last executing test programs: 1m2.884880799s ago: executing program 0 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x8915, 0x0) r3 = socket(0x18, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040)=0xd, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m1.974219173s ago: executing program 0 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) 50.682861494s ago: executing program 0 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) 35.385514264s ago: executing program 0 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) 21.067441548s ago: executing program 0 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) 6.494126858s ago: executing program 0 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) 4.760424227s ago: executing program 2 (id=730): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3e, 0x107, 0x70bd28, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x806'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008891}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.860114002s ago: executing program 2 (id=734): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x2d2, 0x0}, 0x8) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000200000019190000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x100, 0xc6, &(0x7f0000000140)=""/198, 0x41100, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x10, 0x6, 0x400}, 0x10, r3, 0x0, 0x0, &(0x7f0000000440)=[r4], 0x0, 0x10, 0x800, @void, @value}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x20008040, &(0x7f0000000040)={0x11, 0x8100, r7, 0x1, 0x6, 0x6, @broadcast}, 0x14) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) (rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00010000160001000000000000000000fe880000000000000000000000000101fc0100000000000000000000000000010000000000000000000080000c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0002000032000000ffffffff00000000000000000000000000080000000000000000000000000000000000000800000000000000000000000800000000000000000000000000000000000000000000000f006ba0cd3be33b959affffffffffff03000000000000000a00000000000000000000000000000000000000210000000000000028bd7000000000000a000000000000000000000000000000feffffff08002400ff7f0000"], 0x100}}, 0x0) 3.348889487s ago: executing program 1 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x1aa8}, @val={0x2, 0x1, 0x6, 0xffff, 0x7fff, 0x406}, @arp=@generic={0x325, 0x6007, 0x6, 0x6, 0x9, @local, "9224220b5c2a", @empty, "7d852d7c6eaf4acf4b96abc58681"}}, 0x36) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad", 0x27}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000104010000b9d0e2c9804d64b26bfa00000000002cf523008c023f00000000cf7bc193ad3eed87e10b7bd468f3390670e7be3f9091956d8e4135a1791870e31dfa9d464fb2e0df7f555eed7d29d867389bc1a5d920ebc1464db0d77142b32ae044c18dc414d2fa2205da8848df2ef223310000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4004000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES32=r1, @ANYRES64=0x0], 0x5c}, 0x1, 0x6c, 0x0, 0x8800}, 0x240409c0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000000c0)) 3.162021237s ago: executing program 4 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2.965968722s ago: executing program 4 (id=742): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f0000000340)={[{0x2b, 'net_prio'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2b, 'perf_event'}, {0x2d, 'blkio'}, {0x2d, 'cpuacct'}, {0x2b, 'perf_event'}, {0x2d, 'net_prio'}]}, 0x4f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x18) (async) r2 = socket(0x40000000015, 0x5, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000000920207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bind$netlink(r5, &(0x7f0000000300)={0x10, 0x0, 0x1}, 0xc) (async) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) sendto$inet6(r5, &(0x7f0000001180)="b6", 0x1, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) 2.454365249s ago: executing program 3 (id=745): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000000c0)={0x7, 0x20, [0xffffffffffffffff, 0x2, 0x6, 0x8], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x800) 2.0551102s ago: executing program 4 (id=746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x3}, 0x14}}, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x3}, 0x14}}, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0) 1.416236817s ago: executing program 2 (id=747): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24048011) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a"], 0x23c}}, 0x4004000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.346129538s ago: executing program 1 (id=748): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000019000100feffffff000008001d01070008000900", @ANYRES32=0x0, @ANYBLOB="c8c5232d", @ANYRES32=0x0, @ANYBLOB="08000500fc0402cc"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x204001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 1.339686393s ago: executing program 4 (id=749): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0xffffffffffffff03) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f00000014c0)={0x1d, r2, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00009110aab009000000000000d400"/28], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da16520"], 0xb4}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x12}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c0004800500030002"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockname(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0xffffffffffffff03) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async) socket(0x1d, 0x2, 0x6) (async) bind$can_j1939(r3, &(0x7f00000014c0)={0x1d, r2, 0x0, {0x0, 0xf0}, 0x1}, 0x18) (async) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00009110aab009000000000000d400"/28], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x11) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da16520"], 0xb4}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r8, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x12}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x58}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c0004800500030002"], 0x50}}, 0x0) (async) 1.336691878s ago: executing program 3 (id=750): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@var={0xf, 0x0, 0x0, 0xe, 0x5, 0x2}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @func={0xd, 0x0, 0x0, 0xc, 0x5}, @const={0x4, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x9}]}, {0x0, [0x5f, 0x4f, 0x61, 0x0, 0x2e, 0x0, 0x0, 0x30]}}, &(0x7f0000000080)=""/138, 0x66, 0x8a, 0x1, 0x8, 0x10000, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.08410768s ago: executing program 1 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca508f7860dbfcab52a60ff", @ANYRES16=r1, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) connect$bt_sco(r4, &(0x7f0000000240)={0x1f, @none}, 0x8) openat$cgroup_ro(r3, &(0x7f0000000300)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x2, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca508f7860dbfcab52a60ff", @ANYRES16=r1, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) socket$inet6(0x10, 0x2, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) (async) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) connect$bt_sco(r4, &(0x7f0000000240)={0x1f, @none}, 0x8) (async) openat$cgroup_ro(r3, &(0x7f0000000300)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x2, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40800) (async) 1.057825975s ago: executing program 3 (id=752): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x80400) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x2, 0x1, {0xa, 0x4e24, 0x10, @remote, 0x1}}}, 0x32) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60) accept4$nfc_llcp(r3, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x800) r4 = socket$caif_stream(0x25, 0x1, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r5, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x100, 0x7, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$caif(r4, &(0x7f0000000400)=@util={0x25, "3f0633887815f8e4c9d62dd875f6d03a"}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv4_getnetconf={0x44, 0x52, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x401}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xfffffffb}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44081}, 0x4000000) close(r2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x140, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x63}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0x14, 0x2a, [@mesh_chsw={0x76, 0x6, {0x6, 0x5, 0x11, 0x7}}, @cf={0x4, 0x6, {0x5, 0x6, 0x4, 0x8000}}]}, @NL80211_ATTR_USE_RRM={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0a, 0xfac05]}, @NL80211_ATTR_PMK={0x43, 0xfe, "e6a154afba2d5bdc9c76b12c53bbd433659777fb5d10fa70273858c9e504871ebad307764d8454eba10b1d225edb0ceabe8e2e0720e8b1eacdd258bdbd988f"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0d, 0xfac06, 0xfac02]}, @NL80211_ATTR_SAE_PASSWORD={0x18, 0x115, "70850a5d3c004702cd2b62edefc12c187f8d82fd"}, @NL80211_ATTR_PMK={0x3f, 0xfe, "630b7acbceeed4d94e85853bd2f797c2c63e7bf9ecbff2a3aba32d053f8aa16f6bf5c6bbbb4413862f61e7a46493cea489090bd8a15bbc207af7a8"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_SAE_PASSWORD={0x14, 0x115, "5a42af77fa6492b6bb6dc47cceaed1ef"}], @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/39, 0x27}], 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0xb8, "ba4a3781e6b87c19d106bfa11c7812f015185b50434a933cf948e2562b247920c6609d6cbe07c8eb46f3f81e0d8dbe1c88dc62a4a55ef7e66324ad12088d471d5f823c61764372277286601bea239b621897df7e4b3948a83456249ee0c3a29fea8924d8dffa9929a0eb4abf13a01ffccd43f8944280fa91668bbe2c951651a8d5174472c9392a2736b8eae3c94111b4a40b32780ac6afea375f01fc4084e1ec08dc448927bb9b2853158387ba3e4775dcc11392ad1109e4"}, &(0x7f0000000b00)=0xc0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000b40)={r9, @in6={{0xa, 0x4e21, 0x541f33b2, @mcast2, 0x8}}, [0xf, 0x9, 0x7, 0xa, 0x7, 0x0, 0x3, 0x9, 0x7fffffffffffffff, 0x5571, 0xe13, 0x95b, 0x1, 0xfffffffffffffc01, 0x3]}, &(0x7f0000000c40)=0x100) r10 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000c80)=@name, &(0x7f0000000cc0)=0x10, 0x80800) sendmsg$tipc(r10, &(0x7f0000000e80)={&(0x7f0000000d00)=@name={0x1e, 0x2, 0x1, {{0x87, 0x3}, 0x2}}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000d40)="ca440f7334aba6ceca9738f864042581239dc9ad9c30c1eafdf765dcb600035850ae5f7d4950505aa354c8b7fbc9f472383e2c2e8b4e6acddd1e8f605c99039657b8bc753cd46c2d31789990225da7899527ca3e33e4f6e71bd72680e31ff623e80bdad0314ba30583ff7c0b11fe8883fcabb12e4375bd5d8a23a1bc26a214", 0x7f}, {&(0x7f0000000dc0)="07f0b3a257ebf5c7ede75a0b9ce0f732b2faaeb4952e6f15abac1be9a19461093d3be2fae80c9118e16d01f71e36845da5f47e47c34e89bd0052", 0x3a}], 0x2, &(0x7f0000000e40)="88f3522c9ab7817f4115d8b9617240abdbc6041767854624703c48364d713360273925b27620119c", 0x28, 0x1}, 0x20000040) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000ec0)={'veth1_to_team\x00'}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r11, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x40008000) socket$packet(0x11, 0x3, 0x300) 966.289118ms ago: executing program 2 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) 856.552611ms ago: executing program 3 (id=754): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140ffffff0e3d0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214"], 0xe0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r5, r3}, 0xc) 830.705387ms ago: executing program 4 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2f5fd997bb8e32fc2ec200"], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002980)={[{0x2b, 'cpuset'}]}, 0x8) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r3, 0x207, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}}, 0x400c080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="001a000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x170c}]}, 0x30}}, 0x0) 642.179753ms ago: executing program 2 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff56b}]}]}, 0x38}}, 0x8044) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff56b}]}]}, 0x38}}, 0x8044) 640.692917ms ago: executing program 1 (id=757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) r0 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000000)={0x3c, r1, 0x111, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0x40}, @broadcast, @device_b, @random="a298bb1b37e0", {0x5, 0x145}}, @vht_op_mode_ntf={0x15, 0x2, {0x3, 0x1}}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x840) 493.280915ms ago: executing program 1 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000000040)={0x12e4, 0x23, 0x11, 0x70bd27, 0x25dfdbff, {0x6}, [@generic="d5cfa0512fcb5b3a9c669f6fab7b346cd39b302d41a93e535e1634d39ef0ac03e0b1e488061569b163b4f8a8ddbc1587f3aa8c0209d0ae90ed24e830bf8b24199061905afd2ae8f73f52fcf5f73134f6a91724cd4cbc4f91d612d4a45d540a68d0e5ddf27e7a8c6c0d50b363627f1a7c70cd009d3ffe95b8da0d20a82fb6f4063efc6c3ee9b0ecd0e17477f6b405c4d4f3d6884ff2b8a41725f90a1656fe7e868ded42d3f7605b54479be1b21b3fe3337c891089aa9a6d5b09734a0e9f86ae3e55bfcd05e8ed3fae1fb179fceef8e54ef9e7860dea8625fdfb2674267792f76a803a1e4bac177f1bdaa9fcd7bf2b4fc6", @nested={0x1ce, 0xc1, 0x0, 0x1, [@generic="2140e4fa26a4b5860f58f2a01cec8fec38ca4184922229908846b76ea392343e2a2992481adacbdd701c1cf02398aeb1082bea40d5d9d46502cb6d9b90b763c9582c50f4ca80bb0d0ccea74f2d7d828e48f3e12c4b7122c82b50c612f9930b5be6ddad3fd0c696c376a9c973ecc2131f136bce37cddb969dc9b7e8b3782543ee0b80262d50c9dfc4556260009da7edf6d2444722ab4a17504f863c017c00bafe50d6cfbba0331771e00395177914a033f8558dd87457", @nested={0x4, 0x77}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x1a}, @generic="96fe601daea48b8a7189beb7c3bb2dbc810d3d460b51ec6d958be4e9da37b64adc3a55f87f5a6b529bfc32051838aa2e1ca6504f161521aaa35122ecc72e4d2308eca3aeef8ba9028eafcd09d2ae42f95b9019915ebe17cd0e30ab64501de94b22b240cf", @generic="3e5f72c28348d6a2cbff1a69e292c69de66611d7635139c9b0cd9da0ed2366ed2db1683f868f53b04870fd074002ca07e0a7bf6103cc174c801b56e1ac077b1b9cab210300039374d1ba52d2af72e65084e8cd66781aecd5a8b30648413847c68ffd71f8ec324680e7df6d7fd3c071daa7eb1e72f53e612572b567d6a445e6237c8f087bbd8b56e45a6af12703049a3219925a54a74388da348406efadce9bd0"]}, @nested={0x1008, 0x11c, 0x0, 0x1, [@nested={0x4, 0x9f}, @generic="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"]}, @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x1}]}, 