bluetooth: hci2: command tx timeout [ 169.929052][ T8810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'. [ 169.970415][ T8810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.688'. [ 170.023018][ T8810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.688'. [ 170.095050][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.167683][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.275060][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 170.285531][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.292760][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.392777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.399992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.436086][ T8529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.510461][ T8529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.566012][ T8831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.784148][ T8839] netlink: 'syz.1.697': attribute type 1 has an invalid length. [ 170.792450][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 170.810932][ T8839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.878256][ T8844] netlink: 14 bytes leftover after parsing attributes in process `syz.5.699'. [ 171.020146][ T8845] hsr_slave_0: left promiscuous mode [ 171.037846][ T8845] hsr_slave_1: left promiscuous mode [ 171.479842][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.603298][ T8529] veth0_vlan: entered promiscuous mode [ 171.653445][ T8529] veth1_vlan: entered promiscuous mode [ 171.803692][ T8529] veth0_macvtap: entered promiscuous mode [ 171.835724][ T8529] veth1_macvtap: entered promiscuous mode [ 171.863763][ T8866] syzkaller1: entered promiscuous mode [ 171.889623][ T8866] syzkaller1: entered allmulticast mode [ 171.920420][ T8867] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 171.937268][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.088873][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.160016][ T8529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.186644][ T8529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.236992][ T8529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.264831][ T8529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.555003][ T8881] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 172.738518][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.755195][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.937710][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.963640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.252348][ T8907] : entered promiscuous mode [ 173.580644][ T8916] C: renamed from team_slave_0 [ 173.604762][ T8916] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 173.634717][ T8916] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 173.710450][ T8925] __nla_validate_parse: 4 callbacks suppressed [ 173.710468][ T8925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.720'. [ 173.809150][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 174.170487][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.527481][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.624799][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.702549][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.874200][ T8715] Set syz1 is full, maxelem 65536 reached [ 174.890035][ T12] bridge_slave_1: left allmulticast mode [ 174.908455][ T12] bridge_slave_1: left promiscuous mode [ 174.936822][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.016102][ T12] bridge_slave_0: left allmulticast mode [ 175.032466][ T12] bridge_slave_0: left promiscuous mode [ 175.048410][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.400114][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.427235][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.438565][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.460205][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.483991][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.537156][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.553223][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.564569][ T12] bond0 (unregistering): Released all slaves [ 175.739960][ T8970] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20004 [ 175.757315][ T8971] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20004 [ 175.769526][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 175.781714][ T8970] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 175.845970][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 175.894360][ T8971] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 176.062927][ T8981] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.731'. [ 176.087638][ T8978] netlink: 'syz.3.731': attribute type 3 has an invalid length. [ 176.164124][ T8965] syzkaller0 speed is unknown, defaulting to 1000 [ 176.176743][ T8979] netlink: 128 bytes leftover after parsing attributes in process `syz.5.733'. [ 176.200049][ T8979] netlink: 20 bytes leftover after parsing attributes in process `syz.5.733'. [ 176.396239][ T8996] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 176.432547][ T8996] xt_hashlimit: size too large, truncated to 1048576 [ 176.507995][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.738'. [ 176.678776][ T12] hsr_slave_0: left promiscuous mode [ 176.727492][ T12] hsr_slave_1: left promiscuous mode [ 176.784550][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.818628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.872048][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.899199][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.027199][ T12] veth1_macvtap: left promiscuous mode [ 177.049844][ T12] veth0_macvtap: left promiscuous mode [ 177.081680][ T12] veth1_vlan: left promiscuous mode [ 177.088127][ T12] veth0_vlan: left promiscuous mode [ 177.097222][ T30] audit: type=1107 audit(1752349088.877:2): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 177.377360][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.745'. [ 177.474579][ T9034] netlink: 104 bytes leftover after parsing attributes in process `syz.1.747'. [ 177.581742][ T5856] Bluetooth: hci2: command tx timeout [ 177.672464][ T9046] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 178.243995][ T12] team0 (unregistering): Port device team_slave_1 removed [ 178.276266][ T12] team0 (unregistering): Port device team_slave_0 removed [ 179.060862][ T8965] chnl_net:caif_netlink_parms(): no params data found [ 179.418333][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d9edc00: rx timeout, send abort [ 179.427096][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805d9edc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 179.507733][ T9101] x_tables: duplicate underflow at hook 3 [ 179.656656][ T8965] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.658142][ T9110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.760'. [ 179.684927][ T5856] Bluetooth: hci2: command tx timeout [ 179.687639][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.714112][ T6007] IPVS: starting estimator thread 0... [ 179.726322][ T8965] bridge_slave_0: entered allmulticast mode [ 179.764432][ T8965] bridge_slave_0: entered promiscuous mode [ 179.814128][ T8965] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.829308][ T9112] IPVS: using max 26 ests per chain, 62400 per kthread [ 179.864631][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.890799][ T8965] bridge_slave_1: entered allmulticast mode [ 179.909785][ T8965] bridge_slave_1: entered promiscuous mode [ 180.023391][ T9106] syzkaller0 speed is unknown, defaulting to 1000 [ 180.124068][ T8965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.185780][ T8965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.352344][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 180.386477][ T8965] team0: Port device team_slave_0 added [ 180.410162][ T9141] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 180.443686][ T8965] team0: Port device team_slave_1 added [ 180.538092][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.767'. [ 180.556763][ T9144] netlink: 'syz.1.767': attribute type 33 has an invalid length. [ 180.569483][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.576565][ T9144] netlink: 152 bytes leftover after parsing attributes in process `syz.1.767'. [ 180.576616][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.614112][ T8965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.642824][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.661500][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.698707][ T8965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.772713][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 181.075336][ T8965] hsr_slave_0: entered promiscuous mode [ 181.076388][ T9160] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 181.105603][ T8965] hsr_slave_1: entered promiscuous mode [ 181.127478][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 181.135286][ T8965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.159792][ T8965] Cannot create hsr debugfs directory [ 181.169393][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.769'. [ 181.739580][ T5856] Bluetooth: hci2: command tx timeout [ 181.805953][ T9183] syzkaller0 speed is unknown, defaulting to 1000 [ 181.861980][ T9193] xt_hashlimit: overflow, rate too high: 0 [ 181.885749][ T9194] netlink: 308 bytes leftover after parsing attributes in process `syz.1.777'. [ 182.038300][ T9196] No such timeout policy "syz0" [ 182.083394][ T9193] bond3: entered promiscuous mode [ 182.088611][ T9193] bond3: entered allmulticast mode [ 182.094509][ T9193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.618494][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 182.862802][ T9237] netlink: 'syz.5.785': attribute type 4 has an invalid length. [ 183.077785][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.786'. [ 183.336005][ T9223] netlink: 'syz.3.783': attribute type 11 has an invalid length. [ 183.371222][ T8965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.480098][ T8965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.545457][ T8965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.605786][ T8965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.658422][ T9262] gretap0: entered promiscuous mode [ 183.819817][ T5856] Bluetooth: hci2: command tx timeout [ 184.002779][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.038177][ T8965] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.080807][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.088086][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.177492][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.185081][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.262005][ T9295] syz.0.795 uses old SIOCAX25GETINFO [ 184.731169][ T9318] __nla_validate_parse: 2 callbacks suppressed [ 184.731186][ T9318] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.801'. [ 184.795350][ T9320] netlink: 'syz.5.800': attribute type 4 has an invalid length. [ 184.844088][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 185.033427][ T9334] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 185.183904][ T8965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.254435][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'. [ 185.420355][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 185.584828][ T8965] veth0_vlan: entered promiscuous mode [ 185.600551][ T9354] nbd: must specify at least one socket [ 185.700663][ T8965] veth1_vlan: entered promiscuous mode [ 185.799742][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 185.859962][ T9365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.893301][ T9362] netlink: 60 bytes leftover after parsing attributes in process `syz.0.809'. [ 186.044257][ T8965] veth0_macvtap: entered promiscuous mode [ 186.108507][ T8965] veth1_macvtap: entered promiscuous mode [ 186.151324][ T8965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.166264][ T8965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.183805][ T9378] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 186.276481][ T8965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.315482][ T8965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.338937][ T8965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.368117][ T8965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.535884][ T9391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.816'. [ 186.761824][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.799594][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.901139][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.941342][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.022295][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 187.059955][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 187.305597][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 187.394479][ T9423] netlink: 'syz.5.826': attribute type 2 has an invalid length. [ 187.650833][ T5856] block nbd0: Receive control failed (result -32) [ 187.688226][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.851824][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.198371][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.347097][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.539929][ T12] bridge_slave_1: left allmulticast mode [ 188.545634][ T12] bridge_slave_1: left promiscuous mode [ 188.558156][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.568661][ T12] bridge_slave_0: left allmulticast mode [ 188.574744][ T12] bridge_slave_0: left promiscuous mode [ 