last executing test programs: 35.432897723s ago: executing program 3 (id=233): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x2a, 0x2, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x2, 0x0}}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000200)={0x2, 0x100, 0x10, &(0x7f0000000180)=""/16}) 35.376023679s ago: executing program 3 (id=234): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r2 = accept4$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) r3 = accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10, 0x400) r4 = socket$inet(0x2, 0xa, 0x30cc) getsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x1, 0x3, 0x0, 0x4, "14271ab5dc10111cee15f148895a65f4c637e107201eef4742597cd93cd9aa8c452e1fad24dafd6ad2495d9d13fdd189ba0cb3"}, 0x43) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r0}, 0x18) close(r3) splice(r4, &(0x7f0000000340)=0xfffffffffffff4c4, r1, &(0x7f0000000380)=0x100000000, 0xc, 0x5) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r6, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "83b04e036a2356c5c5697c728fcf1040"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "7a9d44969726edbb47021a95eb0575bc"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x90) r7 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x3, 0x5, 0x1, @remote, @mcast2, 0x8, 0x10, 0x1, 0xd}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) getpeername$packet(r0, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c40)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d00)={'syztnl2\x00', &(0x7f0000000c80)={'gretap0\x00', 0x0, 0x40, 0x700, 0x6, 0x28, {{0x17, 0x4, 0x0, 0xb, 0x5c, 0x66, 0x0, 0x6e, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x33, 0x0, [{0x5, 0xa, "d78f6d74de1315a5"}, {0x5, 0x5, "40b3f2"}, {0x5, 0x4, "47d9"}, {0x6, 0xc, "c66ea3b31a73b418ea34"}, {0x5, 0xe, "6e4460ada94ac19c15a28637"}]}, @timestamp={0x44, 0x14, 0xc7, 0x0, 0x5, [0x5, 0x7, 0x80, 0x9]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001cc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x84040000}, 0xc, &(0x7f0000001c80)={&(0x7f00000012c0)={0x9bc, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff8, 0x0, 0x1, 0x401}, {0x5, 0x81, 0x3, 0x6}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x28, 0x3, 0x7, 0x5}]}}}]}}, {{0x8, 0x1, r11}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r13}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x35}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7d79}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x59}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x9bc}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) 35.035551015s ago: executing program 3 (id=242): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20315}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 24.60821653s ago: executing program 3 (id=242): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20315}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16.274264238s ago: executing program 3 (id=242): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20315}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.576414694s ago: executing program 1 (id=584): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}, 0x1, 0x0, 0x900}, 0x0) 5.431959848s ago: executing program 1 (id=587): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x4, 0x0, 0x10, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4e, &(0x7f0000000380)={@remote, @remote, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg$unix(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './cgroup/../file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 5.193046918s ago: executing program 1 (id=590): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) 5.139520483s ago: executing program 3 (id=242): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20315}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.243323206s ago: executing program 1 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r4}]}, 0x28}}, 0x0) (async, rerun: 64) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000007f000014001a80100005800c000580080001"], 0x34}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x34c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1b8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa1, 0x3, "60bb7e6490a8f8c1dc7458947bc04772c8f78deeb88d6ba1b5f58604fcf0a7b06b373c104505bde1dbd407ff4f9495e1a6587b3246f302be8cfa43507156526256cfa038464be154f83b6abc5b9538a13bbeee131922ecfccef3964beeb7b2f5aa134f3c3ca5856c0617cf309df15f19822279dde6a1c49a658d144989b0d98eef60b51841359cc0be18066be7665cc99f22de9e752b7eedc97f1d1308"}, @TIPC_NLA_NODE_ID={0xc8, 0x3, "2d940f22265bfecea423be2a63ea75f2b12dd71eb2a94d98d6e46e4d059322d80a2650a0663fab5f3bcf37643f81c8662f23d3aed7fb37307db2c5f60bd8b7729bb73c7751699c0fc1715816e6e790a15032c2796cc8dbf7361d41cbf2b0aeb82ba512a747275bfa00d7d52fa4e307d0a161d0f19455bfb314f41eedf44ea16607158e861e61b16fa585c6467074b15190d34ccb1df3e60fbab36f1142e3b5b2a27cc72d805b69e88fe739d110c3d3d190ddb1882d34c730f9b2f13e889bb8c64039d63a"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "18a5a89a80fc5e39b95f449247d0559bd9ea2f3989a0a3"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x219}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x74, 0x3, "f80420c9a77bef89a72fce391993949a5f3470c7b0f458a581ffab4bc2aa8fd11d5d56e8bedb6ec81306cfd7d3064173ad5df2d6f27dfc624699aaf13962773244176907403d66bbd7acb8ba1432789afb866848089d494f8e570cf09ba0f8fe85e6b08ee689d4daa1c9c9db01bb2b86"}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "15d883356ebadeca2ab0b942f7ae44407940f4398d24baba3d39025079e3a9418485c2ac502b7cc40283cf696e04af60c5544b8e7e2280eaed1b55577c74a0df3be9d99215479f62fd9019e4d732cb41386139d57265a28c5bacbaf963068028a67fcda477f0c59f756f521fe8d650e1b8e085b940148d6744e1dc6637423166617f7ca262471d9ffbe9eeec36a9b13a2f2c5f057223bf265ac40531a65b88958f09ac932c9c2dafdf835112291adb0030954a076bb16392da2dc37d77d90b"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "e750ca2486ebe237a8963d97e35a69093fcd5f98a0e108291fdbdc"}}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20894) r10 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x458, 0x98, 0x0, 0x0, 0x0, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x190}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x228}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x58}, {0x0, "d1a1"}}, @common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_macvtap\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000640)={0x0, 0x5d, "204a2c23580be1fb80da3da39962d4664989ba399ce399322b69c72455a150caa8eeb2a7e630bc0d54c3d8a13445fb35998f5c88a1718c2c50d733fb9d21f751eda81bf7e308de47aa23bdb1052fe223c0fcf97c83cb0cdee833a7eaf0"}, &(0x7f00000006c0)=0x65) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000700)={r12, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x3ed}}, 0x8, 0x7, 0x3, 0x4, 0x2, 0x4, 0xe}, 0x9c) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) r13 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000007c0)=0x7, 0x4) (async) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3.776468665s ago: executing program 1 (id=607): syz_emit_ethernet(0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000008100440088631f77617a3997b6c6df2983541a7ba6c7b3c3f87f12984b241f12494bf26a916d8518f795cd6c7cc05ecedbf29a4e8939aa959414af61ba40b1db32acaf63b4f8a3da0e67ebbdd7ac2aacb50b7fbd4b5fdf40248ed6fd07aab91c3e1cdfc13b7a54af83673d513982ec175c8beea5fe3e8ae4c5d23071630a19cb447041f1eec891ed76c5d893111c7dad8a3c3eabfe87038566baf7082d32ca569acfb0b9cf0b0eab7b5e08cb5e3aa1f08a989e04811d3f3c75857ab6bf301e0353fb30c6836f532935e5ed714a285b"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0x5, &(0x7f0000001740)={@dev, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100001000000000000000000fe8000004714f8fc3c09d6f71d440000000000000000000000bb00000000000000000000000000000001000000000000000000ff070000000000eee9466cbb1c1bab195cbd1a72bb0ec15659b34693a48c5f2badbe049766faba90802393434d5d50ce6c42002bda79d1edf6f5fa6f087ee9ced7461a5c9694260429", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000000000000000000000000000000000000002000000"], 0x154}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5, 0x6, 0xcb}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000001000003000000000800040001000000", 0x24) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x1, 'wlan0\x00'}) socket(0x2b, 0x1, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socket$inet(0x2, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0xfff, 0x4000002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x26, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 2.783064133s ago: executing program 1 (id=612): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x80) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x8a, '\x00', r7, r8, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) r9 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, &(0x7f0000000000)) r10 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00'}) connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e23, @remote}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@deltaction={0xe4, 0x31, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9c}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x99, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcf3}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff8000}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0xe4}}, 0x0) 2.666963109s ago: executing program 0 (id=614): r0 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) (async, rerun: 32) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async, rerun: 32) r4 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f00000000c0)=""/83, &(0x7f0000000000)=0x53) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$qrtr(r4, &(0x7f0000000040), 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8814}, 0x808) recvmmsg$unix(r9, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2}}], 0x1, 0x40010024, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003840)=ANY=[@ANYBLOB="40000000100021040000000000000000000000002390dc1c32d878e4937fe62d03be6a533383b8636e5ff77e30c8263b8412854cea98b09984ed2af07e569a7ce18c2044e3dc9115b86485250742fc00331fead0d834fd622198f6edb414548da69db7b73267a0a533543efb17160d7994bda8b63cc8aa9470a81002df0093410efcedd1ce824b94a1877bdafd67f1fb558cd6bb22ea16da3a4aedb049dcdf5d0465356d41ab8b0a590e3afa18a06275c344fda4fa24cf04ca611d56dd446ea650775ccfd0ee0ea1f358c2", @ANYRES32=r7, @ANYBLOB="000000000000000020001280080001006772650014000280060011000000000006000f0056080000"], 0x40}}, 0x0) (async, rerun: 32) connect$qrtr(r4, &(0x7f0000005dc0)={0x2a, 0x0, 0x3fff}, 0xc) (async, rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100ffffffff1c00048005000300010000000500030000000000050003000700000008e60200030000001015c5ddac75780df4c2e918523b2fa2c93aecc0e0d69e40e7466d8069e8aa3a64e955eb1b5552c86e95a94480c0cc13a734b2e31715230b40293a137c07ac4afbc0a27848a607eb1affb716863df6e8ce6596707b155ee34c62977c4ad17475d9bca7f02ab9ad5f49076b7c8862e422bd365803d07e49d4c8b49254e9a956352bc01c62d555241809c009685b55ff8aa89592bfb405a6e663728fcca77af7a051e0000870800311dbc451bb0a1902e1c9be68956993fa341fdcd95c4a"], 0x40}}, 0x0) r13 = socket$qrtr(0x2a, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000006080)=[{{&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x2, &(0x7f0000006440)=""/144, 0x90}, 0x3}, {{&(0x7f0000000300)=@hci, 0x80, &(0x7f00000036c0)=[{&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x6, &(0x7f0000006040)=""/10, 0xa}, 0x7fff}, {{&(0x7f0000003780)=@qipcrtr, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003800)=""/20, 0x14}, {&(0x7f0000006240)=""/252, 0xfc}, {&(0x7f0000003940)=""/178, 0xb2}, {&(0x7f0000003a00)=""/112, 0x70}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/49, 0x31}, {&(0x7f0000005ac0)=""/230, 0xe6}], 0x8}, 0x3}, {{&(0x7f0000005c40)=@x25={0x9, @remote}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005cc0)=""/202, 0xca}, {&(0x7f0000003740)=""/50, 0x32}, {&(0x7f0000005e00)=""/145, 0x91}], 0x3, &(0x7f0000005f00)=""/54, 0x36}, 0xffff7e9b}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000005f40)=""/120, 0x78}], 0x1, &(0x7f00000061c0)=""/85, 0x55}, 0x8}], 0x5, 0x2, 0x0) connect$qrtr(r13, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) 2.444625456s ago: executing program 0 (id=617): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x80, &(0x7f0000001180)=[@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, @in6={0xa, 0x4e24, 0x46e43859, @mcast2, 0x7a36}, @in6={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e20, 0x1e39f75f, @private2, 0x19c8000}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "1f087db966058f66908611a2da3e15d07ea4bbea3d646bddcbf88d74a8f9b16f89ac1296a3ebe1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe659aabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf93360c81be9c56781a57bf6ac5bd26db48b73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}]}}]}, 0x138}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211]}, 0x6c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000280)={'xfrm0\x00', @local}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000005c0), 0x10) recvmmsg(r9, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x79}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff6a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.301040963s ago: executing program 2 (id=619): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2b8000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth1_to_batadv\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 2.093153738s ago: executing program 2 