0x12e4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000000040)={0x12e4, 0x23, 0x11, 0x70bd27, 0x25dfdbff, {0x6}, [@generic="d5cfa0512fcb5b3a9c669f6fab7b346cd39b302d41a93e535e1634d39ef0ac03e0b1e488061569b163b4f8a8ddbc1587f3aa8c0209d0ae90ed24e830bf8b24199061905afd2ae8f73f52fcf5f73134f6a91724cd4cbc4f91d612d4a45d540a68d0e5ddf27e7a8c6c0d50b363627f1a7c70cd009d3ffe95b8da0d20a82fb6f4063efc6c3ee9b0ecd0e17477f6b405c4d4f3d6884ff2b8a41725f90a1656fe7e868ded42d3f7605b54479be1b21b3fe3337c891089aa9a6d5b09734a0e9f86ae3e55bfcd05e8ed3fae1fb179fceef8e54ef9e7860dea8625fdfb2674267792f76a803a1e4bac177f1bdaa9fcd7bf2b4fc6", @nested={0x1ce, 0xc1, 0x0, 0x1, [@generic="2140e4fa26a4b5860f58f2a01cec8fec38ca4184922229908846b76ea392343e2a2992481adacbdd701c1cf02398aeb1082bea40d5d9d46502cb6d9b90b763c9582c50f4ca80bb0d0ccea74f2d7d828e48f3e12c4b7122c82b50c612f9930b5be6ddad3fd0c696c376a9c973ecc2131f136bce37cddb969dc9b7e8b3782543ee0b80262d50c9dfc4556260009da7edf6d2444722ab4a17504f863c017c00bafe50d6cfbba0331771e00395177914a033f8558dd87457", @nested={0x4, 0x77}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x1a}, @generic="96fe601daea48b8a7189beb7c3bb2dbc810d3d460b51ec6d958be4e9da37b64adc3a55f87f5a6b529bfc32051838aa2e1ca6504f161521aaa35122ecc72e4d2308eca3aeef8ba9028eafcd09d2ae42f95b9019915ebe17cd0e30ab64501de94b22b240cf", @generic="3e5f72c28348d6a2cbff1a69e292c69de66611d7635139c9b0cd9da0ed2366ed2db1683f868f53b04870fd074002ca07e0a7bf6103cc174c801b56e1ac077b1b9cab210300039374d1ba52d2af72e65084e8cd66781aecd5a8b30648413847c68ffd71f8ec324680e7df6d7fd3c071daa7eb1e72f53e612572b567d6a445e6237c8f087bbd8b56e45a6af12703049a3219925a54a74388da348406efadce9bd0"]}, @nested={0x1008, 0x11c, 0x0, 0x1, [@nested={0x4, 0x9f}, @generic="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"]}, @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x1}]}, 0x12e4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001400), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001540)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001680)={'syztnl2\x00', &(0x7f0000001580)={'tunl0\x00', r2, 0x1, 0x40, 0x31e, 0x10001, {{0x33, 0x4, 0x2, 0x0, 0xcc, 0x67, 0x0, 0xea, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x57, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x40}, {@rand_addr=0x64010101, 0x172}]}, @ssrr={0x89, 0x1f, 0xb6, [@loopback, @loopback, @empty, @broadcast, @broadcast, @multicast1, @rand_addr=0x64010102]}, @timestamp={0x44, 0x28, 0x6a, 0x0, 0x6, [0x80000000, 0x101, 0x3, 0x3, 0x51, 0x5, 0x3, 0x3, 0x2]}, @rr={0x7, 0x7, 0x97, [@remote]}, @noop, @timestamp_prespec={0x44, 0xc, 0x7b, 0x3, 0x1, [{@remote}]}, @timestamp_addr={0x44, 0xc, 0x7b, 0x1, 0x8, [{@multicast1, 0x6191a133}]}, @noop, @timestamp={0x44, 0x18, 0x10, 0x0, 0x1, [0x7, 0x5, 0x0, 0xb0d, 0xd0]}, @lsrr={0x83, 0x23, 0x6f, [@loopback, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @local, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) socketpair(0x25, 0x80000, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, 0x140d, 0x300, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, 0x140d, 0x300, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) writev(r4, &(0x7f0000001d00)=[{&(0x7f0000001900)="2151b90cd74707", 0x7}, {&(0x7f0000001940)="dd20e19994fffb4662387115819e60d509cad386d93567719f536b78fc11f2c3d1003f3b3bb4b80eacba0f680f45b5114e443dfe58ee6292062de3b6d1ef7d0d6c885ab0368af63d886cd84a3eeb50c70c60505076ae3c581f581fb2743062b9e1f79a8168589d597a4d4e93f58044eb90a9d78465432873aef2ddafcf54aaa1a6d021d5b4c4cfdd86bdff94750f5c5a7f1b275a82e67470a6ef14fcf07bc85571963ec54acebb2756e54fe5e1520b99acd0123d1e4af09bbf6364521489a0cb572e8fe346085e096879147820e1a523d94b04483a07b6ab3e844eef3747c10ff76ac3a0a144dfbe6a11f08c73", 0xed}, {&(0x7f0000001a40)="440b17e08b508fed827b85e5db333ef30be52577e310835da0855a6b2b7ef47ca24109134efef534a76cdb49a372c2203d67a6853ba04f586a946186857d19a20b32c7a168b3b4d1529b8e102a445243ab2a40c97ca011645ef46e066dd25666070e34fd211ca390224f6defb1b06f32a838ee44e3dead706cf08d087e289af6e4c1f32a08a945788fabbe90ffff907672ad7a0717c208b804b65e99065ef3dfc0596beb", 0xa4}, {&(0x7f0000001b00)="186766bea37beddcbe850a3e943b5198a6562bd5f24089d6c295e24b28eefa015890675ca1f6f244b0e4164b8c62589205a8edbc0aea903845d7b2065b105a7df28ad715a6a348ba27e4d16fa360511676a1b99f72a0e29106582313929726fe3c05d57fd3dc876e8ab30bd42c58f5ff10c1a9578353333cba8b81caffd0a8497b3f524f89f483cadffb8d9c70d4705a6dab906a9b04", 0x96}, {&(0x7f0000001bc0)="d85d9507058a70b111d8092c194bfe680bb60d59e4016aaa867c", 0x1a}, {&(0x7f0000001c00)="1b88ebaf37883dd19df1cb71363b75a658c03487e8a7c8fd1d6306c99465ee8e128678fc7bbfc8794b504cc4d868891a70ec6cf723fc2edfc0b7f1329e14cdd5b410dfbbafac", 0x46}, {&(0x7f0000001c80)="540fe6e76d2f89846b60671b0aa175106d1f843fb0fd8eccb4e81fd65ab54378aab7ff75de4a22a242b7b93064b3808c537ca6dffa51213bddd559bb9ab1d08acb41f8859c8b5e9432df16f887bb1fdf3804b0896b8bb500a239420c2bf189d5c2bd65b5b590ed6838029d97e95e61534d542255bb6125e820", 0x79}], 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8a0100}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x6c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x6c}}, 0x20000800) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8a0100}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x6c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x6c}}, 0x20000800) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f00)=@o_path={&(0x7f0000001ec0)='./file0\x00', 0x0, 0x0, r7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002040)={@map=0x1, 0x11, 0x0, 0x5, &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001f80)=[0x0], &(0x7f0000001fc0)=[0x0, 0x0, 0x0], &(0x7f0000002000)=[0x0], 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003240)={0x6, 0x16, &(0x7f00000020c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffe0000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002180)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000021c0)=""/4096, 0x41000, 0x3b, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000031c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000003200)={0x2, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003240)={0x6, 0x16, &(0x7f00000020c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffe0000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002180)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000021c0)=""/4096, 0x41000, 0x3b, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000031c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000003200)={0x2, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002080)={@fallback=r5, r8, 0x2d, 0x18, 0x0, @void, @value=r10, @void, @void, r9}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x30, 0x140c, 0x8, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x12000010) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x30, 0x140c, 0x8, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x12000010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004940)={&(0x7f0000003400)=@abs, 0x6e, &(0x7f0000004840)=[{&(0x7f0000003480)=""/149, 0x95}, {&(0x7f0000003540)=""/137, 0x89}, {&(0x7f0000003600)=""/245, 0xf5}, {&(0x7f0000003700)=""/111, 0x6f}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/140, 0x8c}], 0x6, &(0x7f00000048c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x1) socket(0x8, 0x800, 0x6) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000049c0), r11) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000004ac0)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x54, r14, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6}]}, 0x54}}, 0x4) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000004ac0)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x54, r14, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6}]}, 0x54}}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000004b00), 0x800, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000004b00), 0x800, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000004b80), r5) (async) r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004b80), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000004c40)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x3c, r15, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4010) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000004c80)={r13}) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004d00), r13) getsockname$packet(0xffffffffffffffff, &(0x7f0000004d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004d80)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r16, &(0x7f0000005000)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004dc0)={0x1e0, r17, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x48000}, 0x8d0) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000005140)={&(0x7f0000005040), 0xc, &(0x7f0000005100)={&(0x7f0000005080)={0x48, r14, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24000040) 481.090932ms ago: executing program 2 (id=759): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)='&', 0x1}, {0x0, 0x4000}], 0x2}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r2, 0x8005}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000004c0)='wlan0\x00', &(0x7f0000000500)=@default_ap_ssid, 0x6, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x140, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff86b}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa5a9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x11f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xd}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd760}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0x140}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x90d, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 357.873273ms ago: executing program 3 (id=760): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601b000000180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="640000ddffffff007c6d97bc"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x11d8, r3, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x5}}}}, [@NL80211_ATTR_FRAME={0x5e, 0x33, @ctrl_frame=@ba={{}, {0xf}, @device_b, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x5}, [{0x0, 0x7, {0x1, 0x4}, "45c656db4a3b38bb"}, {0x0, 0x3, {0x6, 0x6}, "52a3b22cea80b055"}, {0x0, 0x7, {0x9, 0x6}, "1ca2d2f9db731478"}, {0x0, 0x7, {0x9, 0x313}, "14279683e75c45c8"}, {0x0, 0x1, {0x5, 0x5d9}, "d9526cbc433be947"}], {0x0, 0x7, {0x0, 0x9}, "3d4c347b1355a908"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1144, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x2, 0x0, 0x1, 0x0, 0x1}, {0xff}, @device_b, @initial, @broadcast, {0x3, 0xa0}}, @a_msdu=[{@broadcast, @device_b, 0x4f, "2a2c9ec4f5905e267cd45b1a837f3d93489128d60df20fad104c25cbf578744e8acc9052b780776d7934e630b9ba96437c93d9c045ccf39487f8031d75da667cafbc37410e27c66ca6271ce745f83b"}, {@device_a, @broadcast}, {@broadcast, @device_b, 0x1000, "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"}, {@device_b, @device_b, 0x99, "a141cf1df7d7c0267fddf5951a724a3aee0eae4cafeb9522e7f6f1b95140b679ab20545d4988699871c8adc2bc4067731d4498c3dd86e34823c044160be36bf90344ea3d074e7f2bd29bd437b449af9a6aff255af96127f08d7ec1770d27a6d0b0b9bb541b533b7e8ab1f1ee9149e6cf40e82219459642a2adf5dbafe5a4e425682b6c50ccadedc9c332c5bd8fe22df2e9a260ce42b278c000"}]}}]}, 0x11d8}, 0x1, 0x0, 0x0, 0x4000010}, 0x663264d1d8dc19a7) 357.160661ms ago: executing program 4 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x2c, r1, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_buf(r7, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x34, r5, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r9, @ANYBLOB="0c74c448b8a8fb87dad8ccd198f4c9550d83fa0565391e7f22b4c2ff0f000000000000793fd1d855bef7e39bff310c7901a76f15c28ce7a50fcbaab20321f8e79d7bf0e841b0ac14e36b9af712d99167365c918b1177bef951936c4c4def8bd7e038c99ce3a2f8f5b406cf5888ee74b3422a494a9b86909e47a2acc28f54a9e5f18ddb5fdfa711bda8a509d63384fb", @ANYBLOB="0800260090150000080057"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x808) 82.07687ms ago: executing program 3 (id=762): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='T'], 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "ea37acdcf77adf0335d1515f12f817955e182130e73f9d36ddbb0f4fddc17c6d", "67e076ddf47a804dd6211939af9bf84023546c4c226f54d162bfb4fec53393c0", "632cdcdbc5b9536975e05e049cf70170896844876ce5a2fcecf4979d02364316", "763a138b4b11a764f01c3c5b1940afd1948eb10487e07b9699fff249cff1900b", "f9bfd8c959866f0ec5ac1de8269a784aea7525f99a955a2121877756b3743ae3", "d3e3097b6efbd5ea2a3f851e", 0x7fffffff, 0x1, 0x7ff, 0x1, 0x7f}}) syz_emit_ethernet(0x48, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast1}, "0a186371ae9b"}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept$inet6(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 0s ago: executing program 1 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/102, 0x66}], 0x4}, 0xc}], 0x1, 0x40000000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 77.604668][ T5817] cgroup: Unknown subsys name 'net' [ 77.781345][ T5817] cgroup: Unknown subsys name 'cpuset' [ 77.790010][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.281894][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.910950][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.927784][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.935504][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.945923][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.982826][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.990711][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.998863][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.006909][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.014405][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.023444][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.040160][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.068545][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.095509][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.106234][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.113030][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.121631][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.121738][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.130209][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.143251][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.144137][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.157940][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.172650][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.172682][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.180663][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.188015][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.786497][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 