188.582232][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.464632][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.478617][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.487237][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.501218][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.508916][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.575469][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.587972][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.603720][ T12] bond0 (unregistering): Released all slaves [ 189.637790][ T9467] veth3: entered allmulticast mode [ 189.726984][ T9488] syzkaller0 speed is unknown, defaulting to 1000 [ 189.765209][ T9501] __nla_validate_parse: 4 callbacks suppressed [ 189.765225][ T9501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.836'. [ 190.047388][ T9493] syzkaller0 speed is unknown, defaulting to 1000 [ 190.405899][ T9532] ipt_ECN: cannot use operation on non-tcp rule [ 190.548205][ T12] hsr_slave_0: left promiscuous mode [ 190.564720][ T12] hsr_slave_1: left promiscuous mode [ 190.570950][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.578448][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.587670][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.595431][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.622216][ T12] veth1_macvtap: left promiscuous mode [ 190.634467][ T12] veth0_macvtap: left promiscuous mode [ 190.641149][ T12] veth1_vlan: left promiscuous mode [ 190.646462][ T12] veth0_vlan: left promiscuous mode [ 191.083244][ T12] team0 (unregistering): Port device team_slave_1 removed [ 191.119595][ T12] team0 (unregistering): Port device team_slave_0 removed [ 191.579996][ T5856] Bluetooth: hci2: command tx timeout [ 191.836985][ T9555] ipvlan1: entered promiscuous mode [ 192.024360][ T9493] chnl_net:caif_netlink_parms(): no params data found [ 192.031972][ T9563] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 192.129850][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 192.139989][ T9574] netlink: 'syz.0.850': attribute type 2 has an invalid length. [ 192.145993][ T9563] bridge0: entered promiscuous mode [ 192.186989][ T9563] macsec1: entered promiscuous mode [ 192.790370][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 193.035242][ T9601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.857'. [ 193.066611][ T9599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.113227][ T9493] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.135525][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.154755][ T9493] bridge_slave_0: entered allmulticast mode [ 193.166889][ T9603] netlink: 32 bytes leftover after parsing attributes in process `syz.5.856'. [ 193.195190][ T9493] bridge_slave_0: entered promiscuous mode [ 193.235432][ T9493] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.265814][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.304708][ T9493] bridge_slave_1: entered allmulticast mode [ 193.349695][ T9493] bridge_slave_1: entered promiscuous mode [ 193.491586][ T9624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.575210][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 193.620321][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 193.659375][ T5856] Bluetooth: hci2: command tx timeout [ 193.666724][ T9634] netlink: 'syz.0.860': attribute type 32 has an invalid length. [ 193.679990][ T9635] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 193.699594][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 193.786306][ T9634] (unnamed net_device) (uninitialized): option coupled_control: invalid value (115) [ 193.820694][ T9493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.862940][ T9493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.063928][ T9493] team0: Port device team_slave_0 added [ 194.086084][ T9493] team0: Port device team_slave_1 added [ 194.147286][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315355][ T9658] netlink: 36 bytes leftover after parsing attributes in process `syz.5.867'. [ 194.344363][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.354815][ T9657] netlink: 108 bytes leftover after parsing attributes in process `syz.1.868'. [ 194.385704][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.450650][ T9493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.484037][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.499928][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.534220][ T9493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.595770][ T9493] hsr_slave_0: entered promiscuous mode [ 195.650732][ T9493] hsr_slave_1: entered promiscuous mode [ 195.657355][ T9493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.715505][ T9493] Cannot create hsr debugfs directory [ 195.741142][ T5856] Bluetooth: hci2: command tx timeout [ 196.077265][ T9723] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 196.124739][ T9723] netlink: 'syz.3.885': attribute type 2 has an invalid length. [ 196.211189][ T9715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.465526][ T9715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.624007][ T9743] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.762562][ T9715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.983523][ T9715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.026625][ T9757] __nla_validate_parse: 2 callbacks suppressed [ 197.026643][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.894'. [ 197.042340][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.894'. [ 197.616697][ T9715] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.632508][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 197.698134][ T9715] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.819477][ T5856] Bluetooth: hci2: command tx timeout [ 197.852046][ T9715] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.877256][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.903'. [ 197.947829][ T9715] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.168182][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 198.212429][ T9799] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 198.234566][ T9799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.256144][ T9493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.266394][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 198.293049][ T9493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.395438][ T9493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.428098][ T9493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.562531][ T9493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.588668][ T9493] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.613422][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.620588][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.645582][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.652797][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.971740][ T9493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.055388][ T9493] veth0_vlan: entered promiscuous mode [ 199.075165][ T9493] veth1_vlan: entered promiscuous mode [ 199.135908][ T9493] veth0_macvtap: entered promiscuous mode [ 199.147427][ T9493] veth1_macvtap: entered promiscuous mode [ 199.184171][ T9493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.209551][ T9493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.233468][ T9493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.247277][ T9493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.258602][ T9493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.277922][ T9493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.439773][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.447657][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.550656][ T9848] netlink: 'syz.5.910': attribute type 4 has an invalid length. [ 199.618884][ T9848] netlink: 'syz.5.910': attribute type 4 has an invalid length. [ 199.628619][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.678271][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.726649][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.910'. [ 199.776994][ T9855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.912'. [ 199.808325][ T64] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.830113][ T6007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.838150][ T64] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.004926][ T9863] netlink: 'syz.5.914': attribute type 16 has an invalid length. [ 200.013630][ T9863] netlink: 'syz.5.914': attribute type 17 has an invalid length. [ 200.085509][ T9870] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 200.136540][ T9870] netlink: 'syz.5.914': attribute type 11 has an invalid length. [ 200.164765][ T9870] netlink: 224 bytes leftover after parsing attributes in process `syz.5.914'. [ 200.176159][ T6007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.540187][ T6007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.646170][ T9896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.186265][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.166737][ T9927] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 202.172965][ T9924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.220726][ T9925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.927'. [ 202.321508][ T9934] openvswitch: netlink: Actions may not be safe on all matching packets [ 202.433855][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.571294][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.723549][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.784302][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 202.837768][ T9958] geneve2: entered promiscuous mode [ 202.847336][ T9958] geneve2: entered allmulticast mode [ 202.866902][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.878552][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.899824][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.908265][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.921687][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.974241][ T9961] syzkaller0 speed is unknown, defaulting to 1000 [ 202.984114][ T9922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.168523][ T49] bridge_slave_1: left allmulticast mode [ 203.177243][ T49] bridge_slave_1: left promiscuous mode [ 203.185496][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.207245][ T49] bridge_slave_0: left allmulticast mode [ 203.223537][ T49] bridge_slave_0: left promiscuous mode [ 203.233856][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.259335][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.659255][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.668825][ T9991] netlink: 88 bytes leftover after parsing attributes in process `syz.0.945'. [ 203.714019][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.728903][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.741382][ T49] bond0 (unregistering): Released all slaves [ 203.969550][T10001] netlink: 'syz.0.946': attribute type 2 has an invalid length. [ 204.039750][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 204.140029][T10007] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 204.154923][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'. [ 204.195188][T10012] netlink: 80 bytes leftover after parsing attributes in process `syz.0.950'. [ 204.308071][ T9961] chnl_net:caif_netlink_parms(): no params data found [ 204.457276][ T49] hsr_slave_0: left promiscuous mode [ 204.481494][ T49] hsr_slave_1: left promiscuous mode [ 204.497935][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.510999][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.530718][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.538183][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.577606][ T49] veth1_macvtap: left promiscuous mode [ 204.583800][ T49] veth0_macvtap: left promiscuous mode [ 204.589927][ T49] veth1_vlan: left promiscuous mode [ 204.595241][ T49] veth0_vlan: left promiscuous mode [ 205.005280][ T49] team0 (unregistering): Port device team_slave_1 removed [ 205.029589][ T5168] Bluetooth: hci2: command tx timeout [ 205.047531][ T49] team0 (unregistering): Port device team_slave_0 removed [ 205.429805][T10031] dvmrp1: left allmulticast mode [ 205.603638][T10036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.957'. [ 205.615459][T10037] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 205.642026][T10039] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDz [ 205.681681][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.694381][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 205.709652][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.714303][T10049] netlink: 48 bytes leftover after parsing attributes in process `syz.5.959'. [ 205.716936][ T9961] bridge_slave_0: entered allmulticast mode [ 205.763824][ T9961] bridge_slave_0: entered promiscuous mode [ 205.790736][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.797948][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.832682][ T9961] bridge_slave_1: entered allmulticast mode [ 205.872777][ T9961] bridge_slave_1: entered promiscuous mode [ 205.920953][T10056] netlink: 64 bytes leftover after parsing attributes in process `syz.3.958'. [ 206.071707][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.103375][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.228020][T10069] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 206.240637][ T9961] team0: Port device team_slave_0 added [ 206.265805][ T9961] team0: Port device team_slave_1 added [ 206.379594][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.386582][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.418240][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.440166][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.447176][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.474756][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.584241][T10083] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 