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000000c0)={&(0x7f0000000200)="0fed11034b53edfc49d840290c910bb8549632940da0675b5fa817378e70dcdadafb0a57a612bafb66b0e2e3c0639a94f5a7b2d3f519d6068f24ab73cf840f8a99020c1b3a9e24592f6bc74cc832325fc9ae4ffe15a430927d97c9d1ddb7318a255376e32823c80cce968737c585b108fb4abb23861e03803a50136b7b769664059aa15e5d36a1a9e35d31680ca2d88fd16abd79964a98f78d35bc58939e198cee1f8da7812870c5932f4c702e", &(0x7f0000000680)=""/129, &(0x7f0000000840)="dd11cc62730d8f27a21c44de1cd6e69b85a78379e260ccf673c8986bcb05701451870f8d68b9996b3fdfb76695f5ebd88a20d44e1c5c064f3e1a667e10f756de9533ab378e41acbd9c96c646670afa4bde09c49b37183800ea53d4308adc55fd39f3365b4be83c242ddf5a627c8fd8aedb9df7de6d6c6f6ad71405a22e16754d6c8ad2ab3a1808d0b61d58b39ab7ede037e274b142011f25639314ccb8f81d4b419a3bbafc0496df3a324e8b0f4656accf2aa28881622d8f49a9a48cf2a9561cc0e5a7c04d9c8c6560", &(0x7f0000000a40)="d76cf9b4622293515bb0388cea20f082b0faeacd511cb04106c00714871d9efae4857e9f19fc9b2ffea8096d67c19b8f22e36aa959fa6b3780084d377e458fe2bf217e952d63e2d3cd189670529cf9953e9f05eb6f1b002d9aa948911c1eca52fe20c08868cc5c99036b6db35735ffbee455758902af090a60006ccbb50247a73d2b3ae87250944f6f0d0cd3fbfe28fc44b0930c2867dc4077139cfb11a05cba5ba1e116b9b967133c465cda35c0972814b9468a6e157dbad21735f40380339811495e17c4e1c65fed37740cbab47bcf39355ae2ad15c529211fb214d1d411c2dca60a209695873804d445c0eccc3e", 0x9, r0}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3}, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000100020075"], 0x8) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x1, 0x4, 0xa, 0x0, 0x30, 0x1}]}, &(0x7f0000000980)='syzkaller\x00', 0x9, 0x34, &(0x7f0000000b40)=""/52, 0x41100, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x9, 0x5, 0xc}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000c00)=[{0x0, 0x4, 0x7, 0x8}, {0x2, 0x3, 0xa, 0x9}, {0x3, 0x10000, 0x6492, 0x8}, {0x0, 0x2, 0xc, 0x4}, {0x0, 0x1, 0x3, 0x2}, {0x4, 0x4, 0x9}, {0x0, 0x2, 0xb, 0xa}, {0x3, 0x5, 0x1, 0x3}, {0x4, 0x4, 0xf, 0x1}, {0x0, 0x5, 0x10, 0x9}], 0x10, 0x95e, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083d0d54765c9000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b700000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="4408e8d1f7865801acf51c6fcec4e1f431c6691bee1d97b7d5142bb2f78cc02fb8ff89026570ff5f76c227d9979814d98adec2882e1b5c49a0ec379ac13239f7e43a4d9e6cc3022794fa9a5f4bc8ad765989180e72029d5178d89fba43be6245b7eff6bb86e70c31a21136c77fa086268e386fa41af3c16d048d9063b16c86025837b681c9323b71d60aeae07455f8659539292ca2dd87189ee32f93771c6c5ac13ec845af84c266bc7e5bef4412a9177b195ec607b2988ffa0ae195dfc9c7d452a83b9daa91000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup, r3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9, r3, 0x0, 0x0, 0x0, 0x0, 0xa8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x32600) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x40080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 2.074122835s ago: executing program 4 (id=621): syz_emit_ethernet(0x305, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@mpls_mc={0x8848, {[{0x8000, 0x0, 0x1}, {0x48, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8}, {0x3, 0x0, 0x1}, {0x2}, {0xb, 0x0, 0x1}], @ipv6=@dccp_packet={0x2, 0x6, "db03ac", 0x2b3, 0x21, 0xff, @local, @mcast1, {[@srh={0x87, 0xa, 0x4, 0x5, 0xf9, 0x8, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}, @fragment={0x1d, 0x0, 0x9, 0x1, 0x0, 0x15, 0x68}, @routing={0x89, 0x14, 0x0, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x41}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0]}, @routing={0x2f, 0x6, 0x2, 0xf2, 0x0, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}, @fragment={0x5c, 0x0, 0xb0, 0x0, 0x0, 0xa, 0x65}, @srh={0x62, 0xc, 0x4, 0x6, 0x33, 0x0, 0x9, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x3b, 0x0, 0x6, 0x0, 0x0, 0x14, 0x64}], {{0x4e23, 0x4e24, 0x4, 0x1, 0xc, 0x0, 0x0, 0x3, 0x6, "ed1227", 0x4, "18a57d"}, "032d2a4d52f21cf5dd949b63e6e49242a4430d564aa9c9de13063173b3e9c29934dda82574d147da91f8398008cb70065ac46f716284e1943955a4fd3d5f30d2aa7886b42aa840f30bdd89b91efd8a421ec4aaac6fdabd1983d28c3fff7a8a833edcde7738544f8111feb05e46c846998a7c7cd75c3706793a0e2418b81b0fd6ebcc616ba83880a6f032160964f7a5d561e52f53798aaf0a6d7442de7aeba751d7fefb41378372de7f66ddf0d588409411ae40cff671839188d4e9941ec7c8e49019e25ea035968acb0c05e2af920e47d64209e6fa49a5be375fe875724728064fdaf68ac23db2b8d6e479"}}}}}}}, &(0x7f0000000340)={0x1, 0x1, [0x6d1, 0x3b2, 0xf30, 0x2a]}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x80, 0x6, 0x18, @local, @remote, 0x8, 0x700, 0x4, 0x10001}}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000480)={0x0, 0x8, 0x9, 0x4, @vifc_lcl_ifindex=r2, @empty}, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000004c0)={0xfff, {{0xa, 0x4e22, 0x6c3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000580)=0x9, 0x4) r3 = accept$nfc_llcp(r0, &(0x7f00000005c0), &(0x7f0000000640)=0x60) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000680)={0x3, 0x6, 0x9, 0x1, 0x3}) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000006c0)={0x0, 'team_slave_1\x00', {0x1}, 0x601}) syz_extract_tcp_res$synack(&(0x7f0000000700)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1e7, &(0x7f0000000740)={@empty, @broadcast, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x4, 0x6, '02]', 0x1ad, 0x6, 0x1, @empty, @loopback, {[@dstopts={0x62, 0x9, '\x00', [@enc_lim, @generic={0x8, 0x20, "44833a8c9fb3a019b1b0698455fb1ff5325581ac65174075401e14f60274d205"}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0xfffff8b0}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x7fff}]}, @routing={0xff, 0x12, 0x1, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xa}, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast1]}, @fragment={0x3c, 0x0, 0x4, 0x1, 0x0, 0x16, 0x68}], {{0x4e22, 0x4e24, r4, r4, 0x1, 0x0, 0xf, 0x1, 0xf621, 0x0, 0x81, {[@md5sig={0x13, 0x12, "6ee872e3574de6ed41ae7f8376c33df2"}, @eol, @md5sig={0x13, 0x12, "c82f1837d9e83a9f57deb66473f86a79"}]}}, {"75f1532ab467544d93f0de8ccabff166e846081938098ce3667ff12207dce8ce885f489da12e172bc8a4ecda4a24e05743408c9427398c429f1a50fbb415eaf486ce3662a7adbffb30e81c8dcf51b8042308115bf412146eae2fab775b69ca3b6819c7b3444bfe5cde74175f42b98eb236db2cb6b9ad356199"}}}}}}}, &(0x7f0000000940)={0x0, 0x4, [0x386, 0x78a, 0x961, 0x7d5]}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000980)={@in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x3, 0x0, "5b088fd314213978ac5991d0e6d20c7f77a33fa21f72d61ceff8b6201b63a3fa98c42bc93ce63c9a1c259bd06bf764a25c9bb41581aa6bf976bc84101d651f3aa92f6797ca8cecacc2450fe2c75f26c3"}, 0xd8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x200000, 0x0) write$tun(r5, &(0x7f0000000ac0)={@val={0x0, 0x1a}, @val={0x3, 0x0, 0xfffd, 0x9, 0x7ff}, @llc={@snap={0xab, 0xab, "ee", "32894b", 0x22eb, "02d1f4b612b434d10f5839f6064cd9ae73f79b7ce6ecb3b5b4347cdef5f31fed7f62e28f82339a312491ebadf1603bf6cd18d425fc6f60f75f56624f2e8acc57c42c95d869f29890ea55286fd8c9dc5db293dcb0960dbe12c11e505e8a3d58a4f1fbdd7d3d3b59640859c5d9d450398cad2048a16d3d52afd9c0940bc1c05a6e7bce11dafa4bdede8fe2f22586d9cdfa215060b999dd7e5ff5e72487a328a1200d8c0f40d55f45240280175a2e9351b9985e75bef17755fd22fe0495c98ec31866c12452f23dcba060ce0b312d6362dffb0136160ad4ed9f26eef1846c2c73b356038d0a0c8f0a6afa46da"}}}, 0x101) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x5e, &(0x7f0000000c80)={@random="3569755dda4b", @local, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x3}}, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0xe, 0x0, 0x0, 0x0, "72c639a71346a77be230a06be9fed69826c6a615febe0f06432f5c39033fbcc7ace19614cfebd5bef9462ae8dcf85abdb31a1774f9bd8f2346356f575d064a90"}}}}, &(0x7f0000000d00)={0x1, 0x1, [0x65e, 0x51c, 0x855, 0xf78]}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000d80)={'broute\x00', 0x0, 0x0, 0x0, [0x70d, 0x10000000000, 0xe58, 0x9, 0x4, 0x7], 0x4, &(0x7f0000000d40)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ec0)={'ip6gre0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', r2, 0x29, 0x4, 0x7, 0x1000, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x80, 0x0, 0x6}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r7, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40006}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001040)={{0x2, 0x4e21, @multicast2}, {0x6, @random="929d0b711767"}, 0x20, {0x2, 0x4e22, @loopback}, 'pimreg\x00'}) syz_extract_tcp_res$synack(&(0x7f00000010c0), 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000001100)={@local, r6}, 0x14) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001180), r1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x34, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x12) close(r3) write$tun(r5, &(0x7f0000001280)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @remote, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x38}}}, 0x34) 1.984855428s ago: executing program 4 (id=622): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) 1.981118112s ago: executing program 0 (id=623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) 1.755247047s ago: executing program 0 (id=624): syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)={0x20, 0x28, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x3, 0x20000000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000b80)=ANY=[@ANYBLOB="30e0848b1d67c4927c62fd3f6a", @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf252500000006000400000000000a0001007770616e30000000060006000200000005002b0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x16c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6d}}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8593f39c8a46f696a7d2fbf4b26d3a14"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="233b82acebffb3d6c024f64b2114276a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="10a52f0f6a2496eb513aa56fefc84324"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a82e29a866ab5db2641879e384d83a1e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8b37d9e0feaff0d3c1ef9ef788f94b44"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b41947f19a560bd3bf1769cdb76bd3174171eda431a79f7d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400000}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ad2bdd06dda64b3f398826e854f7d36c"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c20b5cc9f437efc3eb4ec2e10296009f"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8bf868ff861350e2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bb77c9b81db36f34ce7ad46c62c613fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0a907fbd2dc7310f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a1c41267a34ee75"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd3d}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b175f6034eed87e66440fa62d12e89de8e3f42f3fa88b9e3bb81f1c3e30e97e3"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "657e1fd133718df9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "39d01e5df76fb911"}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000024}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000006ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000006d00)={0x0, 0x0, &(0x7f0000006cc0)={&(0x7f0000006c80)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x30, r10, 0x20, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x2e}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1c}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x26}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0xa80, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x800003f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x8c4, 0x2, [@TCA_CGROUP_POLICE={0x8c0, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x1, 0x6, 0xfffffff9, 0x3ff, 0xa8, 0x1, 0x0, 0x1, 0x4, 0x10, 0x0, 0x5, 0x1, 0xc, 0xd1, 0x3, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x7ff, 0x18000, 0x8, 0x6b097b, 0x10000, 0x8, 0xce, 0xfb72, 0x9, 0x5, 0x0, 0xfffffff9, 0xb, 0x1ff, 0x10001, 0x10001, 0x80000000, 0x2, 0x4b, 0xff, 0x3, 0x6, 0x8000, 0x3ab, 0x3, 0x8, 0x1, 0x7fff, 0x1, 0xb, 0x3ff, 0x4, 0x8000, 0x0, 0x6, 0x5, 0x9, 0xffff80b1, 0x5, 0x3, 0x6, 0x10, 0x0, 0x20a9e0a9, 0x610a, 0x6, 0xa, 0x1000, 0x1, 0xee, 0x5, 0x1, 0x80, 0x0, 0xa3, 0x5, 0x9dab, 0x3ff, 0x800, 0x7, 0x6, 0x7, 0x49, 0x9, 0x0, 0x1, 0x9, 0x4, 0xfffffffc, 0x5, 0x4, 0x7fff, 0xe01, 0x5, 0x5, 0xe3, 0x1, 0x5, 0x0, 0xc, 0xfe45, 0x0, 0x5, 0x40, 0x6, 0x6, 0xff, 0x605a, 0x20000000, 0x80000000, 0x2, 0xffffff0d, 0x3, 0x4b6, 0x7, 0x7, 0x7, 0x7, 0x1, 0xc8, 0x4, 0x9, 0x4, 0x7, 0x3, 0x7fff, 0xa, 0xff, 0xe04, 0x9, 0xf198, 0xe000000, 0xaa5, 0x3, 0x7, 0x0, 0x0, 0x2, 0x3, 0x9, 0x3, 0x9, 0x1, 0x2ca, 0x5, 0xf6d7, 0x7462, 0x9, 0xffffffff, 0xf6f2000, 0xc28, 0x0, 0x2, 0x0, 0x3, 0x9, 0x3, 0x3, 0xfffffffd, 0x4, 0x6, 0xd6, 0xffffff80, 0x7fff, 0x7, 0x3, 0x6, 0x100, 0x6, 0x6, 0x1, 0xfb, 0x8, 0x7d, 0x5, 0x6, 0x1, 0x0, 0x7, 0xb89, 0xffffffff, 0x3, 0x2, 0x8, 0x95d4, 0xd, 0x1, 0x7, 0x2, 0x3, 0x4, 0x4, 0xc3, 0x7, 0x2, 0x7, 0x80000001, 0x400, 0x1, 0x5a1, 0x4, 0x9, 0xdab, 0x7fff, 0x7, 0x80000001, 0x7, 0x9, 0x8, 0x0, 0xe5, 0xfffffff7, 0x9, 0x0, 0xfffffffe, 0xee, 0x8, 0x7f, 0x2b, 0x4, 0x80000001, 0x4, 0xfffe00, 0x8, 0x200, 0x19a7, 0xff, 0x3, 0x2, 0x0, 0x1b5, 0x0, 0x5, 0x33, 0x0, 0x2, 0x5, 0x12b, 0x1, 0x3, 0xe4cd, 0x3, 0xcf, 0x800, 0x8, 0x5, 0x0, 0x3ff, 0x4, 0xffffffd9, 0x7, 0x3ff, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x7, 0x7, 0x2, 0x2, 0x10, 0x5, 0x81bc, 0x8000, 0x9, 0x2, 0x0, 0xc, 0xff, 0x2841, 0x7, 0xfffffff9, 0x4, 0x9, 0xffffff6f, 0x1, 0xc1, 0xf9, 0x3, 0x7, 0x2, 0x800, 0xb, 0x4, 0x0, 0x80000001, 0xc22, 0xc81c, 0x6, 0xa, 0x4, 0xfffff69b, 0x3, 0x40, 0x7fffffff, 0xfffffff3, 0x7, 0x8, 0x5, 0x0, 0xf269834d, 0x7ff80000, 0x4, 0xbbda, 0x8, 0x1, 0x0, 0x5, 0x8, 0xfffffffb, 0x1ff, 0xb6, 0x3aacaf85, 0xe0, 0x0, 0x85d, 0x400, 0x3, 0x101, 0x1000, 0x6, 0x5, 0x6, 0x8, 0x2, 0xffffffff, 0xffff, 0x7434, 0x5, 0x64, 0x0, 0xfffffff7, 0x7, 0x800, 0x20, 0x9, 0x5, 0x6, 0x9f, 0x1, 0x9, 0x1, 0x1, 0x886, 0xfffffffb, 0x0, 0xffffaac8, 0x2, 0x7fffffff, 0xfffffff3, 0x3, 0x0, 0x8, 0x7fffffff, 0x2, 0xa, 0xfff, 0x200, 0x7ff, 0x2, 0x10000, 0x9c6, 0xa, 0x2da, 0x5, 0x9, 0xa3, 0x929b, 0x6, 0x9, 0x80000000, 0x7489c403, 0xa, 0x8, 0x5353, 0x496, 0x80, 0x8001, 0x7, 0x1, 0xd7e7, 0x6, 0x0, 0x2, 0x10000, 0x8, 0x6, 0x620, 0xff9, 0xa83, 0x3fffc00, 0x3, 0x798, 0x8, 0x1, 0xc415, 0x2, 0x8, 0x200, 0x40, 0x7, 0x98d, 0x401, 0x7, 0x6, 0x7207, 0x0, 0x9, 0x8000, 0x4, 0x9, 0x5, 0x4, 0x2, 0x7, 0x80000001, 0x0, 0x5, 0x6, 0xfffffffd, 0x401, 0xc, 0xcf2, 0x10000, 0x1, 0xffffffff, 0x9, 0x20, 0x0, 0x4, 0x6b2, 0xa, 0xfffff036, 0x40, 0x3, 0x9, 0x10001, 0x8, 0x0, 0x3, 0x6, 0x1d82a24e, 0x0, 0x3, 0x4, 0x8, 0x3, 0xffffffff, 0x800, 0x0, 0x7, 0x1, 0x4, 0x8a9, 0x10, 0x7fff, 0x1f1d, 0xdf9, 0x7ff, 0x400, 0x7ff, 0xc9db, 0xfffffffb, 0x42a, 0x8000000, 0x7, 0x50e, 0x2, 0x7, 0x0, 0x7, 0x4, 0xc0, 0x40, 0x9, 0x6, 0x1, 0xfffffc01, 0x1e5, 0x347, 0x7, 0x9, 0x0, 0xd, 0x80000000, 0x81, 0x3, 0x0, 0xffffffff, 0xddde, 0x0, 