83.851701][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 83.973664][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 83.999689][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 84.016859][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 84.157971][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.165231][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.173722][ T5827] bridge_slave_0: entered allmulticast mode [ 84.181040][ T5827] bridge_slave_0: entered promiscuous mode [ 84.190406][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.197635][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.204768][ T5827] bridge_slave_1: entered allmulticast mode [ 84.211933][ T5827] bridge_slave_1: entered promiscuous mode [ 84.249200][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.256562][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.264858][ T5832] bridge_slave_0: entered allmulticast mode [ 84.272183][ T5832] bridge_slave_0: entered promiscuous mode [ 84.280318][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.287402][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.295285][ T5832] bridge_slave_1: entered allmulticast mode [ 84.302735][ T5832] bridge_slave_1: entered promiscuous mode [ 84.416226][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.429214][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.441302][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.463725][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.471242][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.478808][ T5831] bridge_slave_0: entered allmulticast mode [ 84.486163][ T5831] bridge_slave_0: entered promiscuous mode [ 84.522270][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.557793][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.564965][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.572313][ T5831] bridge_slave_1: entered allmulticast mode [ 84.579671][ T5831] bridge_slave_1: entered promiscuous mode [ 84.586516][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.594234][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.601594][ T5833] bridge_slave_0: entered allmulticast mode [ 84.609272][ T5833] bridge_slave_0: entered promiscuous mode [ 84.640565][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.647878][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.655122][ T5834] bridge_slave_0: entered allmulticast mode [ 84.662827][ T5834] bridge_slave_0: entered promiscuous mode [ 84.683083][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.690557][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.698281][ T5833] bridge_slave_1: entered allmulticast mode [ 84.705574][ T5833] bridge_slave_1: entered promiscuous mode [ 84.718070][ T5832] team0: Port device team_slave_0 added [ 84.726519][ T5827] team0: Port device team_slave_0 added [ 84.734550][ T5827] team0: Port device team_slave_1 added [ 84.741287][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.748606][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.755736][ T5834] bridge_slave_1: entered allmulticast mode [ 84.763751][ T5834] bridge_slave_1: entered promiscuous mode [ 84.785215][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.808835][ T5832] team0: Port device team_slave_1 added [ 84.867265][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.903845][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.917239][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.929981][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.936927][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.963779][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.022709][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.029997][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.056446][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.077931][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.089709][ T5831] team0: Port device team_slave_0 added [ 85.098235][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.100194][ T5841] Bluetooth: hci0: command tx timeout [ 85.122556][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.129646][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.155593][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.178256][ T5846] Bluetooth: hci2: command tx timeout [ 85.181789][ T5841] Bluetooth: hci4: command tx timeout [ 85.194428][ T5831] team0: Port device team_slave_1 added [ 85.225909][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.232979][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.259571][ T5841] Bluetooth: hci1: command tx timeout [ 85.262763][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.275697][ T5841] Bluetooth: hci3: command tx timeout [ 85.289591][ T5833] team0: Port device team_slave_0 added [ 85.311258][ T5834] team0: Port device team_slave_0 added [ 85.331856][ T5833] team0: Port device team_slave_1 added [ 85.351550][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.359038][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.385146][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.398157][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.405123][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.431315][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.444721][ T5834] team0: Port device team_slave_1 added [ 85.531766][ T5827] hsr_slave_0: entered promiscuous mode [ 85.538671][ T5827] hsr_slave_1: entered promiscuous mode [ 85.546023][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.553551][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.579903][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.593010][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.600087][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.626181][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.662313][ T5832] hsr_slave_0: entered promiscuous mode [ 85.668619][ T5832] hsr_slave_1: entered promiscuous mode [ 85.674702][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.682627][ T5832] Cannot create hsr debugfs directory [ 85.703466][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.710524][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.736547][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.788004][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.795077][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.821418][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.863690][ T5831] hsr_slave_0: entered promiscuous mode [ 85.870231][ T5831] hsr_slave_1: entered promiscuous mode [ 85.876282][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.883944][ T5831] Cannot create hsr debugfs directory [ 85.958490][ T5833] hsr_slave_0: entered promiscuous mode [ 85.965262][ T5833] hsr_slave_1: entered promiscuous mode [ 85.972475][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.980294][ T5833] Cannot create hsr debugfs directory [ 86.131325][ T5834] hsr_slave_0: entered promiscuous mode [ 86.138174][ T5834] hsr_slave_1: entered promiscuous mode [ 86.144278][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.151979][ T5834] Cannot create hsr debugfs directory [ 86.585705][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.600708][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.622731][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.634023][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.688310][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.699107][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.723825][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.736020][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.834408][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.880019][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.909732][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.923556][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.051092][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.093019][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.110111][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.137293][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.173233][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.182864][ T5841] Bluetooth: hci0: command tx timeout [ 87.258407][ T5841] Bluetooth: hci4: command tx timeout [ 87.263865][ T5841] Bluetooth: hci2: command tx timeout [ 87.276374][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.315092][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.327613][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.334875][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.337947][ T5846] Bluetooth: hci1: command tx timeout [ 87.348109][ T5841] Bluetooth: hci3: command tx timeout [ 87.392766][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.428287][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.442777][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.449954][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.470335][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.482543][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.493312][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.531128][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.542184][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.549395][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.578920][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.586096][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.703975][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.762414][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.769665][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.799183][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.806368][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.855653][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.977062][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.004061][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.011250][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.054535][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.061781][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.179267][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.201449][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.266077][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.291704][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.304074][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.311251][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.330121][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.367224][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.374448][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.437505][ T5827] veth0_vlan: entered promiscuous mode [ 88.477074][ T5827] veth1_vlan: entered promiscuous mode [ 88.613844][ T5827] veth0_macvtap: entered promiscuous mode [ 88.660837][ T5833] veth0_vlan: entered promiscuous mode [ 88.678515][ T5827] veth1_macvtap: entered promiscuous mode [ 88.691669][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.721284][ T5833] veth1_vlan: entered promiscuous mode [ 88.744202][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.789592][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.837380][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.847067][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.856697][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.866661][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.889858][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.916736][ T5833] veth0_macvtap: entered promiscuous mode [ 88.960889][ T5833] veth1_macvtap: entered promiscuous mode [ 89.020955][ T5834] veth0_vlan: entered promiscuous mode [ 89.081350][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.103697][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.113989][ T5834] veth1_vlan: entered promiscuous mode [ 89.144087][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.238458][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.247217][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.261499][ T5841] Bluetooth: hci0: command tx timeout [ 89.267168][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.276257][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.304259][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.325592][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.340597][ T5841] Bluetooth: hci2: command tx timeout [ 89.340832][ T5846] Bluetooth: hci4: command tx timeout [ 89.381204][ T5834] veth0_macvtap: entered promiscuous mode [ 89.392713][ T5834] veth1_macvtap: entered promiscuous mode [ 89.418584][ T5841] Bluetooth: hci3: command tx timeout [ 89.420476][ T5846] Bluetooth: hci1: command tx timeout [ 89.440201][ T5832] veth0_vlan: entered promiscuous mode [ 89.451484][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.456025][ T5832] veth1_vlan: entered promiscuous mode [ 89.476233][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.490279][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.500534][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.555859][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.565473][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.574749][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.586958][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.601211][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.621405][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.643403][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.761935][ T5831] veth0_vlan: entered promiscuous mode [ 89.787109][ T5832] veth0_macvtap: entered promiscuous mode [ 89.790703][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.809612][ T5831] veth1_vlan: entered promiscuous mode [ 89.828315][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.851458][ T5920] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.868308][ T5832] veth1_macvtap: entered promiscuous mode [ 89.899292][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.912992][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.963190][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.994629][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.055952][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.076355][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.086676][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.100499][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.159158][ T5831] veth0_macvtap: entered promiscuous mode [ 90.183147][ T5831] veth1_macvtap: entered promiscuous mode [ 90.185536][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.224192][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.264525][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.301483][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.344736][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.354147][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.368651][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.377395][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.510346][ T5929] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 90.531808][ T5929] netlink: 'syz.0.7': attribute type 3 has an invalid length. [ 90.546387][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.553752][ T5929] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7'. [ 90.567093][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.635697][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.787008][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.818790][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.826785][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.882366][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.898022][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.991239][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.031396][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.339362][ T5846] Bluetooth: hci0: command tx timeout [ 91.437535][ T5846] Bluetooth: hci4: command tx timeout [ 91.443007][ T5846] Bluetooth: hci2: command tx timeout [ 91.498820][ T5846] Bluetooth: hci1: command tx timeout [ 91.507792][ T5846] Bluetooth: hci3: command tx timeout [ 91.519831][ T5960] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 91.576331][ T5969] netlink: 256 bytes leftover after parsing attributes in process `syz.2.15'. [ 91.776011][ T5981] bridge0: port 3(syz_tun) entered blocking state [ 91.796436][ T5981] bridge0: port 3(syz_tun) entered disabled state [ 91.818100][ T5981] syz_tun: entered allmulticast mode [ 91.822660][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20'. [ 91.854921][ T5981] syz_tun: entered promiscuous mode [ 91.898943][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 91.902940][ T5981] bridge0: port 3(syz_tun) entered blocking state [ 91.914339][ T5981] bridge0: port 3(syz_tun) entered forwarding state [ 91.919360][ T9] cfg80211: failed to load regulatory.db [ 92.135862][ T5996] netlink: 'syz.0.25': attribute type 7 has an invalid length. [ 92.223504][ T5996] : entered promiscuous mode [ 92.500523][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'. [ 92.526690][ T6008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.29'. [ 92.575323][ T6008] veth0: entered promiscuous mode [ 92.596765][ T6006] veth0: left promiscuous mode [ 92.856010][ T6012] xt_CT: No such helper "snmp" [ 92.889925][ T6020] netlink: 'syz.0.34': attribute type 23 has an invalid length. [ 92.930487][ T6021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.111796][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 93.135707][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 93.158993][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 93.176720][ T6028] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 93.326925][ T6035] pim6reg: entered allmulticast mode [ 93.402322][ T6037] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 93.411799][ T6037] x_tables: duplicate underflow at hook 3 [ 93.506961][ T6039] trusted_key: syz.4.40 sent an empty control message without MSG_MORE. [ 93.696026][ T6050] Zero length message leads to an empty skb [ 94.620365][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.628373][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.913284][ T6079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.054655][ T6081] sctp: failed to load transform for md5: -2 [ 95.469608][ T6108] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 95.557069][ T6108] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 95.585489][ T6108] gretap1: entered promiscuous mode [ 95.607565][ T6108] gretap1: entered allmulticast mode [ 95.734530][ T6112] netlink: 'syz.0.61': attribute type 10 has an invalid length. [ 95.787759][ T6112] __nla_validate_parse: 4 callbacks suppressed [ 95.787776][ T6112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.61'. [ 95.940851][ T6118] warning: `syz.4.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.051248][ T6118] mac80211_hwsim hwsim10 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 96.095645][ T6112] dummy0: entered promiscuous mode [ 96.107084][ T6112] bridge0: port 4(dummy0) entered blocking state [ 96.114638][ T6112] bridge0: port 4(dummy0) entered disabled state [ 96.148300][ T6112] dummy0: entered allmulticast mode [ 96.179809][ T6112] bridge0: port 4(dummy0) entered blocking state [ 96.186732][ T6112] bridge0: port 4(dummy0) entered forwarding state [ 96.562595][ T6135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 96.636736][ T6137] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 96.653036][ T6137] team0: Device ipvlan2 is already an upper device of the team interface [ 97.187011][ T6132] Cannot find del_set index 5 as target [ 97.478225][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 98.049416][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 98.383967][ T6180] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 98.478155][ T6186] syzkaller0: entered promiscuous mode [ 98.494024][ T6186] syzkaller0: entered allmulticast mode [ 98.524174][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 98.713462][ T6196] netlink: 272 bytes leftover after parsing attributes in process `syz.0.84'. [ 98.861197][ T6201] netlink: 'syz.4.86': attribute type 23 has an invalid length. [ 99.035576][ T6205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.382607][ T6026] Set syz1 is full, maxelem 65536 reached [ 99.474916][ T6226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.93'. [ 99.654581][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 99.898151][ T49] wlan0: Trigger new scan to find an IBSS to join [ 99.903081][ T6208] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.146384][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064125c00: rx timeout, send abort [ 100.646920][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064126000: rx timeout, send abort [ 100.655515][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064125c00: abort rx timeout. Force session deactivation [ 100.774976][ T6261] vlan2: entered allmulticast mode [ 100.808066][ T6259] raw_sendmsg: syz.0.105 forgot to set AF_INET. Fix it! [ 101.109749][ T6280] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 101.155346][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064126000: abort rx timeout. Force session deactivation [ 101.179174][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.878700][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.129'. [ 101.944010][ T6333] bond0: entered promiscuous mode [ 102.002211][ T6333] bond_slave_0: entered promiscuous mode [ 102.015665][ T6346] netlink: 72 bytes leftover after parsing attributes in process `syz.4.132'. [ 102.046037][ T6333] bond_slave_1: entered promiscuous mode [ 102.058674][ T6333] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.067307][ T6333] bond0: left promiscuous mode [ 102.077019][ T6333] bond_slave_0: left promiscuous mode [ 102.082887][ T6333] bond_slave_1: left promiscuous mode [ 102.117275][ T6338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.331000][ T6356] xt_cgroup: path and classid specified [ 102.395040][ T6358] netlink: 'syz.1.134': attribute type 4 has an invalid length. [ 102.411474][ T6362] xt_cgroup: path and classid specified [ 102.423912][ T6358] netlink: 17 bytes leftover after parsing attributes in process `syz.1.134'. [ 102.540145][ T6367] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.648145][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'. [ 102.681246][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 102.883411][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 102.945688][ T59] wlan0: Trigger new scan to find an IBSS to join [ 103.086209][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 103.119424][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 103.131069][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 103.141267][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 103.224121][ T6394] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.250519][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.321674][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.342571][ T6403] xt_CT: No such helper "snmp" [ 103.429041][ T6405] !: renamed from dummy0 (while UP) [ 103.894312][ T12] wlan0: Creating new IBSS network, BSSID fe:37:95:01:2b:4a [ 104.545745][ T6468] SET target dimension over the limit! [ 104.721240][ T6474] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 104.903212][ T6484] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 105.113923][ T6485] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 105.184474][ T6492] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 105.491114][ T6511] netlink: 'syz.2.184': attribute type 4 has an invalid length. [ 105.548857][ T6513] netlink: 'syz.2.184': attribute type 4 has an invalid length. [ 105.759236][ T6516] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 105.946594][ T6523] xt_l2tp: invalid flags combination: 4 [ 106.096359][ T6528] bridge2: port 1(ip6gretap1) entered blocking state [ 106.106795][ T6528] bridge2: port 1(ip6gretap1) entered disabled state [ 106.127827][ T6530] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 106.148922][ T6528] ip6gretap1: entered allmulticast mode [ 106.162081][ T6528] ip6gretap1: entered promiscuous mode [ 106.422226][ T6527] veth3: entered promiscuous mode [ 106.459273][ T6527] bridge2: port 2(veth3) entered blocking state [ 106.475667][ T6527] bridge2: port 2(veth3) entered disabled state [ 106.484537][ T6527] veth3: entered allmulticast mode [ 106.771486][ T6520] delete_channel: no stack [ 106.964108][ T6570] netlink: 'syz.0.202': attribute type 11 has an invalid length. [ 106.982393][ T6570] __nla_validate_parse: 4 callbacks suppressed [ 106.982412][ T6570] netlink: 224 bytes leftover after parsing attributes in process `syz.0.202'. [ 107.604721][ T6601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 107.628802][ T6603] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 107.650464][ T6603] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 107.663551][ T6603] netlink: 'syz.0.211': attribute type 3 has an invalid length. [ 107.673022][ T6603] netlink: 216 bytes leftover after parsing attributes in process `syz.0.211'. [ 107.707768][ T6603] NCSI netlink: No device for ifindex 813332851 [ 107.922510][ T6612] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 107.955187][ T6608] netlink: 'syz.4.214': attribute type 4 has an invalid length. [ 108.010527][ T6614] netlink: 'syz.4.214': attribute type 4 has an invalid length. [ 108.436669][ T6644] netlink: 'syz.0.223': attribute type 20 has an invalid length. [ 108.450545][ T6638] mac80211_hwsim hwsim8 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 108.471739][ T6640] syzkaller1: entered promiscuous mode [ 108.479235][ T6640] syzkaller1: entered allmulticast mode [ 108.973225][ T6657] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 109.394905][ T6674] IPVS: length: 85 != 8 [ 109.425138][ T6675] netlink: set zone limit has 8 unknown bytes [ 110.107485][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.240'. [ 110.158303][ T5827] bridge0: port 3(syz_tun) entered disabled state [ 110.199053][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 110.253541][ T5827] syz_tun (unregistering): left allmulticast mode [ 110.268704][ T5827] syz_tun (unregistering): left promiscuous mode [ 110.288872][ T5827] bridge0: port 3(syz_tun) entered disabled state [ 110.337999][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 110.362131][ T6697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.242'. [ 110.924769][ T6763] wlan0: Trigger new scan to find an IBSS to join [ 111.350778][ T6774] syz.4.253: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 111.374337][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.4.253 Not tainted 6.15.0-syzkaller-07817-gb56bbaf8c9ff #0 PREEMPT(full) [ 111.374366][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.374386][ T6774] Call Trace: [ 111.374394][ T6774] [ 111.374403][ T6774] dump_stack_lvl+0x189/0x250 [ 111.374448][ T6774] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 111.374476][ T6774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.374509][ T6774] ? __pfx__printk+0x10/0x10 [ 111.374532][ T6774] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 111.374566][ T6774] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 111.374609][ T6774] warn_alloc+0x214/0x310 [ 111.374630][ T6774] ? stack_depot_save_flags+0x40/0x900 [ 111.374662][ T6774] ? __pfx_warn_alloc+0x10/0x10 [ 111.374685][ T6774] ? kasan_save_track+0x4f/0x80 [ 111.374713][ T6774] ? xskq_create+0x56/0x170 [ 111.374736][ T6774] ? xsk_init_queue+0xb0/0x110 [ 111.374756][ T6774] ? xsk_setsockopt+0x43f/0x710 [ 111.374776][ T6774] ? do_sock_setsockopt+0x25a/0x3e0 [ 111.374807][ T6774] ? __x64_sys_setsockopt+0x18b/0x220 [ 111.374837][ T6774] ? do_syscall_64+0xfa/0x3b0 [ 111.374862][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.374892][ T6774] __vmalloc_node_range_noprof+0x125/0x1340 [ 111.374959][ T6774] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.375001][ T6774] ? __kasan_kmalloc+0x93/0xb0 [ 111.375033][ T6774] vmalloc_user_noprof+0xad/0xf0 [ 111.375053][ T6774] ? xskq_create+0xbf/0x170 [ 111.375078][ T6774] xskq_create+0xbf/0x170 [ 111.375106][ T6774] xsk_init_queue+0xb0/0x110 [ 111.375132][ T6774] xsk_setsockopt+0x43f/0x710 [ 111.375158][ T6774] ? __pfx_xsk_setsockopt+0x10/0x10 [ 111.375179][ T6774] ? __lock_acquire+0xab9/0xd20 [ 111.375217][ T6774] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 111.375248][ T6774] ? __pfx_xsk_setsockopt+0x10/0x10 [ 111.375273][ T6774] do_sock_setsockopt+0x25a/0x3e0 [ 111.375309][ T6774] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 111.375348][ T6774] ? __fget_files+0x2a/0x420 [ 111.375390][ T6774] __x64_sys_setsockopt+0x18b/0x220 [ 111.375430][ T6774] do_syscall_64+0xfa/0x3b0 [ 111.375455][ T6774] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.375493][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.375512][ T6774] ? clear_bhb_loop+0x60/0xb0 [ 111.375548][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.375567][ T6774] RIP: 0033:0x7fd501b8e969 [ 111.375588][ T6774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.375623][ T6774] RSP: 002b:00007fd50296a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.375644][ T6774] RAX: ffffffffffffffda RBX: 00007fd501db5fa0 RCX: 00007fd501b8e969 [ 111.375659][ T6774] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 111.375671][ T6774] RBP: 00007fd501c10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 111.375683][ T6774] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.375696][ T6774] R13: 0000000000000000 R14: 00007fd501db5fa0 R15: 00007ffea33d2ad8 [ 111.375728][ T6774] [ 111.375739][ T6774] Mem-Info: [ 111.384014][ T6773] netlink: 'syz.3.252': attribute type 12 has an invalid length. [ 111.412523][ T6774] active_anon:5175 inactive_anon:0 isolated_anon:0 [ 111.412523][ T6774] active_file:1123 inactive_file:39828 isolated_file:0 [ 111.412523][ T6774] unevictable:768 dirty:108 writeback:0 [ 111.412523][ T6774] slab_reclaimable:10040 slab_unreclaimable:98551 [ 111.412523][ T6774] mapped:24990 shmem:1362 pagetables:800 [ 111.412523][ T6774] sec_pagetables:0 bounce:0 [ 111.412523][ T6774] kernel_misc_reclaimable:0 [ 111.412523][ T6774] free:1355680 free_pcp:763 free_cma:0 [ 111.663198][ T6773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.252'. [ 111.754345][ T6774] Node 0 active_anon:20800kB inactive_anon:0kB active_file:4492kB inactive_file:159108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103960kB dirty:320kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11304kB pagetables:3300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.798815][ T6784] netlink: 'syz.3.252': attribute type 12 has an invalid length. [ 111.821017][ T6774] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.821454][ T6784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.252'. [ 111.941734][ T6774] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.000357][ T6774] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 112.028248][ T6794] netlink: 232 bytes leftover after parsing attributes in process `syz.2.256'. [ 112.042484][ T6774] Node 0 DMA32 free:1462648kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:20784kB inactive_anon:0kB active_file:4492kB inactive_file:157284kB unevictable:1536kB writepending:336kB present:3129332kB managed:2561256kB mlocked:0kB bounce:0kB free_pcp:5256kB local_pcp:1004kB free_cma:0kB [ 112.089417][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 112.122076][ T6774] lowmem_reserve[]: 0 0 1 1 1 [ 112.126956][ T6774] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 112.162604][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.257'. [ 112.167421][ T6774] lowmem_reserve[]: 0 0 0 0 0 [ 112.182482][ T6774] Node 1 Normal free:3921060kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 112.303844][ T6774] lowmem_reserve[]: 0 0 0 0 0 [ 112.313997][ T6774] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.339387][ T6774] Node 0 DMA32: 2*4kB (UE) 6*8kB (UME) 21*16kB (UME) 40*32kB (UME) 24*64kB (ME) 16*128kB (UME) 10*256kB (ME) 4*512kB (ME) 10*1024kB (UM) 3*2048kB (UME) 347*4096kB (M) = 1447560kB [ 112.402128][ T6774] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 112.424770][ T6807] netlink: 52 bytes leftover after parsing attributes in process `syz.3.259'. [ 112.444755][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.449806][ T6774] Node 1 Normal: 185*4kB (UME) 54*8kB (UME) 49*16kB (UME) 220*32kB (UME) 102*64kB (UME) 30*128kB (UME) 19*256kB (UME) 7*512kB (UM) 2*1024kB (ME) 4*2048kB (UE) 948*4096kB (M) = 3921060kB [ 112.485831][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.507028][ T6774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.520342][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.540882][ T6774] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.559409][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.566753][ T6774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.581089][ T6774] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.591957][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.608471][ T6774] 42312 total pagecache pages [ 112.617233][ T6815] netlink: 3 bytes leftover after parsing attributes in process `syz.3.259'. [ 112.617556][ T6774] 0 pages in swap cache [ 112.647401][ T6774] Free swap = 124996kB [ 112.660675][ T6774] Total swap = 124996kB [ 112.684979][ T6774] 2097051 pages RAM [ 112.700637][ T6774] 0 pages HighMem/MovableOnly [ 112.721960][ T6774] 424631 pages reserved [ 112.736364][ T6774] 0 pages cma reserved [ 112.824191][ T6824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 113.048086][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.263'. [ 113.348581][ T6849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 113.403858][ T6808] chnl_net:caif_netlink_parms(): no params data found [ 113.496229][ T6853] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.568254][ T6859] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 113.709085][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 113.730325][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 113.752090][ T6870] netlink: 'syz.2.273': attribute type 58 has an invalid length. [ 113.786214][ T6859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.817276][ T6862] bond1: (slave ip6gretap1): making interface the new active one [ 113.826985][ T6862] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 113.850876][ T6863] veth3: entered promiscuous mode [ 113.861845][ T6863] bond1: (slave veth3): Enslaving as an active interface with a down link [ 113.908306][ T6871] erspan0: entered allmulticast mode [ 113.928944][ T6871] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 114.221453][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.251537][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.271639][ T6808] bridge_slave_0: entered allmulticast mode [ 114.284394][ T6808] bridge_slave_0: entered promiscuous mode [ 114.364986][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.381942][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.404066][ T6808] bridge_slave_1: entered allmulticast mode [ 114.420825][ T6901] set match dimension is over the limit! [ 114.430899][ T6808] bridge_slave_1: entered promiscuous mode [ 114.546630][ T6902] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 114.558980][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.571580][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.617725][ T5841] Bluetooth: hci0: command tx timeout [ 114.662917][ T6808] team0: Port device team_slave_0 added [ 114.674586][ T6808] team0: Port device team_slave_1 added [ 114.726054][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.748952][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.785197][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.808506][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.815659][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.846560][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.859940][ T6759] wlan0: Trigger new scan to find an IBSS to join [ 115.015395][ T6808] hsr_slave_0: entered promiscuous mode [ 115.025325][ T6808] hsr_slave_1: entered promiscuous mode [ 115.032387][ T6808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.041774][ T6808] Cannot create hsr debugfs directory [ 115.331812][ T6900] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 115.537330][ T6936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.587075][ T6936] x_tables: duplicate underflow at hook 1 [ 115.656633][ T6941] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 115.688953][ T6941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.823529][ T6753] wlan0: Creating new IBSS network, BSSID e2:db:6c:bf:0c:d9 [ 115.833252][ T6948] sctp: [Deprecated]: syz.2.296 (pid 6948) Use of int in max_burst socket option. [ 115.833252][ T6948] Use struct sctp_assoc_value instead [ 115.850140][ T6948] sctp: [Deprecated]: syz.2.296 (pid 6948) Use of int in max_burst socket option. [ 115.850140][ T6948] Use struct sctp_assoc_value instead [ 115.874073][ T6808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.994623][ T6808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.085101][ T6808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.199775][ T6808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.280525][ T6968] pimreg: entered allmulticast mode [ 116.319830][ T6968] pimreg: left allmulticast mode [ 116.547077][ T6808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.602301][ T6808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.639964][ T6808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.663996][ T6808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.697634][ T5841] Bluetooth: hci0: command tx timeout [ 116.994451][ T6994] veth0: entered promiscuous mode [ 117.217882][ T24] IPVS: starting estimator thread 0... [ 117.226466][ T7004] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.327635][ T7009] IPVS: using max 29 ests per chain, 69600 per kthread [ 117.440008][ T7014] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 117.453059][ T7014] macsec1: entered allmulticast mode [ 117.470846][ T7014] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 117.501750][ T7014] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 117.533187][ T7014] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 117.746023][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.082998][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.256385][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.263641][ T6759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.387081][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.394372][ T6743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.570763][ T7055] bridge2: entered promiscuous mode [ 118.594095][ T7055] bridge2: entered allmulticast mode [ 118.780391][ T5841] Bluetooth: hci0: command tx timeout [ 119.168544][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d159400: rx timeout, send abort [ 119.229746][ T7086] +: renamed from syzkaller0 [ 119.592312][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.667961][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d159800: rx timeout, send abort [ 119.676825][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d159400: abort rx timeout. Force session deactivation [ 119.713718][ T7115] __nla_validate_parse: 14 callbacks suppressed [ 119.713736][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 119.763682][ T6808] veth0_vlan: entered promiscuous mode [ 119.807133][ T7119] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 119.898989][ T7119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.912074][ T6808] veth1_vlan: entered promiscuous mode [ 119.964716][ T7120] bond1: (slave geneve2): making interface the new active one [ 120.014477][ T7120] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 120.045749][ T7130] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 120.076099][ T7130] netlink: 224 bytes leftover after parsing attributes in process `syz.1.334'. [ 120.095880][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 120.167121][ T7119] veth1: entered promiscuous mode [ 120.176287][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d159800: abort rx timeout. Force session deactivation [ 120.207166][ T7119] bond1: (slave veth1): Enslaving as an active interface with a down link [ 120.261362][ T7124] veth3: entered promiscuous mode [ 120.275264][ T7124] bond1: (slave veth3): Enslaving as an active interface with a down link [ 120.304902][ T7120] vlan3: entered allmulticast mode [ 120.320744][ T7120] bond1: entered allmulticast mode [ 120.325907][ T7120] geneve2: entered allmulticast mode [ 120.333880][ T7120] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 120.381680][ T7136] netlink: 'syz.4.335': attribute type 11 has an invalid length. [ 120.489428][ T6808] veth0_macvtap: entered promiscuous mode [ 120.550381][ T6808] veth1_macvtap: entered promiscuous mode [ 120.629107][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.684784][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.704799][ T7153] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 120.731395][ T6808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.778597][ T6808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.787357][ T6808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.847341][ T6808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.858029][ T5846] Bluetooth: hci0: command tx timeout [ 120.880928][ T7168] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 120.883770][ T7152] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 120.926584][ T7171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.342'. [ 121.148058][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.186009][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.233225][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.344'. [ 121.291524][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.310738][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.572529][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 121.963293][ T6757] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.155775][ T7205] bond1: entered promiscuous mode [ 122.161233][ T7205] bond1: entered allmulticast mode [ 122.166840][ T7205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.376554][ T7227] xt_l2tp: missing protocol rule (udp|l2tpip) [ 