206.610191][ T9961] hsr_slave_0: entered promiscuous mode [ 206.618029][ T9961] hsr_slave_1: entered promiscuous mode [ 206.625373][ T9961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.637773][ T9961] Cannot create hsr debugfs directory [ 207.101558][ T5168] Bluetooth: hci2: command tx timeout [ 207.193670][T10113] gtp0: entered promiscuous mode [ 207.427083][T10117] __nla_validate_parse: 4 callbacks suppressed [ 207.427102][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 207.448183][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.980'. [ 207.726736][ T9961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.775880][ T9961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.800690][T10144] netlink: 88 bytes leftover after parsing attributes in process `syz.0.986'. [ 207.812035][ T9961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.829795][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.984'. [ 207.855466][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 207.865898][T10139] batadv_slave_0: entered allmulticast mode [ 207.872568][ T9961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.945234][T10147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.952557][T10147] IPv6: NLM_F_CREATE should be set when creating new route [ 208.035784][T10147] syz.0.987 (10147) used obsolete PPPIOCDETACH ioctl [ 208.054469][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 208.087464][T10159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'. [ 208.103210][T10161] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 208.166789][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.253696][ T9961] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.267827][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.275082][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.335630][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.342796][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.541586][ T9961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.594573][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'. [ 208.744957][T10196] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 208.873297][T10205] netlink: 'syz.3.1003': attribute type 30 has an invalid length. [ 208.883309][T10203] netlink: 'syz.5.1002': attribute type 29 has an invalid length. [ 208.933395][T10203] netlink: 'syz.5.1002': attribute type 29 has an invalid length. [ 208.953543][T10209] netlink: 'syz.1.1005': attribute type 7 has an invalid length. [ 208.968424][T10203] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1002'. [ 208.986062][T10209] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 209.087912][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 209.151108][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.179823][ T5168] Bluetooth: hci2: command tx timeout [ 209.198473][T10221] bridge_slave_0: invalid flags given to default FDB implementation [ 209.295970][ T9961] veth0_vlan: entered promiscuous mode [ 209.320160][ T9961] veth1_vlan: entered promiscuous mode [ 209.382581][ T9961] veth0_macvtap: entered promiscuous mode [ 209.403358][ T9961] veth1_macvtap: entered promiscuous mode [ 209.465866][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.521262][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.547019][ T9961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.578639][ T9961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.594693][ T9961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.629289][ T9961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.854891][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.885278][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.975909][T10240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.001130][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.049158][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.494068][T10269] lo: entered allmulticast mode [ 210.596968][T10272] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 210.678552][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.695130][T10281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.724252][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.748979][T10281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.047815][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.357249][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.419391][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.579312][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.582029][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 211.632562][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.706020][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.834496][ T64] bridge_slave_1: left allmulticast mode [ 211.840456][ T64] bridge_slave_1: left promiscuous mode [ 211.846178][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.855274][ T64] bridge_slave_0: left allmulticast mode [ 211.861282][ T64] bridge_slave_0: left promiscuous mode [ 211.866991][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.233888][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.261241][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.277001][ T64] bond0 (unregistering): Released all slaves [ 212.509614][T10313] __nla_validate_parse: 4 callbacks suppressed [ 212.509633][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 212.575568][T10315] netlink: 'syz.0.1036': attribute type 12 has an invalid length. [ 212.587214][T10313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1035'. [ 212.668451][T10320] netlink: 'syz.0.1036': attribute type 74 has an invalid length. [ 212.756561][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.768747][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.788719][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.810650][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.822626][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.859793][ T64] hsr_slave_0: left promiscuous mode [ 212.879248][ T64] hsr_slave_1: left promiscuous mode [ 212.885223][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.899246][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.907869][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.922926][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.959902][ T64] veth1_macvtap: left promiscuous mode [ 212.965577][ T64] veth0_macvtap: left promiscuous mode [ 212.972222][ T64] veth1_vlan: left promiscuous mode [ 212.978955][ T64] veth0_vlan: left promiscuous mode [ 213.145571][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 213.160984][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1045'. [ 