0xa82, 0x5, 0x2, 0x10, 0x4, 0x8e5c, 0x6, 0x7, 0xfffffff9, 0x4, 0x8, 0x3, 0x2, 0x1, 0x2, 0x8, 0x9, 0x8000, 0x7, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x12338cb2, 0x10000000, 0x7f, 0xaf, 0x277, {0x7, 0x1, 0x4, 0x7ff, 0x2, 0x3ba5}, {0xa, 0x3, 0xfff8, 0x1, 0x6, 0x80000000}, 0x400, 0x2, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x2, 0xfffffb8d, 0x8, {0xd4, 0x2, 0x31d, 0x3, 0xe06a, 0x1}, {0x4, 0x1, 0xff80, 0x4, 0x0, 0x2}, 0x9d, 0x7d1, 0x7fffffff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x148, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0xa8, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffff80}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x9, 0x6, 0x913, {0xd9, 0x1, 0x0, 0x2, 0x8b90, 0x5}, {0x4, 0x2, 0x911, 0x0, 0x7fff, 0x7}, 0x2, 0x10, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x10000, 0x1, 0x5, {0x1, 0x1, 0xb, 0x9, 0xd18e, 0x9}, {0x61, 0x1, 0x0, 0xac05, 0xf800, 0x4}, 0x4, 0x0, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x8c, 0x6, [@m_gact={0x88, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x59, 0x6, "55641602b40ee3f14821a9b235a01e4e0f4989c2d551d5f9ff6f0eddd36921be6afa82e9db57614a416c156c2cb15d990fa61d95a5c6443adc92478b48107e8afb4322a0e13d3d8a2d4c13705754d47bb694eb1f7d"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xa80}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r12, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r13 = socket(0x10, 0x803, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) sendto(r13, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r13, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGPGRP(r14, 0x8904, &(0x7f0000000540)=0x0) sendmsg$nl_generic(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000002100)={0x1208, 0x29, 0x200, 0x70bd2a, 0x25dfdbfc, {0x16}, [@typed={0xe9, 0xc9, 0x0, 0x0, @binary="25a07956cdcd5fe474cf6ed4724e3434218940387fd697aa843e9fa2acfbb54b9ea169794721184db2489a0e5debac39e84fb662752f07e00c2359c2398478bdf60d411a760502e965a05b2d0c3377650510b1c8c495d002b7a42c679040f1c5e201d2cafd5bae95ff19d7a774fac1f8f50c6aa99c4c22b2c727a613d2358f84ceaf796354ecb8957cd1f80f59e8eb9fafb0e1c6fb5f3342a15b54df5c8cadd685c171567114613a408b4207358110489a0cbd159c96d67a9012f54b5049b6186c87cb7289f93313d5fcde5e97ff73e3f5f0ce53c218d4a65e273dbf42d5c648d0039dc1ce"}, @nested={0x1107, 0x13e, 0x0, 0x1, [@typed={0xc, 0x122, 0x0, 0x0, @u64=0x400}, @generic="2a9ccc03a4d185593a3f9a783dd1285a6b479f0a5a7491a85a36fa72366b1685b43ef6c37828c9954fac1e0a54e9bfe271c1f4e01d66118e456f444419aa9964f2f32fce055b593a24946a48760e8bce6a05ad67bfe7257432fe7856f247ef299db5505166e8de5af80f795235a145d2c7115b12179559b4b1d38bc117fb295979e9e3d675597d593173ea38ccbb89ce21a60a5cb3fd26c15d1f0aebf19ce3354a77b2f8fea8ce337fd3b01b43d8b74858d674f101390a", @generic="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", @typed={0xc, 0xd4, 0x0, 0x0, @u64=0x6}, @typed={0x2b, 0xf6, 0x0, 0x0, @binary="25f7112f80d92a13491ad7a624bc49ffa4b4c75a6a8aa8f95210c746c00b8ba707da6c3a1b572f"}, @typed={0x8, 0xf6, 0x0, 0x0, @pid=r15}]}]}, 0x1208}, 0x1, 0x0, 0x0, 0x4c008}, 0x4000000) 1.680749727s ago: executing program 4 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x58, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000c000600e2e4f13c1c6d43c284f7fd6001000000000000000c00020000000000000000000400070208000100000000001afc2cb73c5871ff794abe8d60be8c805d121019710dceb8340650ec2be6f0b4262afb726817c251a29ffe56876c8894f05bfa293e319d1699176eb46a954e17dba9cae54255251c51178ff6177b912b68feed94f5afde1ca81c26786e12ec5a3bc389133f72467b1e6f5a3e928797420e33a33072b44566a0ea51221c9ff92e199e242aa974d4a7f59649f1263f5d11e264de22c872b242a32c8afa24dc6cf19073ec8218c4e13caf4d08bd80e18019d54a11df596c1134b07899ea62768127f11d911606bf9dfe9519b20a3d2147bc4852ff7b56bc1b42d40f612eddc79385b67049455983711200da83aac7643edbfdc08a0f98c58125f657d3c43a2a24746dd7a268efb38542c5bbfc65be"], 0x38}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x7, &(0x7f0000000080)={@multicast1, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0xfffffff9, 0x9, {{0x16, 0x4, 0x3, 0x1f, 0x58, 0x66, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @local, {[@timestamp_prespec={0x44, 0x4, 0x62, 0x3, 0x4}, @timestamp_prespec={0x44, 0x14, 0x3f, 0x3, 0x1, [{@empty}, {@broadcast, 0x7}]}, @ssrr={0x89, 0xb, 0x7e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @timestamp={0x44, 0x20, 0xf2, 0x0, 0xd, [0x0, 0x6, 0xaa, 0x1, 0x4, 0x2, 0x7d]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffef4, 0x2, {0xf, "00000f0000000000000100000e00"}}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x8, 0x1, 0xffff, {{0x3a, 0x4, 0x1, 0x4, 0xe8, 0x67, 0x0, 0x6, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xc}, {[@lsrr={0x83, 0x1b, 0xe, [@remote, @empty, @multicast2, @local, @remote, @empty]}, @lsrr={0x83, 0xf, 0x7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @noop, @end, @lsrr={0x83, 0x1b, 0xf8, [@multicast1, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x6b, 0xffffffffffffffff, [{0x6, 0xe, "62f31ee020b70c18e65ff11e"}, {0x5, 0x4, "1f9c"}, {0x1, 0x12, "0a4a00358cb633b1a2dce948bbad0ba0"}, {0x5, 0x9, "fe818813b3ce67"}, {0x6, 0xf, "18590286ae3fb8efbed703b1a6"}, {0x5, 0x12, "4982cc5cea6f31b7c3e365db03eff17c"}, {0x1, 0xc, "8a66fb2f7d0f5f8a9d61"}, {0x5, 0xb, "2eebc1286c3accd1ca"}]}, @cipso={0x86, 0x1f, 0x3, [{0x7, 0xa, "c8bfc172bdd71ed0"}, {0x1, 0xf, "7648af3126f51c1f213cbef065"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001700)=ANY=[@ANYBLOB="7c70efd54d47e4e6b8a8f27f951577", @ANYRES16=r13, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES32=r14, @ANYBLOB="b400028087000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000700240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="defd0100", @ANYRES32=0x0, @ANYBLOB="3c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="c40102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x47c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00'}) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)) 1.566526772s ago: executing program 2 (id=626): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa5}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4808) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x82, &(0x7f00000003c0)=ANY=[], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) shutdown(r4, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000380)=0x5, 0x4) 1.504389003s ago: executing program 2 (id=627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x4008092) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 293.000967ms ago: executing program 0 (id=628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0e86dd60fb080000140600010001000000000000000000000000aafe8000000000000000000000f0ff00aa40004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2080090780040"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 290.217295ms ago: executing program 4 (id=629): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x7, 0x0, 0x10000}, 0x31}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 210.613886ms ago: executing program 2 (id=630): syz_emit_ethernet(0x84, &(0x7f0000000040)={@multicast, @random="28feee412b8f", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x4a, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000094000000030a010800000000000000000100000009000300737a300000000060000c00dd4fde72eb7219ed07ad5757d75f58b9df6a9e19f90ef7b0aee49ba1abef6e774af772d7b167d3cf844a4607d3ad4ee7e671dc9b23832605cba56d9c84c545a1e56804d448bba30ae3ca263bdada99aeaf9acf8db4254e196eecb1930900010073797a3000000000080007006e617400140000001000010000000000000000000000000a"], 0xdc}}, 0x10) 206.728242ms ago: executing program 4 (id=631): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xaca1, @remote, 0x9}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r3, 0x8, 0x30}, &(0x7f00000000c0)=0xc) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x891b, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xaca1, @remote, 0x9}]}, &(0x7f0000000180)=0x10) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r3, 0x8, 0x30}, &(0x7f00000000c0)=0xc) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x891b, 0x0) (async) 37.065261ms ago: executing program 0 (id=632): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x12}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="24000000010001", 0x7) 10.374077ms ago: executing program 4 (id=633): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001000)={'wpan0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x1b, 0x8a, 0x4000069}, 0x2c) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x2004c050) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x6e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400c332c3dfc16783276a48fd8cb1a45d4d01fff5000000e000000200"], 0x54}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r2, @ANYBLOB="010628bd7000fddbdf25310000000500350003000000050033000420000008000200", @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0x4802) 0s ago: executing program 2 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000013c0)={0x90, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_SSID={0x23, 0x34, @random="cb3dfd7902ae1513e2b974761d08814e0b1b3c1bdcc8e63442540e2f608bbb"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x7, 0x0, {0x4, 0xd, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x9, 0x8}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x3, 0x2, 0x0, {0xb, 0x4, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x400, 0x84}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000000}, 0x4801) (async) poll(&(0x7f0000000200)=[{r0, 0x81}], 0x1, 0x8000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr={0x3, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61]}}, &(0x7f00000003c0)=""/4096, 0x2a, 0x1000, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', r3, r5, 0x4, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 54.180425][ T5833] cgroup: Unknown subsys name 'net' [ 54.367514][ T5833] cgroup: Unknown subsys name 'cpuset' [ 54.375756][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.659092][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.176143][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.201020][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.210040][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.217792][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.225723][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.233616][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.236915][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.241657][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.248721][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.255925][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.270425][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.281594][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.281790][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.296439][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.302581][ T5862] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.304749][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.311722][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.317727][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.325817][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.340154][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.342999][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.347535][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.357524][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.363149][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.368604][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.384736][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.391513][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.393404][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.413027][ T5858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.420401][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.799005][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 59.834067][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 59.895602][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 59.923193][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 59.987993][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 60.037491][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.045485][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.052778][ T5861] bridge_slave_0: entered allmulticast mode [ 60.060080][ T5861] bridge_slave_0: entered promiscuous mode [ 60.105549][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.114176][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.122032][ T5861] bridge_slave_1: entered allmulticast mode [ 60.129415][ T5861] bridge_slave_1: entered promiscuous mode [ 60.137538][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.144717][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.151846][ T5845] bridge_slave_0: entered allmulticast mode [ 60.158567][ T5845] bridge_slave_0: entered promiscuous mode [ 60.205607][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.212688][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.220557][ T5845] bridge_slave_1: entered allmulticast mode [ 60.227893][ T5845] bridge_slave_1: entered promiscuous mode [ 60.277509][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.285424][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.292554][ T5847] bridge_slave_0: entered allmulticast mode [ 60.299533][ T5847] bridge_slave_0: entered promiscuous mode [ 60.327739][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.339054][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.349413][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.356885][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.364132][ T5847] bridge_slave_1: entered allmulticast mode [ 60.371059][ T5847] bridge_slave_1: entered promiscuous mode [ 60.392372][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.399534][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.407218][ T5844] bridge_slave_0: entered allmulticast mode [ 60.413733][ T5844] bridge_slave_0: entered promiscuous mode [ 