122.428477][ T7205] bond1 (unregistering): Released all slaves [ 122.471986][ T7228] syz_tun: entered allmulticast mode [ 122.485841][ T7224] netlink: 13 bytes leftover after parsing attributes in process `syz.1.352'. [ 122.525770][ T6757] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.544714][ T7228] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20009 [ 122.664622][ T6757] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.773770][ T6757] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.832248][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.850177][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.860514][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.871574][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.885324][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.012848][ T7249] tipc: Started in network mode [ 123.031704][ T7249] tipc: Node identity 1e326e73f979, cluster identity 4711 [ 123.039722][ T7249] tipc: Enabled bearer , priority 0 [ 123.056706][ T7253] Bluetooth: MGMT ver 1.23 [ 123.067707][ T7249] syzkaller0: entered promiscuous mode [ 123.074441][ T7249] syzkaller0: entered allmulticast mode [ 123.197833][ T7249] netlink: 232 bytes leftover after parsing attributes in process `syz.4.359'. [ 123.259290][ T7250] tipc: Resetting bearer [ 123.269895][ T7225] syz_tun: left allmulticast mode [ 123.483623][ T7249] tipc: Resetting bearer [ 123.540213][ T7249] tipc: Disabling bearer [ 123.591207][ T7270] xt_bpf: check failed: parse error [ 123.594258][ T6757] bridge_slave_1: left allmulticast mode [ 123.611919][ T6757] bridge_slave_1: left promiscuous mode [ 123.636741][ T7269] xt_bpf: check failed: parse error [ 123.651661][ T6757] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.676214][ T6757] bridge_slave_0: left allmulticast mode [ 123.689794][ T6757] bridge_slave_0: left promiscuous mode [ 123.703953][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.939178][ T7280] netlink: 348 bytes leftover after parsing attributes in process `syz.1.368'. [ 123.953565][ T7290] netlink: 'syz.2.371': attribute type 64 has an invalid length. [ 123.966253][ T7290] netlink: 44 bytes leftover after parsing attributes in process `syz.2.371'. [ 124.200784][ T6757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.212356][ T6757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.224067][ T6757] bond0 (unregistering): Released all slaves [ 124.242066][ T7275] netlink: 'syz.1.368': attribute type 4 has an invalid length. [ 124.589420][ T7307] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 124.597141][ T7307] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 124.671679][ T7307] netlink: 'syz.3.372': attribute type 2 has an invalid length. [ 124.720462][ T7307] __nla_validate_parse: 3 callbacks suppressed [ 124.720479][ T7307] netlink: 64 bytes leftover after parsing attributes in process `syz.3.372'. [ 124.870522][ T7241] chnl_net:caif_netlink_parms(): no params data found [ 124.937681][ T5841] Bluetooth: hci0: command tx timeout [ 125.328449][ T6757] hsr_slave_0: left promiscuous mode [ 125.359307][ T6757] hsr_slave_1: left promiscuous mode [ 125.375872][ T6757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.393439][ T6757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.399937][ T7352] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 125.420935][ T6757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.437581][ T6757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.514279][ T7350] "syz.4.382" (7350) uses obsolete ecb(arc4) skcipher [ 125.523805][ T6757] veth1_macvtap: left promiscuous mode [ 125.530037][ T6757] veth0_macvtap: left promiscuous mode [ 125.536325][ T6757] veth1_vlan: left promiscuous mode [ 125.553780][ T6757] veth0_vlan: left promiscuous mode [ 126.107317][ T6757] team0 (unregistering): Port device team_slave_1 removed [ 126.143089][ T6757] team0 (unregistering): Port device team_slave_0 removed [ 126.499070][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 126.688591][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.705666][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.753095][ T7241] bridge_slave_0: entered allmulticast mode [ 126.763787][ T7241] bridge_slave_0: entered promiscuous mode [ 126.792949][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.831243][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.862493][ T7241] bridge_slave_1: entered allmulticast mode [ 126.903805][ T7241] bridge_slave_1: entered promiscuous mode [ 126.929070][ T7390] "syz.2.391" (7390) uses obsolete ecb(arc4) skcipher [ 127.018121][ T5841] Bluetooth: hci0: command tx timeout [ 127.055448][ T7395] netlink: 256 bytes leftover after parsing attributes in process `syz.2.391'. [ 127.133118][ T7241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.181054][ T7241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.225606][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 127.313709][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 127.386848][ T7241] team0: Port device team_slave_0 added [ 127.432535][ T7241] team0: Port device team_slave_1 added [ 127.550598][ T7417] openvswitch: netlink: Key type 276 is out of range max 32 [ 127.685641][ T7414] vlan2: entered promiscuous mode [ 127.716409][ T7414] vlan2: entered allmulticast mode [ 127.734066][ T7414] hsr_slave_1: entered allmulticast mode [ 127.844222][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 128.291302][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.298836][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.327260][ T7241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.356511][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.364309][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.391829][ T7241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.411743][ T7430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.438194][ T7430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.682187][ T7448] netlink: 512 bytes leftover after parsing attributes in process `syz.2.404'. [ 128.815168][ T7241] hsr_slave_0: entered promiscuous mode [ 128.827068][ T7241] hsr_slave_1: entered promiscuous mode [ 128.833653][ T7241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.845661][ T7241] Cannot create hsr debugfs directory [ 129.051226][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.097693][ T5841] Bluetooth: hci0: command tx timeout [ 129.678405][ T7503] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 129.720907][ T7503] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 129.749332][ T7503] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 129.770351][ T7503] netlink: 'syz.3.418': attribute type 2 has an invalid length. [ 129.798378][ T7503] netlink: 76 bytes leftover after parsing attributes in process `syz.3.418'. [ 130.203549][ T7532] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.422'. [ 130.247616][ T7532] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 130.306712][ T7532] openvswitch: netlink: Duplicate key (type 0). [ 130.427067][ T7540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.424'. [ 130.674255][ T7241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.733247][ T7241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.755410][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 130.794505][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 130.796272][ T7241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.807424][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 130.833038][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 130.847380][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 130.861622][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 130.884052][ T7241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.906743][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 131.184435][ T5841] Bluetooth: hci0: command tx timeout [ 131.241911][ T7241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.265106][ T7582] netlink: 'syz.1.432': attribute type 12 has an invalid length. [ 131.295389][ T7582] netlink: 'syz.1.432': attribute type 29 has an invalid length. [ 131.372884][ T7241] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.433525][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.440745][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.485465][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.492679][ T6757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.590231][ T7595] IPv6: Can't replace route, no match found [ 132.081054][ T24] IPVS: starting estimator thread 0... [ 132.228088][ T7619] IPVS: using max 30 ests per chain, 72000 per kthread [ 132.308456][ T7241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.514438][ T7241] veth0_vlan: entered promiscuous mode [ 132.566201][ T7241] veth1_vlan: entered promiscuous mode [ 132.647407][ T7241] veth0_macvtap: entered promiscuous mode [ 132.679302][ T7241] veth1_macvtap: entered promiscuous mode [ 132.752174][ T7241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.800708][ T7241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.818493][ T7647] tipc: Enabling of bearer rejected, media not registered [ 132.865377][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872446][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.887355][ T7647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.922451][ T7647] bond0: (slave bond2): Enslaving as an active interface with an up link [ 132.971815][ T7241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.004741][ T7241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.037604][ T7241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.076274][ T7241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.313819][ T7659] tipc: Started in network mode [ 133.327777][ T7659] tipc: Node identity beb571d6542, cluster identity 4711 [ 133.355470][ T7659] tipc: Enabled bearer , priority 0 [ 133.548505][ T7660] syzkaller0: entered promiscuous mode [ 133.564570][ T7660] syzkaller0: entered allmulticast mode [ 133.598365][ T7660] tipc: Resetting bearer [ 133.656950][ T7657] tipc: Resetting bearer [ 133.992392][ T3512] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 134.402151][ T10] tipc: Node number set to 3935662550 [ 134.849997][ T7721] __nla_validate_parse: 5 callbacks suppressed [ 134.850015][ T7721] netlink: 100 bytes leftover after parsing attributes in process `syz.2.457'. [ 135.426806][ T7657] tipc: Disabling bearer [ 135.457281][ T7693] syz_tun: entered allmulticast mode [ 135.588399][ T7736] netlink: 'syz.1.458': attribute type 39 has an invalid length. [ 135.616475][ T7693] syz_tun: left allmulticast mode [ 135.813812][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 135.818745][ T5841] Bluetooth: hci0: command tx timeout [ 136.015190][ T7752] bridge3: port 1(ip6gretap1) entered blocking state [ 136.033739][ T7752] bridge3: port 1(ip6gretap1) entered disabled state [ 136.078270][ T7752] ip6gretap1: entered allmulticast mode [ 136.086244][ T7752] ip6gretap1: entered promiscuous mode [ 136.098112][ T6757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.110505][ T6757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.213791][ T7744] veth5: entered promiscuous mode [ 136.222487][ T7744] bridge3: port 2(veth5) entered blocking state [ 136.238435][ T7744] bridge3: port 2(veth5) entered disabled state [ 136.246701][ T7744] veth5: entered allmulticast mode [ 136.292925][ T7766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.463'. [ 136.376841][ T7765] IPVS: Unknown mcast interface: pim6reg1 [ 136.447565][ T6737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.476621][ T6737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.489219][ T7772] netlink: 'syz.2.467': attribute type 12 has an invalid length. [ 136.502339][ T7772] netlink: 'syz.2.467': attribute type 29 has an invalid length. [ 136.510332][ T7772] netlink: 148 bytes leftover after parsing attributes in process `syz.2.467'. [ 136.543766][ T7772] netlink: 59 bytes leftover after parsing attributes in process `syz.2.467'. [ 136.633863][ T7776] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.469'. [ 136.761251][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 136.818838][ T7781] Bluetooth: MGMT ver 1.23 [ 136.959530][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'. [ 137.007826][ T7787] netlink: 80 bytes leftover after parsing attributes in process `syz.3.474'. [ 137.040687][ T7787] nbd: illegal input index 61504 [ 137.151828][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.349529][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.524967][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.829622][ T7817] xt_policy: neither incoming nor outgoing policy selected [ 137.939114][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.051404][ T7826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.483'. [ 138.243681][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.253413][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.262695][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.271436][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.279242][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.388738][ T36] bridge_slave_1: left allmulticast mode [ 138.428462][ T36] bridge_slave_1: left promiscuous mode [ 138.442269][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.464524][ T36] bridge_slave_0: left allmulticast mode [ 138.488525][ T36] bridge_slave_0: left promiscuous mode [ 138.507129][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.745791][ T7856] netlink: 'syz.3.492': attribute type 8 has an invalid length. [ 138.931701][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.943329][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.953436][ T36] bond0 (unregistering): Released all slaves [ 140.201599][ T7915] netlink: 'syz.2.505': attribute type 2 has an invalid length. [ 140.261653][ T36] hsr_slave_0: left promiscuous mode [ 140.277134][ T36] hsr_slave_1: left promiscuous mode [ 140.301947][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.324442][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.377786][ T5841] Bluetooth: hci0: command tx timeout [ 140.399585][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.426181][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.582162][ T36] veth1_macvtap: left promiscuous mode [ 140.596744][ T36] veth0_macvtap: left promiscuous mode [ 140.607791][ T36] veth1_vlan: left promiscuous mode [ 140.623729][ T36] veth0_vlan: left promiscuous mode [ 141.482240][ T36] team0 (unregistering): Port device team_slave_1 removed [ 141.516529][ T36] team0 (unregistering): Port device team_slave_0 removed [ 142.041484][ T7938] netlink: 'syz.2.511': attribute type 10 has an invalid length. [ 142.054947][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 142.458720][ T5841] Bluetooth: hci0: command tx timeout [ 142.731364][ T7976] __nla_validate_parse: 2 callbacks suppressed [ 142.731382][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.523'. [ 142.777866][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.523'. [ 142.797852][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.811228][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.823076][ T7836] bridge_slave_0: entered allmulticast mode [ 142.865348][ T7836] bridge_slave_0: entered promiscuous mode [ 142.896575][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.523'. [ 142.935801][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.955468][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.979484][ T7836] bridge_slave_1: entered allmulticast mode [ 142.997074][ T7836] bridge_slave_1: entered promiscuous mode [ 143.163403][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.191997][ T7993] veth0_to_team: entered promiscuous mode [ 143.212656][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.472385][ T7993] veth0_to_team: left promiscuous mode [ 143.513428][ T8003] : entered promiscuous mode [ 143.522733][ T8012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.530'. [ 143.543503][ T8012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.530'. [ 143.563297][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 143.581581][ T7836] team0: Port device team_slave_0 added [ 143.637322][ T8014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 143.713428][ T7836] team0: Port device team_slave_1 added [ 143.945530][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.956850][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.983455][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.997054][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.532'. [ 144.015413][ T8024] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 144.015644][ T8025] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 144.069091][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.086991][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.116630][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.442652][ T7836] hsr_slave_0: entered promiscuous mode [ 144.476902][ T7836] hsr_slave_1: entered promiscuous mode [ 144.527131][ T7836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.537955][ T5841] Bluetooth: hci0: command tx timeout [ 144.572687][ T7836] Cannot create hsr debugfs directory [ 145.003163][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'. [ 145.023623][ T8061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.541'. [ 145.100472][ T6759] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.109556][ T6759] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.122845][ T8067] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 145.137855][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.351758][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 145.378531][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.719019][ T5890] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.089822][ T8114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.305580][ T8121] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 146.316795][ T8124] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 146.360358][ T8124] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 146.496703][ T7836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.577005][ T7836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.618094][ T5841] Bluetooth: hci0: command tx timeout [ 146.651350][ T7836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.708860][ T7836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.717049][ T8136] nbd: socks must be embedded in a SOCK_ITEM attr [ 146.942234][ T8144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.007297][ T8149] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 147.025404][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.161622][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.386474][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.393754][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.507182][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.514431][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.602779][ T8179] Bluetooth: MGMT ver 1.23 [ 148.155549][ T8200] x_tables: duplicate underflow at hook 3 [ 148.430448][ T8212] nbd: must specify an index to disconnect [ 148.448761][ T30] audit: type=1804 audit(1749010562.272:2): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.579" name="/newroot/134/cgroup.controllers" dev="tmpfs" ino=696 res=1 errno=0 [ 148.536671][ T30] audit: type=1800 audit(1749010562.292:3): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.579" name="cgroup.controllers" dev="tmpfs" ino=696 res=0 errno=0 [ 148.623476][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.864336][ T7836] veth0_vlan: entered promiscuous mode [ 148.921198][ T7836] veth1_vlan: entered promiscuous mode [ 149.040805][ T7836] veth0_macvtap: entered promiscuous mode [ 149.092998][ T7836] veth1_macvtap: entered promiscuous mode [ 149.140099][ T8230] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 149.257915][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.495242][ T8246] __nla_validate_parse: 6 callbacks suppressed [ 149.495262][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 149.515108][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.561206][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.583946][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 149.639572][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 149.687134][ T7836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.704503][ T7836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.715117][ T7836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.730837][ T7836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.086213][ T8260] tipc: Started in network mode [ 150.098286][ T8260] tipc: Node identity 4, cluster identity 4711 [ 150.104498][ T8260] tipc: Node number set to 4 [ 150.342005][ T6757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.390540][ T6757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.504042][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 150.563827][ T8290] netlink: 'syz.1.592': attribute type 13 has an invalid length. [ 150.578961][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.617968][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.763135][ T8299] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 150.910115][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 150.951725][ T8299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.048578][ T8305] veth11: entered promiscuous mode [ 151.105893][ T8305] bond2: (slave veth11): Enslaving as an active interface with a down link [ 151.163959][ T8306] ip6gretap2: entered allmulticast mode [ 151.175460][ T8306] bond2: (slave ip6gretap2): making interface the new active one [ 151.195682][ T8306] ip6gretap2: entered promiscuous mode [ 151.236574][ T8306] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 151.440087][ T8327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.481849][ T3512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.714920][ T3512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.833246][ T3512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.971198][ T3512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.187507][ T3512] bridge_slave_1: left allmulticast mode [ 152.193218][ T3512] bridge_slave_1: left promiscuous mode [ 152.207843][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.225881][ T3512] bridge_slave_0: left allmulticast mode [ 152.234611][ T3512] bridge_slave_0: left promiscuous mode [ 152.240586][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.536068][ T8360] x_tables: duplicate underflow at hook 1 [ 152.579989][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 152.801041][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.832714][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.865737][ T3512] bond0 (unregistering): Released all slaves [ 152.956499][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 152.982091][ T8368] tipc: Enabled bearer , priority 0 [ 153.050113][ T8373] syzkaller0: entered promiscuous mode [ 153.063900][ T8373] syzkaller0: entered allmulticast mode [ 153.083964][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.095041][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.114472][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.122911][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.124020][ T8362] tipc: Resetting bearer [ 153.149277][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.243008][ T8362] tipc: Disabling bearer [ 153.422368][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 153.736976][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'. [ 154.047154][ T3512] hsr_slave_0: left promiscuous mode [ 154.073089][ T3512] hsr_slave_1: left promiscuous mode [ 154.080750][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.097840][ T8425] netlink: 48 bytes leftover after parsing attributes in process `syz.4.623'. [ 154.103087][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.147795][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.162290][ T8432] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 154.169841][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.181595][ T8432] netlink: 'syz.3.622': attribute type 3 has an invalid length. [ 154.213979][ T3512] veth1_macvtap: left promiscuous mode [ 154.214350][ T8432] netlink: 224 bytes leftover after parsing attributes in process `syz.3.622'. [ 154.230889][ T3512] veth0_macvtap: left promiscuous mode [ 154.240181][ T3512] veth1_vlan: left promiscuous mode [ 154.254178][ T3512] veth0_vlan: left promiscuous mode [ 154.782222][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 154.815911][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 155.180905][ T5841] Bluetooth: hci0: command tx timeout [ 156.073697][ T8379] chnl_net:caif_netlink_parms(): no params data found [ 156.202475][ T8481] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 156.455849][ T8493] netlink: 'syz.4.635': attribute type 11 has an invalid length. [ 156.506963][ T8481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.524105][ T8493] netlink: 'syz.4.635': attribute type 11 has an invalid length. [ 156.561746][ T8493] netlink: 224 bytes leftover after parsing attributes in process `syz.4.635'. [ 156.639846][ T8486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.653018][ T8486] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.695205][ T8486] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 156.815819][ T8487] netlink: 176 bytes leftover after parsing attributes in process `syz.2.633'. [ 156.826972][ T8487] ip6gretap0: entered promiscuous mode [ 156.883821][ T8490] veth7: entered promiscuous mode [ 156.892410][ T8490] bond3: (slave veth7): Enslaving as an active interface with a down link [ 156.917336][ T8498] vlan3: entered allmulticast mode [ 156.950269][ T8498] bond3: entered allmulticast mode [ 157.181225][ T6743] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 157.200801][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 157.225733][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.227993][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 157.250010][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.262455][ T5841] Bluetooth: hci0: command tx timeout [ 157.270179][ T8379] bridge_slave_0: entered allmulticast mode [ 157.287349][ T8379] bridge_slave_0: entered promiscuous mode [ 157.337322][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.342481][ T8515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.638'. [ 157.356977][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.377336][ T8379] bridge_slave_1: entered allmulticast mode [ 157.409641][ T8379] bridge_slave_1: entered promiscuous mode [ 157.580180][ T8521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.609062][ T8379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.662025][ T8379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.817592][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.952316][ T8379] team0: Port device team_slave_0 added [ 157.975314][ T8379] team0: Port device team_slave_1 added [ 158.253344][ T8542] sch_fq: defrate 0 ignored. [ 158.298293][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.334949][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.338171][ T8554] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 158.384916][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.648'. [ 158.433760][ T8379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.523509][ T8562] netlink: 260 bytes leftover after parsing attributes in process `syz.4.651'. [ 158.568120][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.594535][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.678922][ T8379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.339814][ T5841] Bluetooth: hci0: command tx timeout [ 159.426582][ T8379] hsr_slave_0: entered promiscuous mode [ 159.433817][ T8379] hsr_slave_1: entered promiscuous mode [ 159.448191][ T8379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.455912][ T8379] Cannot create hsr debugfs directory [ 159.546243][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 159.556267][ T8559] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 159.693875][ T8607] netlink: 'syz.1.662': attribute type 4 has an invalid length. [ 159.705201][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 159.769155][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 160.230624][ T8623] delete_channel: no stack [ 160.384768][ T8631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.791833][ T8618] x_tables: duplicate underflow at hook 2 [ 160.841914][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.853491][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.880473][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.972869][ T8637] gretap1: left promiscuous mode [ 160.986386][ T8637] gretap1: left allmulticast mode [ 161.012704][ T8637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.032028][ T8637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.421388][ T5841] Bluetooth: hci0: command tx timeout [ 162.145512][ T8694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.245863][ T8379] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.323252][ T8379] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.376337][ T8701] batadv_slave_1: entered promiscuous mode [ 162.391315][ T8379] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.445957][ T8699] batadv_slave_1: left promiscuous mode [ 162.456855][ T8379] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.544932][ T8706] __nla_validate_parse: 2 callbacks suppressed [ 162.544953][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 162.731794][ T3512] ip6gretap2: left promiscuous mode [ 162.820811][ T8379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.894791][ T8379] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.945623][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.952808][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.022394][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.029686][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.906570][ T8379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.987876][ T8757] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 164.020910][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 164.106813][ T8379] veth0_vlan: entered promiscuous mode [ 164.170207][ T8379] veth1_vlan: entered promiscuous mode [ 164.327274][ T8379] veth0_macvtap: entered promiscuous mode [ 164.391149][ T8379] veth1_macvtap: entered promiscuous mode [ 164.517205][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.576462][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.610297][ T8379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.634543][ T8379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.649958][ T8379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.693580][ T8379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.816110][ T8790] netlink: 'syz.1.706': attribute type 7 has an invalid length. [ 164.863428][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 164.999752][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.043095][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.164455][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.218109][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.284040][ T8797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.565948][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'. [ 165.612718][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'. [ 166.201234][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.242544][ T8857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'. [ 166.446558][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.580602][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.996710][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.162413][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 167.451744][ T8896] sctp: [Deprecated]: syz.1.726 (pid 8896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.451744][ T8896] Use struct sctp_sack_info instead [ 167.459494][ T8900] netlink: 'syz.3.727': attribute type 3 has an invalid length. [ 167.507664][ T8900] netlink: 'syz.3.727': attribute type 3 has an invalid length. [ 167.578086][ T8900] netlink: 'syz.3.727': attribute type 3 has an invalid length. [ 167.578898][ T8901] netlink: 'syz.3.727': attribute type 21 has an invalid length. [ 167.585819][ T8900] netlink: 'syz.3.727': attribute type 3 has an invalid length. [ 167.697681][ T8900] netlink: 'syz.3.727': attribute type 3 has an invalid length. [ 167.727595][ T8900] netlink: 'syz.3.727': attribute type 3 has an invalid length. [ 167.735365][ T8900] netlink: 'syz.3.727': attribute type 3 has an invalid length. [ 167.785564][ T8900] netlink: 'syz.3.727': attribute type 3 has an invalid length. [ 167.839885][ T36] bridge_slave_1: left allmulticast mode [ 167.866709][ T36] bridge_slave_1: left promiscuous mode [ 167.893190][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.963154][ T36] bridge_slave_0: left allmulticast mode [ 167.987191][ T36] bridge_slave_0: left promiscuous mode [ 168.012947][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.046199][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.059969][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.068450][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.076465][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.089301][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.435259][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.446067][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.457838][ T36] bond0 (unregistering): Released all slaves [ 169.200210][ T8959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.740'. [ 169.263646][ T36] hsr_slave_0: left promiscuous mode [ 169.287662][ T36] hsr_slave_1: left promiscuous mode [ 169.294364][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.303578][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.313329][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.323236][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.361347][ T36] veth1_macvtap: left promiscuous mode [ 169.372762][ T36] veth0_macvtap: left promiscuous mode [ 169.383819][ T36] veth1_vlan: left promiscuous mode [ 169.391409][ T36] veth0_vlan: left promiscuous mode [ 170.137573][ T5841] Bluetooth: hci0: command tx timeout [ 170.212652][ T36] team0 (unregistering): Port device team_slave_1 removed [ 170.265014][ T36] team0 (unregistering): Port device team_slave_0 removed [ 171.210328][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'. [ 171.243561][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.749'. [ 171.267026][ T9022] netlink: 92 bytes leftover after parsing attributes in process `syz.4.749'. [ 171.349977][ T9022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.749'. [ 171.390749][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 171.759156][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 171.821240][ T9041] netlink: 1 bytes leftover after parsing attributes in process `syz.3.754'. [ 171.835856][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.866808][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.876281][ T8924] bridge_slave_0: entered allmulticast mode [ 171.902861][ T8924] bridge_slave_0: entered promiscuous mode [ 171.969305][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.976518][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.031819][ T8924] bridge_slave_1: entered allmulticast mode [ 172.050800][ T9063] netlink: 4816 bytes leftover after parsing attributes in process `syz.1.758'. [ 172.064057][ T8924] bridge_slave_1: entered promiscuous mode [ 172.090510][ T9065] netlink: 4816 bytes leftover after parsing attributes in process `syz.1.758'. [ 172.212034][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.225054][ T5841] Bluetooth: hci0: command tx timeout [ 172.280950][ T6743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.309859][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.355587][ T6743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.418771][ T6743] ------------[ cut here ]------------ [ 172.424497][ T6743] WARNING: CPU: 0 PID: 6743 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 172.435088][ T6743] Modules linked in: [ 172.439195][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: kworker/u8:11 Not tainted 6.15.0-syzkaller-07817-gb56bbaf8c9ff #0 PREEMPT(full) [ 172.451165][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.461962][ T6743] Workqueue: cfg80211 cfg80211_event_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 172.467785][ T6743] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 172.473989][ T6743] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 c2 a2 00 cc e8 a2 56 fc f6 90 0f 0b 90 eb bd e8 97 56 fc f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 87 56 fc f6 90 0f 0b 90 e9 de fd [ 172.496140][ T6743] RSP: 0018:ffffc9001bf3f8e0 EFLAGS: 00010293 [ 172.503537][ T6743] RAX: ffffffff8ac3a459 RBX: dffffc0000000000 RCX: ffff888023f70000 [ 172.511611][ T6743] RDX: 0000000000000000 RSI: ffffffff8d96be21 RDI: ffffffff8be26400 [ 172.520371][ T6743] RBP: ffffc9001bf3f9b8 R08: ffffffff8fa0b1b7 R09: 1ffffffff1f41636 [ 172.528504][ T6743] R10: dffffc0000000000 R11: fffffbfff1f41637 R12: ffff8880271a8d90 [ 172.536507][ T6743] R13: 1ffff920037e7f24 R14: ffff888024f63338 R15: 0000000000000006 [ 172.545076][ T6743] FS: 0000000000000000(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 172.555092][ T6743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.561758][ T6743] CR2: 0000555559b5b5c8 CR3: 0000000034692000 CR4: 00000000003526f0 [ 172.569794][ T6743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.578539][ T6743] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.586555][ T6743] Call Trace: [ 172.589901][ T6743] [ 172.593971][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.600108][ T6743] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 172.606057][ T6743] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 172.612697][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.618030][ T6743] cfg80211_process_wdev_events+0x38a/0x4f0 [ 172.623964][ T6743] cfg80211_process_rdev_events+0xa1/0x110 [ 172.629856][ T6743] cfg80211_event_work+0x2c/0x60 [ 172.634839][ T6743] ? process_scheduled_works+0x9ef/0x17b0 [ 172.641250][ T6743] process_scheduled_works+0xae1/0x17b0 [ 172.646932][ T6743] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.653156][ T6743] worker_thread+0x8a0/0xda0 [ 172.657861][ T6743] kthread+0x70e/0x8a0 [ 172.661967][ T6743] ? __pfx_worker_thread+0x10/0x10 [ 172.667120][ T6743] ? __pfx_kthread+0x10/0x10 [ 172.672440][ T6743] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.677723][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.682948][ T6743] ? __pfx_kthread+0x10/0x10 [ 172.687646][ T6743] ret_from_fork+0x3fc/0x770 [ 172.692284][ T6743] ? __pfx_ret_from_fork+0x10/0x10 [ 172.699329][ T6743] ? __switch_to_asm+0x39/0x70 [ 172.704146][ T6743] ? __switch_to_asm+0x33/0x70 [ 172.710407][ T6743] ? __pfx_kthread+0x10/0x10 [ 172.715047][ T6743] ret_from_fork_asm+0x1a/0x30 [ 172.720918][ T6743] [ 172.723971][ T6743] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.731314][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: kworker/u8:11 Not tainted 6.15.0-syzkaller-07817-gb56bbaf8c9ff #0 PREEMPT(full) [ 172.743235][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.753296][ T6743] Workqueue: cfg80211 cfg80211_event_work [ 172.759056][ T6743] Call Trace: [ 172.762338][ T6743] [ 172.765277][ T6743] dump_stack_lvl+0x99/0x250 [ 172.769893][ T6743] ? __asan_memcpy+0x40/0x70 [ 172.774503][ T6743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.779724][ T6743] ? __pfx__printk+0x10/0x10 [ 172.784353][ T6743] panic+0x2db/0x790 [ 172.788275][ T6743] ? __pfx_panic+0x10/0x10 [ 172.792794][ T6743] ? show_trace_log_lvl+0x4fb/0x550 [ 172.798015][ T6743] ? ret_from_fork_asm+0x1a/0x30 [ 172.802963][ T6743] __warn+0x31b/0x4b0 [ 172.806956][ T6743] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 172.812512][ T6743] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 172.818067][ T6743] report_bug+0x2be/0x4f0 [ 172.822405][ T6743] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 172.827982][ T6743] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 172.833539][ T6743] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 172.839107][ T6743] handle_bug+0x84/0x160 [ 172.843360][ T6743] exc_invalid_op+0x1a/0x50 [ 172.847880][ T6743] asm_exc_invalid_op+0x1a/0x20 [ 172.852738][ T6743] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 172.858900][ T6743] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 c2 a2 00 cc e8 a2 56 fc f6 90 0f 0b 90 eb bd e8 97 56 fc f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 87 56 fc f6 90 0f 0b 90 e9 de fd [ 172.878507][ T6743] RSP: 0018:ffffc9001bf3f8e0 EFLAGS: 00010293 [ 172.884585][ T6743] RAX: ffffffff8ac3a459 RBX: dffffc0000000000 RCX: ffff888023f70000 [ 172.892657][ T6743] RDX: 0000000000000000 RSI: ffffffff8d96be21 RDI: ffffffff8be26400 [ 172.900634][ T6743] RBP: ffffc9001bf3f9b8 R08: ffffffff8fa0b1b7 R09: 1ffffffff1f41636 [ 172.908622][ T6743] R10: dffffc0000000000 R11: fffffbfff1f41637 R12: ffff8880271a8d90 [ 172.916606][ T6743] R13: 1ffff920037e7f24 R14: ffff888024f63338 R15: 0000000000000006 [ 172.924612][ T6743] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 172.930188][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.935401][ T6743] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 172.941310][ T6743] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 172.947203][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.952424][ T6743] cfg80211_process_wdev_events+0x38a/0x4f0 [ 172.958332][ T6743] cfg80211_process_rdev_events+0xa1/0x110 [ 172.964144][ T6743] cfg80211_event_work+0x2c/0x60 [ 172.969095][ T6743] ? process_scheduled_works+0x9ef/0x17b0 [ 172.974834][ T6743] process_scheduled_works+0xae1/0x17b0 [ 172.980427][ T6743] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.986446][ T6743] worker_thread+0x8a0/0xda0 [ 172.991070][ T6743] kthread+0x70e/0x8a0 [ 172.995151][ T6743] ? __pfx_worker_thread+0x10/0x10 [ 173.000285][ T6743] ? __pfx_kthread+0x10/0x10 [ 173.004898][ T6743] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.010115][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.015323][ T6743] ? __pfx_kthread+0x10/0x10 [ 173.019929][ T6743] ret_from_fork+0x3fc/0x770 [ 173.024540][ T6743] ? __pfx_ret_from_fork+0x10/0x10 [ 173.029671][ T6743] ? __switch_to_asm+0x39/0x70 [ 173.034444][ T6743] ? __switch_to_asm+0x33/0x70 [ 173.039230][ T6743] ? __pfx_kthread+0x10/0x10 [ 173.043837][ T6743] ret_from_fork_asm+0x1a/0x30 [ 173.048623][ T6743] [ 173.051971][ T6743] Kernel Offset: disabled [ 173.056300][ T6743] Rebooting in 86400 seconds..