213.310821][T10352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'. [ 213.446477][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 213.831415][ T64] team0 (unregistering): Port device team_slave_1 removed [ 213.881104][ T64] team0 (unregistering): Port device team_slave_0 removed [ 214.347015][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.358025][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.388186][T10327] syzkaller0 speed is unknown, defaulting to 1000 [ 214.551484][T10383] geneve0: left allmulticast mode [ 214.576219][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 214.595359][T10386] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 214.605439][T10386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.633303][T10383] team0: Port device geneve0 removed [ 214.859281][ T5168] Bluetooth: hci2: command tx timeout [ 214.935203][T10397] --map-set only usable from mangle table [ 215.004238][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'. [ 215.004643][T10327] chnl_net:caif_netlink_parms(): no params data found [ 215.074036][T10408] netlink: 'syz.1.1064': attribute type 10 has an invalid length. [ 215.145044][T10417] Bluetooth: MGMT ver 1.23 [ 215.389898][T10417] team0 (unregistering): Port device team_slave_0 removed [ 215.404979][T10417] team0 (unregistering): Port device team_slave_1 removed [ 215.575475][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 215.642082][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 215.690158][T10446] netlink: 'syz.1.1071': attribute type 21 has an invalid length. [ 215.748246][T10446] netlink: 'syz.1.1071': attribute type 4 has an invalid length. [ 215.759288][T10446] netlink: 'syz.1.1071': attribute type 5 has an invalid length. [ 215.797531][T10447] netlink: 'syz.1.1071': attribute type 21 has an invalid length. [ 215.890694][T10327] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.913572][T10327] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.963644][T10327] bridge_slave_0: entered allmulticast mode [ 215.986856][T10327] bridge_slave_0: entered promiscuous mode [ 216.004926][T10447] netlink: 'syz.1.1071': attribute type 4 has an invalid length. [ 216.042565][T10447] netlink: 'syz.1.1071': attribute type 5 has an invalid length. [ 216.066783][T10327] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.090148][T10327] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.108094][T10327] bridge_slave_1: entered allmulticast mode [ 216.122793][T10327] bridge_slave_1: entered promiscuous mode [ 216.282148][T10327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.331388][T10327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.446673][T10327] team0: Port device team_slave_0 added [ 216.476515][T10327] team0: Port device team_slave_1 added [ 216.571593][T10327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.579041][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.608442][T10327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.649923][T10327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.656942][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.727914][T10327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.939990][ T5168] Bluetooth: hci2: command tx timeout [ 216.978367][T10327] hsr_slave_0: entered promiscuous mode [ 216.985870][T10327] hsr_slave_1: entered promiscuous mode [ 216.992299][T10327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.003693][T10327] Cannot create hsr debugfs directory [ 217.412528][T10533] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 217.637847][T10540] xt_socket: unknown flags 0x50 [ 217.941881][T10552] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 217.988341][T10552] __nla_validate_parse: 4 callbacks suppressed [ 217.988360][T10552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1102'. [ 218.014384][T10327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.044680][T10552] ifb0: entered promiscuous mode [ 218.059252][T10552] ifb0: entered allmulticast mode [ 218.083121][T10555] syzkaller0 speed is unknown, defaulting to 1000 [ 218.093134][T10327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.159461][T10327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.210486][T10327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.333455][T10574] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1105'. [ 218.448412][T10327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.680825][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1106'. [ 218.782967][T10327] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.784861][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 218.822103][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.829451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.851457][T10598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1107'. [ 218.903864][T10591] netlink: 'syz.3.1107': attribute type 5 has an invalid length. [ 218.906043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.918828][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.943472][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1107'. [ 219.005811][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1111'. [ 219.017353][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 219.029511][ T5168] Bluetooth: hci2: command tx timeout [ 219.035376][T10591] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 219.045595][T10591] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 219.057783][T10591] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 219.066987][T10591] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 219.076124][T10591] geneve2: entered promiscuous mode [ 219.084392][T10591] geneve2: entered allmulticast mode [ 219.211984][T10609] netlink: 'syz.3.1113': attribute type 3 has an invalid length. [ 219.249123][T10610] netlink: 'syz.3.1113': attribute type 3 has an invalid length. [ 219.516234][T10627] netlink: 'syz.3.1116': attribute type 4 has an invalid length. [ 219.535554][T10630] can: request_module (can-proto-0) failed. [ 219.751433][T10644] sctp: [Deprecated]: syz.0.1117 (pid 10644) Use of int in maxseg socket option. [ 219.751433][T10644] Use struct sctp_assoc_value instead [ 220.085653][T10327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.324182][T10327] veth0_vlan: entered promiscuous mode [ 220.333334][T10670] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1124'. [ 220.348380][T10327] veth1_vlan: entered promiscuous mode [ 220.378299][T10673] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 220.495739][T10327] veth0_macvtap: entered promiscuous mode [ 220.538759][T10327] veth1_macvtap: entered promiscuous mode [ 220.632088][T10327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.671492][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 220.672534][T10327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.743556][T10327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.769150][T10327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.792179][T10327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.816556][T10327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.100015][ T5168] Bluetooth: hci2: command tx timeout [ 221.111071][T10709] tipc: Enabled bearer , priority 10 [ 221.159442][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.190905][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.335477][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.345868][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.410354][T10732] tunl0: entered promiscuous mode [ 221.442615][T10732] netlink: 'syz.1.1139': attribute type 3 has an invalid length. [ 221.489950][T10734] ip6gretap0: entered promiscuous mode [ 221.504359][T10732] netlink: 'syz.1.1139': attribute type 5 has an invalid length. [ 221.768468][T10744] netlink: 'syz.3.1142': attribute type 39 has an invalid length. [ 222.123113][ T1101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.281147][ T1101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.576329][ T1101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.755906][ T1101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.913662][ T1101] bridge_slave_1: left allmulticast mode [ 222.919499][ T1101] bridge_slave_1: left promiscuous mode [ 222.925277][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.944987][ T1101] bridge_slave_0: left allmulticast mode [ 222.954616][ T1101] bridge_slave_0: left promiscuous mode [ 222.967079][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.589659][T10809] netlink: 'syz.0.1152': attribute type 39 has an invalid length. [ 223.748471][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.784612][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.808855][ T1101] bond0 (unregistering): Released all slaves [ 223.861544][T10793] __nla_validate_parse: 8 callbacks suppressed [ 223.861562][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1150'. [ 224.130202][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.149265][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.157131][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.166702][T10830] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1154'. [ 224.180194][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.192828][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.301882][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 224.364394][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1154'. [ 224.413230][T10836] netlink: 199148 bytes leftover after parsing attributes in process `syz.5.1156'. [ 224.473209][T10827] syzkaller0 speed is unknown, defaulting to 1000 [ 224.718677][T10854] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 224.824530][ T1101] hsr_slave_0: left promiscuous mode [ 224.865068][ T1101] hsr_slave_1: left promiscuous mode [ 224.903076][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.921267][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.937227][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.965202][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.058941][ T1101] veth1_macvtap: left promiscuous mode [ 225.083060][ T1101] veth0_macvtap: left promiscuous mode [ 225.101059][ T1101] veth1_vlan: left promiscuous mode [ 225.128017][ T1101] veth0_vlan: left promiscuous mode [ 225.198465][T10878] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1165'. [ 225.228388][T10878] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1165'. [ 225.244306][T10878] netlink: 'syz.5.1165': attribute type 6 has an invalid length. [ 225.268243][T10878] netlink: 'syz.5.1165': attribute type 5 has an invalid length. [ 225.284445][T10878] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1165'. [ 225.797479][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 225.835292][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 226.219418][ T5168] Bluetooth: hci2: command tx timeout [ 226.344274][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'. [ 226.355765][T10893] tc_dump_action: action bad kind [ 226.431025][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 226.460242][T10902] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 226.517134][T10902] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 226.552528][T10902] netlink: 'syz.3.1169': attribute type 2 has an invalid length. [ 226.571331][T10827] chnl_net:caif_netlink_parms(): no params data found [ 226.657881][T10910] tipc: Started in network mode [ 226.663001][T10910] tipc: Node identity , cluster identity 4711 [ 226.670928][T10910] tipc: Failed to set node id, please configure manually [ 226.678257][T10910] tipc: Enabling of bearer rejected, failed to enable media [ 227.015807][T10827] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.048856][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.084257][T10827] bridge_slave_0: entered allmulticast mode [ 227.102298][T10827] bridge_slave_0: entered promiscuous mode [ 227.120467][T10827] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.127626][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.158641][T10827] bridge_slave_1: entered allmulticast mode [ 227.170745][T10827] bridge_slave_1: entered promiscuous mode [ 227.281703][T10952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.304553][T10827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.348693][T10827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.419445][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.477640][T10827] team0: Port device team_slave_0 added [ 227.496967][T10827] team0: Port device team_slave_1 added [ 227.605086][T10827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.623050][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.642492][T10969] openvswitch: netlink: EtherType 257 is less than min 600 [ 227.661150][T10827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.675678][T10827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.684595][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.713463][T10827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.731851][T10971] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 227.743003][T10971] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 227.753120][T10971] gretap1: entered promiscuous mode [ 227.758378][T10971] gretap1: entered allmulticast mode [ 227.836933][T10827] hsr_slave_0: entered promiscuous mode [ 227.844836][T10827] hsr_slave_1: entered promiscuous mode [ 227.851912][T10827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.859819][T10827] Cannot create hsr debugfs directory [ 228.062401][T10988] netlink: 'syz.0.1191': attribute type 58 has an invalid length. [ 228.309414][ T5168] Bluetooth: hci2: command tx timeout [ 228.508958][T10827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.522127][T10827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.534780][T10827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.547162][T10827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.648692][T10827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.680722][T10827] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.700594][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.707856][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.725467][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.732655][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.028702][T10827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.124764][T10827] veth0_vlan: entered promiscuous mode [ 229.150627][T10827] veth1_vlan: entered promiscuous mode [ 229.207163][T10827] veth0_macvtap: entered promiscuous mode [ 229.217020][T11036] openvswitch: netlink: IP tunnel TTL not specified. [ 229.235621][T10827] veth1_macvtap: entered promiscuous mode [ 229.289741][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.312493][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.382110][T10827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.395303][T10827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.405050][T10827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.414363][T10827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.483655][T11045] netlink: 'syz.3.1210': attribute type 11 has an invalid length. [ 229.493445][T11045] netlink: 'syz.3.1210': attribute type 11 has an invalid length. [ 229.502406][T11045] __nla_validate_parse: 13 callbacks suppressed [ 229.502422][T11045] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1210'. [ 229.602962][T11047] netlink: 'syz.3.1210': attribute type 11 has an invalid length. [ 229.618878][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.622766][T11047] netlink: 'syz.3.1210': attribute type 11 has an invalid length. [ 229.632289][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.642137][T11047] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1210'. [ 229.705067][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.720717][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.858303][T11000] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 229.870352][T11000] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 229.878789][T11000] CPU: 1 UID: 0 PID: 11000 Comm: kbnepd bnep0 Not tainted 6.16.0-rc5-syzkaller-00182-g7727ec1523d7 #0 PREEMPT(full) [ 229.891044][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.901106][T11000] RIP: 0010:klist_del+0x49/0x110 [ 229.906060][T11000] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 52 be f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b 52 be f6 4d 8b 7e 58 4c 89 f7 e8 1f 5b [ 229.925672][T11000] RSP: 0018:ffffc90003ecf708 EFLAGS: 00010202 [ 229.931755][T11000] RAX: 000000000000000b RBX: ffff88805b9de460 RCX: ffff888025f49e00 [ 229.939735][T11000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 229.947753][T11000] RBP: ffffc90003ecf830 R08: ffff8880487a5c33 R09: 1ffff110090f4b86 [ 229.955734][T11000] R10: dffffc0000000000 R11: ffffed10090f4b87 R12: dffffc0000000000 [ 229.963721][T11000] R13: 1ffff1100b73bc8c R14: 0000000000000000 R15: ffff888023da6768 [ 229.971712][T11000] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 229.980664][T11000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.987267][T11000] CR2: 00007fb4b797f2d8 CR3: 0000000033322000 CR4: 00000000003526f0 [ 229.995260][T11000] Call Trace: [ 229.998570][T11000] [ 230.001546][T11000] device_del+0x280/0x8e0 [ 230.005917][T11000] ? _raw_spin_unlock_irq+0x2e/0x50 [ 230.011137][T11000] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 230.017237][T11000] ? __pfx_device_del+0x10/0x10 [ 230.022107][T11000] ? netdev_unregister_kobject+0x344/0x450 [ 230.027941][T11000] unregister_netdevice_many_notify+0x1d52/0x2320 [ 230.034420][T11000] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 230.041208][T11000] ? rcu_is_watching+0x15/0xb0 [ 230.045987][T11000] ? trace_contention_end+0x39/0x120 [ 230.051287][T11000] ? __mutex_lock+0x330/0xe80 [ 230.055988][T11000] ? __lock_acquire+0xab9/0xd20 [ 230.060857][T11000] ? __lock_acquire+0xab9/0xd20 [ 230.065718][T11000] unregister_netdevice_queue+0x33c/0x380 [ 230.071451][T11000] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 230.077711][T11000] ? rtnl_net_dev_lock+0x36/0x2f0 [ 230.082751][T11000] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 230.087879][T11000] unregister_netdev+0x1f/0x60 [ 230.092674][T11000] bnep_session+0x294d/0x2b40 [ 230.097382][T11000] ? trace_sched_exit_tp+0x38/0x120 [ 230.102613][T11000] ? __lock_acquire+0xab9/0xd20 [ 230.107489][T11000] ? __pfx_bnep_session+0x10/0x10 [ 230.112551][T11000] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 230.118466][T11000] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.124828][T11000] ? __pfx_woken_wake_function+0x10/0x10 [ 230.130475][T11000] ? __kthread_parkme+0x7b/0x200 [ 230.135426][T11000] ? __kthread_parkme+0x1a1/0x200 [ 230.140472][T11000] kthread+0x70e/0x8a0 [ 230.144558][T11000] ? __pfx_bnep_session+0x10/0x10 [ 230.149598][T11000] ? __pfx_kthread+0x10/0x10 [ 230.154209][T11000] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.159598][T11000] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.164826][T11000] ? __pfx_kthread+0x10/0x10 [ 230.169435][T11000] ret_from_fork+0x3fc/0x770 [ 230.174051][T11000] ? __pfx_ret_from_fork+0x10/0x10 [ 230.179191][T11000] ? __switch_to_asm+0x39/0x70 [ 230.183986][T11000] ? __switch_to_asm+0x33/0x70 [ 230.188763][T11000] ? __pfx_kthread+0x10/0x10 [ 230.193366][T11000] ret_from_fork_asm+0x1a/0x30 [ 230.198157][T11000] [ 230.201211][T11000] Modules linked in: [ 230.207928][T11000] ---[ end trace 0000000000000000 ]--- [ 230.215876][T11000] RIP: 0010:klist_del+0x49/0x110 [ 230.230479][T11000] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 52 be f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b 52 be f6 4d 8b 7e 58 4c 89 f7 e8 1f 5b [ 230.251828][T11000] RSP: 0018:ffffc90003ecf708 EFLAGS: 00010202 [ 230.258021][T11000] RAX: 000000000000000b RBX: ffff88805b9de460 RCX: ffff888025f49e00 [ 230.267578][T11000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 230.275729][T11000] RBP: ffffc90003ecf830 R08: ffff8880487a5c33 R09: 1ffff110090f4b86 [ 230.283911][T11000] R10: dffffc0000000000 R11: ffffed10090f4b87 R12: dffffc0000000000 [ 230.292223][T11000] R13: 1ffff1100b73bc8c R14: 0000000000000000 R15: ffff888023da6768 [ 230.300377][T11000] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 230.309432][T11000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.316100][T11000] CR2: 00007fb4b784df01 CR3: 0000000024ebe000 CR4: 00000000003526f0 [ 230.324367][T11000] Kernel panic - not syncing: Fatal exception [ 230.334979][T11000] Kernel Offset: disabled [ 230.339315][T11000] Rebooting in 86400 seconds..