60.424294][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.443310][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.461384][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.468712][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.476073][ T5843] bridge_slave_0: entered allmulticast mode [ 60.482718][ T5843] bridge_slave_0: entered promiscuous mode [ 60.489943][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.497309][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.504908][ T5844] bridge_slave_1: entered allmulticast mode [ 60.511487][ T5844] bridge_slave_1: entered promiscuous mode [ 60.552937][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.567061][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.576814][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.583907][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.591340][ T5843] bridge_slave_1: entered allmulticast mode [ 60.597975][ T5843] bridge_slave_1: entered promiscuous mode [ 60.616090][ T5861] team0: Port device team_slave_0 added [ 60.624082][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.637396][ T5845] team0: Port device team_slave_0 added [ 60.667109][ T5861] team0: Port device team_slave_1 added [ 60.675143][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.687272][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.702720][ T5845] team0: Port device team_slave_1 added [ 60.733001][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.759398][ T5847] team0: Port device team_slave_0 added [ 60.788521][ T5844] team0: Port device team_slave_0 added [ 60.795670][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.802624][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.829537][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.842724][ T5847] team0: Port device team_slave_1 added [ 60.859256][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.866323][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.892288][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.914117][ T5844] team0: Port device team_slave_1 added [ 60.920442][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.927619][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.954617][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.972991][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.980027][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.006208][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.024009][ T5843] team0: Port device team_slave_0 added [ 61.048566][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.055898][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.081940][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.094891][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.101854][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.127841][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.149251][ T5843] team0: Port device team_slave_1 added [ 61.174161][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.181576][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.207859][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.220956][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.228188][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.254206][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.279870][ T5861] hsr_slave_0: entered promiscuous mode [ 61.286277][ T5861] hsr_slave_1: entered promiscuous mode [ 61.293138][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.300276][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.326308][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.339160][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.346175][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.372223][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.417569][ T5845] hsr_slave_0: entered promiscuous mode [ 61.423636][ T5845] hsr_slave_1: entered promiscuous mode [ 61.429970][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.438027][ T5845] Cannot create hsr debugfs directory [ 61.465298][ T5152] Bluetooth: hci0: command tx timeout [ 61.467354][ T5858] Bluetooth: hci2: command tx timeout [ 61.471459][ T5152] Bluetooth: hci1: command tx timeout [ 61.482358][ T5856] Bluetooth: hci4: command tx timeout [ 61.482528][ T5858] Bluetooth: hci3: command tx timeout [ 61.500288][ T5847] hsr_slave_0: entered promiscuous mode [ 61.506472][ T5847] hsr_slave_1: entered promiscuous mode [ 61.512849][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.520831][ T5847] Cannot create hsr debugfs directory [ 61.553574][ T5844] hsr_slave_0: entered promiscuous mode [ 61.561800][ T5844] hsr_slave_1: entered promiscuous mode [ 61.568166][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.576119][ T5844] Cannot create hsr debugfs directory [ 61.614766][ T5843] hsr_slave_0: entered promiscuous mode [ 61.620909][ T5843] hsr_slave_1: entered promiscuous mode [ 61.630027][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.637660][ T5843] Cannot create hsr debugfs directory [ 61.950888][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.962496][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.979327][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.992980][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.039091][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.052551][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.069526][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.078936][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.106191][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.117821][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.128847][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.146381][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.226038][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.242048][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.251327][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.271919][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.358397][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.370679][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.380016][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.397533][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.421505][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.461548][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.490941][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.510657][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.517926][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.542999][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.550124][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.573504][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.588930][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.601894][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.609026][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.639691][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.646781][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.688072][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.733094][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.740216][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.758435][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.774194][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.781375][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.816011][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.891757][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.905469][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.912606][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.926241][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.933366][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.971774][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.001604][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.008804][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.039337][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.046539][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.072993][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.086558][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.152229][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.161760][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.183042][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.254878][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.342985][ T5844] veth0_vlan: entered promiscuous mode [ 63.379080][ T5844] veth1_vlan: entered promiscuous mode [ 63.503305][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.540323][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.544584][ T5858] Bluetooth: hci3: command tx timeout [ 63.548477][ T5854] Bluetooth: hci4: command tx timeout [ 63.553041][ T5858] Bluetooth: hci1: command tx timeout [ 63.557885][ T5854] Bluetooth: hci2: command tx timeout [ 63.557917][ T5854] Bluetooth: hci0: command tx timeout [ 63.582797][ T5844] veth0_macvtap: entered promiscuous mode [ 63.607381][ T5844] veth1_macvtap: entered promiscuous mode [ 63.624094][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.682187][ T5845] veth0_vlan: entered promiscuous mode [ 63.702404][ T5847] veth0_vlan: entered promiscuous mode [ 63.721199][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.733123][ T5845] veth1_vlan: entered promiscuous mode [ 63.750588][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.773141][ T5847] veth1_vlan: entered promiscuous mode [ 63.788160][ T5843] veth0_vlan: entered promiscuous mode [ 63.796308][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.805318][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.814012][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.823372][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.872523][ T5843] veth1_vlan: entered promiscuous mode [ 63.889146][ T5861] veth0_vlan: entered promiscuous mode [ 63.900817][ T5845] veth0_macvtap: entered promiscuous mode [ 63.930996][ T5845] veth1_macvtap: entered promiscuous mode [ 63.959551][ T5861] veth1_vlan: entered promiscuous mode [ 63.992852][ T5847] veth0_macvtap: entered promiscuous mode [ 64.011964][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.024921][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.037581][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.048082][ T5847] veth1_macvtap: entered promiscuous mode [ 64.068859][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.080259][ T5843] veth0_macvtap: entered promiscuous mode [ 64.090700][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.096022][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.117372][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.131636][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.150374][ T5843] veth1_macvtap: entered promiscuous mode [ 64.162994][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.172801][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.182387][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.191306][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.216374][ T5861] veth0_macvtap: entered promiscuous mode [ 64.235254][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.246081][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.257344][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.268239][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.279727][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.289071][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.299619][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.309550][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.320018][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.329937][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.340438][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.352092][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.373620][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.384677][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.402685][ T5861] veth1_macvtap: entered promiscuous mode [ 64.414855][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.426203][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.439614][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.450690][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.461767][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.470531][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.481864][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.491995][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.502547][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.512645][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.523165][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.535622][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.570148][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.581067][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.590679][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.603765][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.633596][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.635764][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.658535][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.667898][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.677225][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.706052][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.715645][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.793256][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.810920][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.822653][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.841276][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.852203][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.877256][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.887921][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.898543][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.909837][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.919658][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.930183][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.940095][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.950858][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.961076][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.971599][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.981529][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.993910][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.004948][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.036316][ T5861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.046428][ T5861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.058285][ T5861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.068133][ T5861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.087238][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.104739][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.263335][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.280405][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.342830][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.361743][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.364198][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.369858][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.393969][ T5943] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 65.577710][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.620618][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.624933][ T5858] Bluetooth: hci1: command tx timeout [ 65.629262][ T5856] Bluetooth: hci0: command tx timeout [ 65.633827][ T5858] Bluetooth: hci2: command tx timeout [ 65.639423][ T5854] Bluetooth: hci4: command tx timeout [ 65.645235][ T5858] Bluetooth: hci3: command tx timeout [ 65.667560][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.675679][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.726080][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.735760][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.931751][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.947851][ T5957] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 65.956032][ T5962] x_tables: duplicate underflow at hook 3 [ 65.962055][ T5963] netlink: 'syz.3.13': attribute type 4 has an invalid length. [ 65.991139][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.195876][ T5969] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16'. [ 66.233093][ T5969] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 66.239909][ T5971] warning: `syz.4.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.268382][ T5974] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 66.296696][ T5976] netlink: 'syz.0.18': attribute type 21 has an invalid length. [ 66.315333][ T5976] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 66.336910][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 66.550147][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 66.562702][ T5986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 66.601832][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 66.611256][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 66.702811][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 66.795244][ T6002] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 66.841625][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 66.859196][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 67.509627][ T6041] netlink: 'syz.2.38': attribute type 29 has an invalid length. [ 67.557358][ T6041] netlink: 'syz.2.38': attribute type 29 has an invalid length. [ 67.600049][ T6045] syz.3.39 uses obsolete (PF_INET,SOCK_PACKET) [ 67.609957][ T6041] netlink: 'syz.2.38': attribute type 29 has an invalid length. [ 67.645482][ T6048] netlink: get zone limit has 8 unknown bytes [ 67.704985][ T5858] Bluetooth: hci3: command tx timeout [ 67.705824][ T5856] Bluetooth: hci0: command tx timeout [ 67.711712][ T5858] Bluetooth: hci4: command tx timeout [ 67.716984][ T5152] Bluetooth: hci2: command tx timeout [ 67.722643][ T5858] Bluetooth: hci1: command tx timeout [ 67.799607][ T6053] Bluetooth: MGMT ver 1.23 [ 68.358164][ T6081] netlink: 'syz.2.52': attribute type 29 has an invalid length. [ 68.366893][ T6081] netlink: 'syz.2.52': attribute type 29 has an invalid length. [ 68.409555][ T6081] netlink: 'syz.2.52': attribute type 29 has an invalid length. [ 68.537134][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.101320][ T6125] Zero length message leads to an empty skb [ 69.583752][ T6146] tipc: Started in network mode [ 69.593329][ T6146] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 69.601612][ T6146] tipc: Enabled bearer , priority 10 [ 69.831487][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.840145][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.954446][ T5858] Bluetooth: hci0: command tx timeout [ 70.075512][ T6169] vxcan2: entered promiscuous mode [ 70.080684][ T6169] vxcan2: entered allmulticast mode [ 70.133151][ T6172] Illegal XDP return value 6172 on prog (id 12) dev N/A, expect packet loss! [ 70.403445][ T6189] validate_nla: 4 callbacks suppressed [ 70.403464][ T6189] netlink: 'syz.4.91': attribute type 4 has an invalid length. [ 70.420432][ T6192] SET target dimension over the limit! [ 70.437041][ T6189] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 70.489836][ T6189] syz.4.91 (6189) used greatest stack depth: 18256 bytes left [ 70.512575][ T5858] Bluetooth: hci4: command tx timeout [ 70.736507][ T46] tipc: Node number set to 10005162 [ 70.758889][ T6215] unsupported nlmsg_type 40 [ 71.288333][ T6239] netlink: 'syz.1.108': attribute type 9 has an invalid length. [ 71.313231][ T6240] __nla_validate_parse: 75 callbacks suppressed [ 71.313249][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 71.362106][ T6239] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.108'. [ 71.438296][ T6244] FAULT_INJECTION: forcing a failure. [ 71.438296][ T6244] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.490291][ T6244] CPU: 0 UID: 0 PID: 6244 Comm: syz.3.110 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 71.500936][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.511031][ T6244] Call Trace: [ 71.514339][ T6244] [ 71.517293][ T6244] dump_stack_lvl+0x241/0x360 [ 71.522020][ T6244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.527271][ T6244] ? __pfx__printk+0x10/0x10 [ 71.531894][ T6244] ? __pfx_lock_release+0x10/0x10 [ 71.536959][ T6244] should_fail_ex+0x3b0/0x4e0 [ 71.541702][ T6244] _copy_from_iter+0x21f/0x1e70 [ 71.546583][ T6244] ? __virt_addr_valid+0x183/0x530 [ 71.550550][ T6241] netlink: 'syz.1.108': attribute type 9 has an invalid length. [ 71.551702][ T6244] ? __pfx_lock_release+0x10/0x10 [ 71.551740][ T6244] ? __alloc_skb+0x28f/0x440 [ 71.568989][ T6244] ? __pfx__copy_from_iter+0x10/0x10 [ 71.574306][ T6244] ? __virt_addr_valid+0x183/0x530 [ 71.579436][ T6244] ? __virt_addr_valid+0x183/0x530 [ 71.584549][ T6244] ? __virt_addr_valid+0x45f/0x530 [ 71.589660][ T6244] ? __check_object_size+0x48e/0x900 [ 71.594948][ T6244] netlink_sendmsg+0x73d/0xcb0 [ 71.599719][ T6244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.605008][ T6244] ? aa_sock_msg_perm+0x91/0x160 [ 71.609952][ T6244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.615234][ T6244] __sock_sendmsg+0x221/0x270 [ 71.619915][ T6244] ____sys_sendmsg+0x52a/0x7e0 [ 71.624680][ T6244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.629970][ T6244] __sys_sendmsg+0x292/0x380 [ 71.634564][ T6244] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.639701][ T6244] ? __pfx_vfs_write+0x10/0x10 [ 71.644488][ T6244] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.650830][ T6244] ? do_syscall_64+0x100/0x230 [ 71.655594][ T6244] ? do_syscall_64+0xb6/0x230 [ 71.660269][ T6244] do_syscall_64+0xf3/0x230 [ 71.664768][ T6244] ? clear_bhb_loop+0x35/0x90 [ 71.669442][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.675343][ T6244] RIP: 0033:0x7f6670f7e719 [ 71.679757][ T6244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.699363][ T6244] RSP: 002b:00007f6671cc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.707795][ T6244] RAX: ffffffffffffffda RBX: 00007f6671136058 RCX: 00007f6670f7e719 [ 71.715767][ T6244] RDX: 0000000020000080 RSI: 0000000020000500 RDI: 0000000000000004 [ 71.723731][ T6244] RBP: 00007f6671cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 71.731694][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.739664][ T6244] R13: 0000000000000001 R14: 00007f6671136058 R15: 00007ffdcb994448 [ 71.747643][ T6244] [ 71.758098][ T6241] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.108'. [ 71.785862][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.792358][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.124012][ T9] IPVS: starting estimator thread 0... [ 72.224572][ T6264] IPVS: using max 22 ests per chain, 52800 per kthread [ 72.232010][ T6272] xt_l2tp: missing protocol rule (udp|l2tpip) [ 72.545329][ T6295] FAULT_INJECTION: forcing a failure. [ 72.545329][ T6295] name failslab, interval 1, probability 0, space 0, times 1 [ 72.550166][ T6297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'. [ 72.584556][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: syz.4.127 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 72.595203][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.605287][ T6295] Call Trace: [ 72.608591][ T6295] [ 72.611542][ T6295] dump_stack_lvl+0x241/0x360 [ 72.616248][ T6295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.621737][ T6295] ? __pfx__printk+0x10/0x10 [ 72.626361][ T6295] ? ref_tracker_alloc+0x332/0x490 [ 72.631500][ T6295] should_fail_ex+0x3b0/0x4e0 [ 72.636210][ T6295] ? skb_clone+0x20c/0x390 [ 72.640656][ T6295] should_failslab+0xac/0x100 [ 72.645369][ T6295] ? skb_clone+0x20c/0x390 [ 72.649809][ T6295] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 72.655213][ T6295] skb_clone+0x20c/0x390 [ 72.659487][ T6295] __netlink_deliver_tap+0x3cc/0x7c0 [ 72.664810][ T6295] ? netlink_deliver_tap+0x2e/0x1b0 [ 72.670034][ T6295] netlink_deliver_tap+0x19d/0x1b0 [ 72.675171][ T6295] netlink_unicast+0x7c4/0x990 [ 72.679976][ T6295] ? __pfx_netlink_unicast+0x10/0x10 [ 72.685289][ T6295] ? __virt_addr_valid+0x183/0x530 [ 72.690433][ T6295] ? __check_object_size+0x48e/0x900 [ 72.695750][ T6295] netlink_sendmsg+0x8e4/0xcb0 [ 72.700545][ T6295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.706039][ T6295] ? aa_sock_msg_perm+0x91/0x160 [ 72.711012][ T6295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.716319][ T6295] __sock_sendmsg+0x221/0x270 [ 72.721029][ T6295] ____sys_sendmsg+0x52a/0x7e0 [ 72.725827][ T6295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.731155][ T6295] __sys_sendmsg+0x292/0x380 [ 72.735778][ T6295] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.740924][ T6295] ? __pfx_vfs_write+0x10/0x10 [ 72.745742][ T6295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.752100][ T6295] ? do_syscall_64+0x100/0x230 [ 72.756908][ T6295] ? do_syscall_64+0xb6/0x230 [ 72.761698][ T6295] do_syscall_64+0xf3/0x230 [ 72.766222][ T6295] ? clear_bhb_loop+0x35/0x90 [ 72.770924][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.776845][ T6295] RIP: 0033:0x7f03c997e719 [ 72.781278][ T6295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.800912][ T6295] RSP: 002b:00007f03ca774038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.809358][ T6295] RAX: ffffffffffffffda RBX: 00007f03c9b35f80 RCX: 00007f03c997e719 [ 72.817354][ T6295] RDX: 0000000020000080 RSI: 0000000020000500 RDI: 0000000000000004 [ 72.825357][ T6295] RBP: 00007f03ca774090 R08: 0000000000000000 R09: 0000000000000000 [ 72.833362][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.841362][ T6295] R13: 0000000000000000 R14: 00007f03c9b35f80 R15: 00007fff0d4d8248 [ 72.849384][ T6295] [ 73.107451][ T6311] netlink: 'syz.4.133': attribute type 12 has an invalid length. [ 73.119005][ T6313] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 73.126851][ T6313] netlink: 224 bytes leftover after parsing attributes in process `syz.2.134'. [ 73.136832][ T6311] netlink: 'syz.4.133': attribute type 29 has an invalid length. [ 73.146433][ T6311] netlink: 'syz.4.133': attribute type 2 has an invalid length. [ 73.154116][ T6311] netlink: 'syz.4.133': attribute type 2 has an invalid length. [ 73.178683][ T6311] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 73.186692][ T6311] netlink: 'syz.4.133': attribute type 37 has an invalid length. [ 73.384938][ T5858] Bluetooth: hci4: command tx timeout [ 73.704896][ T6342] netlink: 252 bytes leftover after parsing attributes in process `syz.3.140'. [ 73.705170][ T6345] FAULT_INJECTION: forcing a failure. [ 73.705170][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 73.761700][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz.0.141 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 73.772348][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.782430][ T6345] Call Trace: [ 73.785731][ T6345] [ 73.788682][ T6345] dump_stack_lvl+0x241/0x360 [ 73.793393][ T6345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.798628][ T6345] ? __pfx__printk+0x10/0x10 [ 73.803247][ T6345] ? __kmalloc_noprof+0xb0/0x400 [ 73.808210][ T6345] ? __pfx___might_resched+0x10/0x10 [ 73.813525][ T6345] should_fail_ex+0x3b0/0x4e0 [ 73.818234][ T6345] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 73.824507][ T6345] should_failslab+0xac/0x100 [ 73.829220][ T6345] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 73.835495][ T6345] __kmalloc_noprof+0xd8/0x400 [ 73.840294][ T6345] ? apparmor_capable+0x13b/0x1b0 [ 73.845350][ T6345] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 73.851453][ T6345] genl_rcv_msg+0x802/0xec0 [ 73.855983][ T6345] ? mark_lock+0x9a/0x360 [ 73.860337][ T6345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.865409][ T6345] ? __pfx_lock_acquire+0x10/0x10 [ 73.870465][ T6345] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 73.876049][ T6345] ? __pfx___might_resched+0x10/0x10 [ 73.881375][ T6345] netlink_rcv_skb+0x1e3/0x430 [ 73.886166][ T6345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.891651][ T6345] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.896974][ T6345] ? __netlink_deliver_tap+0x77e/0x7c0 [ 73.902479][ T6345] genl_rcv+0x28/0x40 [ 73.906502][ T6345] netlink_unicast+0x7f6/0x990 [ 73.911301][ T6345] ? __pfx_netlink_unicast+0x10/0x10 [ 73.916611][ T6345] ? __virt_addr_valid+0x183/0x530 [ 73.921748][ T6345] ? __check_object_size+0x48e/0x900 [ 73.927063][ T6345] netlink_sendmsg+0x8e4/0xcb0 [ 73.931864][ T6345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.937176][ T6345] ? aa_sock_msg_perm+0x91/0x160 [ 73.942142][ T6345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.947448][ T6345] __sock_sendmsg+0x221/0x270 [ 73.952174][ T6345] ____sys_sendmsg+0x52a/0x7e0 [ 73.956969][ T6345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.962296][ T6345] __sys_sendmsg+0x292/0x380 [ 73.966944][ T6345] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.972088][ T6345] ? __pfx_vfs_write+0x10/0x10 [ 73.976904][ T6345] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.983270][ T6345] ? do_syscall_64+0x100/0x230 [ 73.988069][ T6345] ? do_syscall_64+0xb6/0x230 [ 73.992780][ T6345] do_syscall_64+0xf3/0x230 [ 73.997306][ T6345] ? clear_bhb_loop+0x35/0x90 [ 74.002008][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.007928][ T6345] RIP: 0033:0x7f590877e719 [ 74.012362][ T6345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.031988][ T6345] RSP: 002b:00007f590961b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.040440][ T6345] RAX: ffffffffffffffda RBX: 00007f5908935f80 RCX: 00007f590877e719 [ 74.048447][ T6345] RDX: 0000000020000080 RSI: 0000000020000500 RDI: 0000000000000004 [ 74.056453][ T6345] RBP: 00007f590961b090 R08: 0000000000000000 R09: 0000000000000000 [ 74.064449][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.072443][ T6345] R13: 0000000000000000 R14: 00007f5908935f80 R15: 00007fffa3ab6fb8 [ 74.080454][ T6345] [ 74.250786][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 74.260919][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.147'. [ 74.344093][ T6362] IPv6: Can't replace route, no match found [ 74.551528][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 74.568090][ T6382] netlink: 44 bytes leftover after parsing attributes in process `syz.4.151'. [ 74.818029][ T6397] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 74.979762][ T6403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.037013][ T6405] FAULT_INJECTION: forcing a failure. [ 75.037013][ T6405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.063706][ T6405] CPU: 0 UID: 0 PID: 6405 Comm: syz.1.161 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 75.074340][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.084424][ T6405] Call Trace: [ 75.087727][ T6405] [ 75.090690][ T6405] dump_stack_lvl+0x241/0x360 [ 75.095408][ T6405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.100634][ T6405] ? __pfx__printk+0x10/0x10 [ 75.105259][ T6405] ? snprintf+0xda/0x120 [ 75.109534][ T6405] should_fail_ex+0x3b0/0x4e0 [ 75.114238][ T6405] _copy_to_user+0x31/0xb0 [ 75.118683][ T6405] simple_read_from_buffer+0xca/0x150 [ 75.124090][ T6405] proc_fail_nth_read+0x1e9/0x250 [ 75.129142][ T6405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.134718][ T6405] ? rw_verify_area+0x55e/0x6f0 [ 75.139595][ T6405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.145173][ T6405] vfs_read+0x1fc/0xb70 [ 75.149361][ T6405] ? fdget_pos+0x24e/0x320 [ 75.153805][ T6405] ? __pfx_vfs_read+0x10/0x10 [ 75.158516][ T6405] ? __fget_files+0x3f3/0x470 [ 75.163206][ T6405] ? fdget_pos+0x24e/0x320 [ 75.167631][ T6405] ksys_read+0x183/0x2b0 [ 75.171898][ T6405] ? __pfx_ksys_read+0x10/0x10 [ 75.176688][ T6405] ? do_syscall_64+0x100/0x230 [ 75.181480][ T6405] ? do_syscall_64+0xb6/0x230 [ 75.186182][ T6405] do_syscall_64+0xf3/0x230 [ 75.190696][ T6405] ? clear_bhb_loop+0x35/0x90 [ 75.195377][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.201268][ T6405] RIP: 0033:0x7f341c37d15c [ 75.205699][ T6405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 75.225331][ T6405] RSP: 002b:00007f341d09f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.233784][ T6405] RAX: ffffffffffffffda RBX: 00007f341c535f80 RCX: 00007f341c37d15c [ 75.241779][ T6405] RDX: 000000000000000f RSI: 00007f341d09f0a0 RDI: 0000000000000006 [ 75.249773][ T6405] RBP: 00007f341d09f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.257763][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.265759][ T6405] R13: 0000000000000000 R14: 00007f341c535f80 R15: 00007ffe54f72898 [ 75.273771][ T6405] [ 75.423899][ T6421] x_tables: duplicate underflow at hook 1 [ 75.609404][ C0] Unknown status report in ack skb [ 75.750654][ T6439] veth0: entered promiscuous mode [ 75.766165][ T6438] veth0: left promiscuous mode [ 76.035110][ T6461] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 76.282158][ T6474] dccp_invalid_packet: P.Data Offset(100) too large [ 76.350507][ T6478] validate_nla: 1 callbacks suppressed [ 76.350527][ T6478] netlink: 'syz.4.185': attribute type 21 has an invalid length. [ 76.367191][ T6478] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 76.405499][ T6474] __nla_validate_parse: 7 callbacks suppressed [ 76.405518][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 76.482661][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 76.553056][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 76.613317][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 76.641305][ T6490] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 76.778049][ T8] cfg80211: failed to load regulatory.db [ 76.960670][ T6516] netlink: 209848 bytes leftover after parsing attributes in process `syz.4.197'. [ 76.983335][ T6516] openvswitch: netlink: Message has 2 unknown bytes. [ 77.008610][ T6519] netlink: 'syz.2.198': attribute type 3 has an invalid length. [ 77.060510][ T6523] netlink: 'syz.2.198': attribute type 21 has an invalid length. [ 77.073262][ T6522] sctp: [Deprecated]: syz.1.200 (pid 6522) Use of int in max_burst socket option deprecated. [ 77.073262][ T6522] Use struct sctp_assoc_value instead [ 77.101407][ T6519] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.198'. [ 77.124894][ T6523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.198'. [ 77.138637][ T6527] sctp: [Deprecated]: syz.1.200 (pid 6527) Use of int in max_burst socket option deprecated. [ 77.138637][ T6527] Use struct sctp_assoc_value instead [ 77.732522][ T6585] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 77.749559][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 77.854953][ T6599] netlink: 'syz.0.211': attribute type 7 has an invalid length. [ 77.911551][ T6599] Κό: entered promiscuous mode [ 78.129134][ T6609] bridge_slave_0: left allmulticast mode [ 78.157113][ T6609] bridge_slave_0: left promiscuous mode [ 78.162903][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.210458][ T6609] bridge_slave_1: left allmulticast mode [ 78.221607][ T6609] bridge_slave_1: left promiscuous mode [ 78.229035][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.246098][ T6609] bond0: (slave bond_slave_0): Releasing backup interface [ 78.260152][ T6609] bond0: (slave bond_slave_1): Releasing backup interface [ 78.303834][ T6609] team0: Port device team_slave_0 removed [ 78.344159][ T6609] team0: Port device team_slave_1 removed [ 78.361371][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.383528][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.402922][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.429527][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.470560][ T6614] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 78.503651][ T6617] wg2: entered promiscuous mode [ 78.542883][ T6617] team0: Port device wg2 added [ 78.569066][ T6608] netlink: 168 bytes leftover after parsing attributes in process `syz.3.216'. [ 78.871970][ T6646] netlink: 'syz.1.225': attribute type 39 has an invalid length. [ 78.923454][ T6648] netlink: 'syz.3.227': attribute type 32 has an invalid length. [ 78.932099][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 78.942771][ T6648] (unnamed net_device) (uninitialized): option coupled_control: invalid value (28) [ 79.202888][ T6668] netlink: 'syz.1.231': attribute type 3 has an invalid length. [ 79.656675][ T6689] netdevsim netdevsim0: Firmware load for 'up/../file0/file0' refused, path contains '..' component [ 79.755207][ T6567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.920476][ T6700] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 80.047671][ T6567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.137943][ T6706] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 80.183353][ T6708] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.220541][ T6708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.227864][ T6708] IPv6: NLM_F_CREATE should be set when creating new route [ 80.235167][ T6708] IPv6: NLM_F_CREATE should be set when creating new route [ 80.242400][ T6708] IPv6: NLM_F_CREATE should be set when creating new route [ 80.359448][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.369376][ T6567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.384824][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.392886][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.403343][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.413450][ T5862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.439148][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.554143][ T6567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.861108][ T6567] bridge_slave_1: left allmulticast mode [ 80.869693][ T6567] bridge_slave_1: left promiscuous mode [ 80.877879][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.890206][ T6567] bridge_slave_0: left allmulticast mode [ 80.896737][ T6567] bridge_slave_0: left promiscuous mode [ 80.902402][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.287297][ T6567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.299666][ T6567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.312107][ T6567] bond0 (unregistering): Released all slaves [ 81.324994][ T6724] vxcan1: entered promiscuous mode [ 81.331153][ T6724] vlan3: entered promiscuous mode [ 81.338379][ T6724] vlan3: entered allmulticast mode [ 81.343590][ T6724] vxcan1: entered allmulticast mode [ 81.350357][ T6724] vxcan1: left allmulticast mode [ 81.355755][ T6724] vxcan1: left promiscuous mode [ 81.551745][ T6738] bridge0: port 3(syz_tun) entered blocking state [ 81.560120][ T6738] bridge0: port 3(syz_tun) entered disabled state [ 81.567483][ T6738] syz_tun: entered allmulticast mode [ 81.577007][ T6738] syz_tun: entered promiscuous mode [ 81.583988][ T6738] bridge0: port 3(syz_tun) entered blocking state [ 81.590838][ T6738] bridge0: port 3(syz_tun) entered forwarding state [ 81.803111][ T6748] validate_nla: 4 callbacks suppressed [ 81.803131][ T6748] netlink: 'syz.1.259': attribute type 9 has an invalid length. [ 81.853502][ T6748] __nla_validate_parse: 5 callbacks suppressed [ 81.853518][ T6748] netlink: 126256 bytes leftover after parsing attributes in process `syz.1.259'. [ 81.909401][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 81.918702][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 82.050097][ T6716] chnl_net:caif_netlink_parms(): no params data found [ 82.329147][ T6567] hsr_slave_0: left promiscuous mode [ 82.336269][ T6567] hsr_slave_1: left promiscuous mode [ 82.342885][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.350794][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.360312][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.368614][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.387926][ T6567] veth1_macvtap: left promiscuous mode [ 82.393731][ T6567] veth0_macvtap: left promiscuous mode [ 82.400723][ T6567] veth1_vlan: left promiscuous mode [ 82.406298][ T6567] veth0_vlan: left promiscuous mode [ 82.510357][ T5862] Bluetooth: hci2: command tx timeout [ 82.801800][ T6567] team0 (unregistering): Port device team_slave_1 removed [ 82.841804][ T6567] team0 (unregistering): Port device team_slave_0 removed [ 83.243439][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 83.271727][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 83.299075][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 83.319877][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 83.357323][ T6786] ipvlan2: entered allmulticast mode [ 83.385286][ T6786] veth0_vlan: entered allmulticast mode [ 83.425662][ T6793] netlink: 'syz.1.271': attribute type 11 has an invalid length. [ 83.433561][ T6793] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.271'. [ 83.670635][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.683203][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.703373][ T6716] bridge_slave_0: entered allmulticast mode [ 83.747936][ T6716] bridge_slave_0: entered promiscuous mode [ 83.803220][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.834826][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.842078][ T6716] bridge_slave_1: entered allmulticast mode [ 83.880640][ T6716] bridge_slave_1: entered promiscuous mode [ 83.926411][ T6820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.277'. [ 83.976703][ T6822] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 3, id = 0 [ 83.998114][ T6716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.045562][ T6716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.202421][ T6716] team0: Port device team_slave_0 added [ 84.231703][ T6716] team0: Port device team_slave_1 added [ 84.244745][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.280'. [ 84.258638][ T6838] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 84.260756][ T6831] team0: No ports can be present during mode change [ 84.354303][ T6716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.387603][ T6567] IPVS: stop unused estimator thread 0... [ 84.431560][ T6716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.512182][ T6716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.544391][ T6837] veth0_to_hsr: entered promiscuous mode [ 84.584605][ T5862] Bluetooth: hci2: command tx timeout [ 84.608796][ T6846] veth0_to_hsr (unregistering): left promiscuous mode [ 84.647915][ T6846] hsr_slave_0 (unregistering): left promiscuous mode [ 84.785443][ T6853] netlink: 'syz.0.286': attribute type 46 has an invalid length. [ 84.810441][ T6716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.821438][ T6716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.847834][ T6716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.962191][ T6716] hsr_slave_0: entered promiscuous mode [ 85.022591][ T6716] hsr_slave_1: entered promiscuous mode [ 85.049921][ T6716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.070638][ T6716] Cannot create hsr debugfs directory [ 85.106044][ T6873] netlink: 'syz.4.292': attribute type 11 has an invalid length. [ 85.254595][ T6886] ip6_vti0: Master is either lo or non-ether device [ 85.417209][ T6892] ip6t_srh: unknown srh invflags 5F00 [ 85.442045][ T6893] veth0: entered promiscuous mode [ 85.454941][ T6893] veth0: left promiscuous mode [ 85.601670][ T6896] pim6reg1: entered promiscuous mode [ 85.614549][ T6896] pim6reg1: entered allmulticast mode [ 86.125691][ T6940] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.161324][ T6940] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.186522][ T6940] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.201607][ T6940] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.210824][ T6940] geneve2: entered promiscuous mode [ 86.222334][ T6940] geneve2: entered allmulticast mode [ 86.231333][ T6940] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 86.248175][ T6940] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 86.262192][ T6940] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 86.274776][ T6940] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 86.536414][ T6716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.555420][ T6716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.585368][ T6716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.664722][ T5862] Bluetooth: hci2: command tx timeout [ 86.679688][ T6716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.824800][ T6975] netlink: 'syz.4.322': attribute type 22 has an invalid length. [ 86.939793][ T6978] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.983077][ T6987] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 87.017849][ T6716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.082280][ T6716] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.126729][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.134611][ T6575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.258273][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.265488][ T6556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.342047][ T6716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.360522][ T6716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.412494][ T7006] __nla_validate_parse: 11 callbacks suppressed [ 87.412513][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 87.660758][ T6716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.775087][ T6716] veth0_vlan: entered promiscuous mode [ 87.805291][ T6716] veth1_vlan: entered promiscuous mode [ 87.860469][ T6716] veth0_macvtap: entered promiscuous mode [ 87.893580][ T6716] veth1_macvtap: entered promiscuous mode [ 87.923723][ T7025] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 87.943508][ T7025] netlink: 616 bytes leftover after parsing attributes in process `syz.1.333'. [ 87.953677][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.964700][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.974585][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.985473][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.995775][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.006447][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.018953][ T6716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.030616][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.041362][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.051382][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.061991][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.071862][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.082353][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.094005][ T6716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.121532][ T6716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.131703][ T6716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141826][ T6716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.161326][ T6716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.179295][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 88.294396][ T7044] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 88.373366][ T7052] syzkaller1: entered promiscuous mode [ 88.380496][ T7052] syzkaller1: entered allmulticast mode [ 88.404498][ T7051] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 88.416782][ T7048] netlink: 68 bytes leftover after parsing attributes in process `syz.0.338'. [ 88.551323][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.559229][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.718934][ T6556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.733632][ T6556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.750231][ T5862] Bluetooth: hci2: command tx timeout [ 89.066644][ T7082] xt_TCPMSS: Only works on TCP SYN packets [ 89.076972][ T7086] veth0_vlan: entered allmulticast mode [ 89.138712][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 89.169827][ T7086] ͺͺͺͺͺͺ: renamed from vlan0 [ 89.467520][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 89.541668][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 89.623269][ T7122] delete_channel: no stack [ 89.628957][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 89.721852][ T7126] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 89.752734][ T7126] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.363'. [ 89.766120][ T7126] netlink: 'syz.4.363': attribute type 2 has an invalid length. [ 89.778953][ T7129] bridge0: port 3(vlan2) entered blocking state [ 89.781918][ T7126] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 89.791988][ T7129] bridge0: port 3(vlan2) entered disabled state [ 89.799755][ T7129] vlan2: entered allmulticast mode [ 89.810902][ T7129] vlan2: left allmulticast mode [ 89.836190][ T7128] netlink: 256 bytes leftover after parsing attributes in process `syz.1.364'. [ 89.907024][ T7136] netlink: 'syz.1.364': attribute type 4 has an invalid length. [ 89.987420][ T7137] tipc: Started in network mode [ 89.995054][ T7137] tipc: Node identity fffffff4, cluster identity 3 [ 90.001640][ T7137] tipc: Node number set to 4294967284 [ 90.034879][ T7137] tipc: Cannot configure node identity twice [ 90.177979][ T6556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.199395][ T7140] netem: incorrect gi model size [ 90.214639][ T7140] netem: change failed [ 90.650969][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.660028][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.668647][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.676793][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.687074][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.694560][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.813564][ T7178] delete_channel: no stack [ 90.975356][ T6556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.110275][ T6556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.199328][ T7170] chnl_net:caif_netlink_parms(): no params data found [ 91.258078][ T6556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.373134][ T7200] netlink: 'syz.4.386': attribute type 29 has an invalid length. [ 91.413846][ T7209] netlink: 'syz.4.386': attribute type 29 has an invalid length. [ 91.479815][ T7200] netlink: 'syz.4.386': attribute type 29 has an invalid length. [ 91.662024][ T7170] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.670837][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.684950][ T7170] bridge_slave_0: entered allmulticast mode [ 91.695762][ T7170] bridge_slave_0: entered promiscuous mode [ 91.722652][ T7170] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.730760][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.738099][ T7170] bridge_slave_1: entered allmulticast mode [ 91.746184][ T7170] bridge_slave_1: entered promiscuous mode [ 91.881447][ T7170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.915944][ T7170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.927204][ T6556] bridge_slave_1: left allmulticast mode [ 91.933094][ T6556] bridge_slave_1: left promiscuous mode [ 91.948067][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.971970][ T6556] bridge_slave_0: left allmulticast mode [ 91.980175][ T6556] bridge_slave_0: left promiscuous mode [ 91.992169][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.330951][ T6556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.342134][ T6556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.353364][ T6556] bond0 (unregistering): Released all slaves [ 92.428312][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 92.505579][ T7250] validate_nla: 1 callbacks suppressed [ 92.505599][ T7250] netlink: 'syz.2.396': attribute type 24 has an invalid length. [ 92.546326][ T7170] team0: Port device team_slave_0 added [ 92.584869][ T7170] team0: Port device team_slave_1 added [ 92.683566][ T7256] xt_CT: No such helper "netbios-ns" [ 92.747148][ T5858] Bluetooth: hci2: command tx timeout [ 92.782316][ T7170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.791673][ T7170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.824677][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 92.828563][ T7170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.849881][ T7236] infiniband syz0: set active [ 92.855077][ T7236] infiniband syz0: added team0 [ 92.862784][ T7236] syz0: rxe_create_cq: returned err = -12 [ 92.882969][ T7170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.889652][ T7236] infiniband syz0: Couldn't create ib_mad CQ [ 92.902669][ T7236] infiniband syz0: Couldn't open port 1 [ 92.919358][ T7170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.971378][ T7236] RDS/IB: syz0: added [ 92.973743][ T7170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.980336][ T7236] smc: adding ib device syz0 with port count 1 [ 93.006988][ T6556] hsr_slave_0: left promiscuous mode [ 93.013756][ T6556] hsr_slave_1: left promiscuous mode [ 93.016557][ T7236] smc: ib device syz0 port 1 has pnetid [ 93.026328][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.036890][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.046653][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.054114][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.070716][ T6556] veth1_macvtap: left promiscuous mode [ 93.078503][ T6556] veth0_macvtap: left promiscuous mode [ 93.084125][ T6556] veth1_vlan: left promiscuous mode [ 93.089693][ T6556] veth0_vlan: left promiscuous mode [ 93.264818][ T7277] netlink: 'syz.0.404': attribute type 3 has an invalid length. [ 93.274710][ T7277] __nla_validate_parse: 10 callbacks suppressed [ 93.274726][ T7277] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.404'. [ 93.505819][ T6556] team0 (unregistering): Port device team_slave_1 removed [ 93.552994][ T6556] team0 (unregistering): Port device team_slave_0 removed [ 93.895849][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.403'. [ 93.912160][ T7272] netlink: 'syz.1.403': attribute type 8 has an invalid length. [ 93.929679][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.403'. [ 93.957277][ T7273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.404'. [ 94.018700][ T7170] hsr_slave_0: entered promiscuous mode [ 94.027045][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 94.068351][ T7170] hsr_slave_1: entered promiscuous mode [ 94.078455][ T7283] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.406'. [ 94.088524][ T7283] openvswitch: netlink: VXLAN extension 101 out of range max 1 [ 94.088528][ T7170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.115224][ T7170] Cannot create hsr debugfs directory [ 94.193876][ T7289] FAULT_INJECTION: forcing a failure. [ 94.193876][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 94.213209][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.1.408 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 94.223832][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.233904][ T7289] Call Trace: [ 94.237202][ T7289] [ 94.240145][ T7289] dump_stack_lvl+0x241/0x360 [ 94.244842][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.250059][ T7289] ? __pfx__printk+0x10/0x10 [ 94.254671][ T7289] ? fs_reclaim_acquire+0x93/0x130 [ 94.259796][ T7289] ? __pfx___might_resched+0x10/0x10 [ 94.265356][ T7289] should_fail_ex+0x3b0/0x4e0 [ 94.270061][ T7289] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 94.275806][ T7289] should_failslab+0xac/0x100 [ 94.280496][ T7289] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 94.286210][ T7289] __kmalloc_noprof+0xd8/0x400 [ 94.290993][ T7289] tomoyo_realpath_from_path+0xcf/0x5e0 [ 94.296653][ T7289] tomoyo_path_number_perm+0x23a/0x880 [ 94.302113][ T7289] ? tomoyo_path_number_perm+0x208/0x880 [ 94.307766][ T7289] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.313755][ T7289] ? __fget_files+0x29/0x470 [ 94.318337][ T7289] ? __fget_files+0x3f3/0x470 [ 94.323008][ T7289] security_file_ioctl+0xc6/0x2a0 [ 94.328031][ T7289] __se_sys_ioctl+0x47/0x170 [ 94.332621][ T7289] do_syscall_64+0xf3/0x230 [ 94.337120][ T7289] ? clear_bhb_loop+0x35/0x90 [ 94.341800][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.347687][ T7289] RIP: 0033:0x7f341c37e719 [ 94.352090][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.371690][ T7289] RSP: 002b:00007f341d09f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.380103][ T7289] RAX: ffffffffffffffda RBX: 00007f341c535f80 RCX: 00007f341c37e719 [ 94.388073][ T7289] RDX: 0000000020000040 RSI: 0000000000008b04 RDI: 0000000000000005 [ 94.396050][ T7289] RBP: 00007f341d09f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.404009][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.411982][ T7289] R13: 0000000000000000 R14: 00007f341c535f80 R15: 00007ffe54f72898 [ 94.419956][ T7289] [ 94.434989][ T7289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.825964][ T5862] Bluetooth: hci2: command tx timeout [ 94.982489][ T7302] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 95.025665][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.412'. [ 95.176395][ T7170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.186016][ T7170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.196503][ T7306] netlink: 'syz.1.415': attribute type 29 has an invalid length. [ 95.205309][ T7307] netlink: 'syz.1.415': attribute type 29 has an invalid length. [ 95.213470][ T7170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.228408][ T7170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.243854][ T7306] netlink: 'syz.1.415': attribute type 29 has an invalid length. [ 95.393551][ T7310] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.416'. [ 95.471934][ T7170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.528279][ T7170] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.581456][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.588677][ T6588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.606826][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 95.620641][ T7315] netlink: 'syz.4.419': attribute type 30 has an invalid length. [ 95.630212][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 95.656015][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.663293][ T6589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.979103][ T7170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.035088][ T7170] veth0_vlan: entered promiscuous mode [ 96.045877][ T7170] veth1_vlan: entered promiscuous mode [ 96.068479][ T7170] veth0_macvtap: entered promiscuous mode [ 96.077860][ T7170] veth1_macvtap: entered promiscuous mode [ 96.116780][ T7337] pim6reg1: entered promiscuous mode [ 96.122207][ T7337] pim6reg1: entered allmulticast mode [ 96.173559][ T7170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.189018][ T7170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.199424][ T7170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.211577][ T7170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.221972][ T7170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.232810][ T7170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.247272][ T7170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.258051][ T7170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.292502][ T7170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.334557][ T7170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.353154][ T7170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.369396][ T7170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.381829][ T7170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.396679][ T7170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.404529][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 96.442664][ T7170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.474624][ T7170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483777][ T7170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.503095][ T7170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.555445][ T7345] netlink: 'syz.1.427': attribute type 29 has an invalid length. [ 96.563840][ T7347] netlink: 'syz.4.428': attribute type 1 has an invalid length. [ 96.573579][ T7348] netlink: 'syz.1.427': attribute type 29 has an invalid length. [ 96.657137][ T7350] FAULT_INJECTION: forcing a failure. [ 96.657137][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.675192][ T7350] CPU: 1 UID: 0 PID: 7350 Comm: syz.2.430 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 96.685834][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.695913][ T7350] Call Trace: [ 96.699214][ T7350] [ 96.702152][ T7350] dump_stack_lvl+0x241/0x360 [ 96.706858][ T7350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.712073][ T7350] ? __pfx__printk+0x10/0x10 [ 96.716693][ T7350] ? __pfx_lock_release+0x10/0x10 [ 96.721744][ T7350] ? tomoyo_path_number_perm+0x71a/0x880 [ 96.727412][ T7350] should_fail_ex+0x3b0/0x4e0 [ 96.732113][ T7350] _copy_from_user+0x2f/0xc0 [ 96.734164][ T6566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.736709][ T7350] wext_handle_ioctl+0xf2/0x270 [ 96.736738][ T7350] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 96.736771][ T7350] sock_ioctl+0x17c/0x8e0 [ 96.736798][ T7350] ? __pfx_sock_ioctl+0x10/0x10 [ 96.764120][ T7350] ? __fget_files+0x29/0x470 [ 96.767218][ T6566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.768714][ T7350] ? __fget_files+0x3f3/0x470 [ 96.768747][ T7350] ? __pfx_sock_ioctl+0x10/0x10 [ 96.785574][ T7350] __se_sys_ioctl+0xf9/0x170 [ 96.790235][ T7350] do_syscall_64+0xf3/0x230 [ 96.794777][ T7350] ? clear_bhb_loop+0x35/0x90 [ 96.799480][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.804273][ T6566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.805375][ T7350] RIP: 0033:0x7fbe16f7e719 [ 96.805396][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.805410][ T7350] RSP: 002b:00007fbe17d3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.805431][ T7350] RAX: ffffffffffffffda RBX: 00007fbe17135f80 RCX: 00007fbe16f7e719 [ 96.805445][ T7350] RDX: 0000000020000040 RSI: 0000000000008b04 RDI: 0000000000000005 [ 96.805457][ T7350] RBP: 00007fbe17d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 96.805470][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.805481][ T7350] R13: 0000000000000000 R14: 00007fbe17135f80 R15: 00007ffcfa6cf4a8 [ 96.805508][ T7350] [ 96.838656][ T7352] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 96.893361][ T6566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.914772][ T5862] Bluetooth: hci2: command 0x040f tx timeout [ 96.954214][ T7355] bond2: entered promiscuous mode [ 96.984094][ T7355] bond2: entered allmulticast mode [ 96.993676][ T7355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.643611][ T7408] validate_nla: 7 callbacks suppressed [ 97.643630][ T7408] netlink: 'syz.4.449': attribute type 21 has an invalid length. [ 97.726644][ T7412] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 97.734531][ T7412] netlink: 'syz.2.451': attribute type 4 has an invalid length. [ 97.760459][ T7414] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 97.944053][ T7428] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 98.001507][ T7432] netlink: 'syz.0.458': attribute type 29 has an invalid length. [ 98.019788][ T7432] netlink: 'syz.0.458': attribute type 29 has an invalid length. [ 98.045997][ T7432] netlink: 'syz.0.458': attribute type 29 has an invalid length. [ 98.287453][ T7454] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 98.491541][ T6588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.530026][ T7461] netlink: 'syz.2.466': attribute type 1 has an invalid length. [ 98.657344][ T7463] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 98.760119][ T7461] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 98.792121][ T7471] macvlan3: entered promiscuous mode [ 98.798164][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.798933][ T7471] macvlan3: entered allmulticast mode [ 98.807487][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.820658][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.834689][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.850566][ T5862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.858389][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.973001][ T7478] netlink: 'syz.1.469': attribute type 2 has an invalid length. [ 98.995813][ T7478] __nla_validate_parse: 9 callbacks suppressed [ 98.995833][ T7478] netlink: 188 bytes leftover after parsing attributes in process `syz.1.469'. [ 99.165692][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 99.194730][ T7493] gretap0: entered promiscuous mode [ 99.216245][ T7493] macvtap1: entered promiscuous mode [ 99.248502][ T7493] macvtap1: entered allmulticast mode [ 99.261787][ T7493] gretap0: entered allmulticast mode [ 99.309404][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 99.412613][ T7508] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.473'. [ 99.426471][ T7508] openvswitch: netlink: Actions may not be safe on all matching packets [ 99.450399][ T7475] chnl_net:caif_netlink_parms(): no params data found [ 99.655842][ T6588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.756757][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'. [ 99.826943][ T6588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.859616][ T7475] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.870032][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.879396][ T7475] bridge_slave_0: entered allmulticast mode [ 99.889434][ T7475] bridge_slave_0: entered promiscuous mode [ 99.940297][ T6588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.976071][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.983197][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.004524][ T7475] bridge_slave_1: entered allmulticast mode [ 100.011138][ T7475] bridge_slave_1: entered promiscuous mode [ 100.091451][ T7475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.128038][ T7475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.138454][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 100.223721][ T7548] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.257911][ T7475] team0: Port device team_slave_0 added [ 100.285692][ T7475] team0: Port device team_slave_1 added [ 100.401256][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.415513][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.445436][ T7548] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.485'. [ 100.494422][ T7548] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 100.511164][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.488'. [ 100.523917][ T7475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.570846][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.593420][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.630899][ T7475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.830927][ T6588] bridge_slave_1: left allmulticast mode [ 100.843958][ T6588] bridge_slave_1: left promiscuous mode [ 100.854157][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.883195][ T6588] bridge_slave_0: left allmulticast mode [ 100.897045][ T6588] bridge_slave_0: left promiscuous mode [ 100.902865][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.915515][ T5858] Bluetooth: hci2: command tx timeout [ 101.226698][ T6588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.237837][ T6588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.248392][ T6588] bond0 (unregistering): Released all slaves [ 101.264422][ T7560] netlink: 136 bytes leftover after parsing attributes in process `syz.2.489'. [ 101.306393][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 101.377490][ T7475] hsr_slave_0: entered promiscuous mode [ 101.401888][ T7475] hsr_slave_1: entered promiscuous mode [ 101.413678][ T7475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.423204][ T7475] Cannot create hsr debugfs directory [ 101.512157][ T7591] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1536 [ 102.986159][ T5858] Bluetooth: hci2: command tx timeout [ 103.841558][ T7646] validate_nla: 3 callbacks suppressed [ 103.841578][ T7646] netlink: 'syz.4.513': attribute type 4 has an invalid length. [ 103.872146][ T6588] hsr_slave_0: left promiscuous mode [ 103.891787][ T6588] hsr_slave_1: left promiscuous mode [ 103.907576][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.920145][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.943749][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.959981][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.034349][ T6588] veth1_macvtap: left promiscuous mode [ 104.040568][ T6588] veth0_macvtap: left promiscuous mode [ 104.047086][ T6588] veth1_vlan: left promiscuous mode [ 104.052492][ T6588] veth0_vlan: left promiscuous mode [ 104.158147][ T7668] __nla_validate_parse: 6 callbacks suppressed [ 104.158164][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.519'. [ 104.557969][ T6588] team0 (unregistering): Port device team_slave_1 removed [ 104.597213][ T6588] team0 (unregistering): Port device team_slave_0 removed [ 105.077216][ T5858] Bluetooth: hci2: command tx timeout [ 105.133656][ T7679] openvswitch: netlink: Actions may not be safe on all matching packets [ 105.186350][ T7678] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.524'. [ 105.201279][ T7678] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 105.211480][ T7678] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 105.219767][ T7678] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.524'. [ 105.229449][ T7678] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 105.237961][ T7678] netlink: 'syz.2.524': attribute type 2 has an invalid length. [ 105.344264][ T7689] Unsupported ieee802154 address type: 0 [ 105.355402][ T7689] hsr0: VLAN not yet supported [ 105.359288][ T7689] netlink: 'syz.4.527': attribute type 10 has an invalid length. [ 105.386767][ T7686] netlink: 'syz.0.528': attribute type 3 has an invalid length. [ 105.400241][ T7686] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.528'. [ 105.411122][ T7689] netlink: 148 bytes leftover after parsing attributes in process `syz.4.527'. [ 105.486648][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 105.521526][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 105.557619][ T7696] netlink: 'syz.2.531': attribute type 3 has an invalid length. [ 105.564499][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 105.768035][ T7699] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 105.776570][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 105.792207][ T7699] netlink: 224 bytes leftover after parsing attributes in process `syz.4.532'. [ 105.809026][ T7707] erspan0: entered promiscuous mode [ 105.818879][ T7707] macvtap1: entered promiscuous mode [ 105.824311][ T7707] macvtap1: entered allmulticast mode [ 105.832923][ T7707] erspan0: entered allmulticast mode [ 105.843391][ T7475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.871128][ T7475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.909618][ T7475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.968711][ T7475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.004931][ T7718] netlink: 'syz.1.536': attribute type 29 has an invalid length. [ 106.031651][ T7718] netlink: 'syz.1.536': attribute type 29 has an invalid length. [ 106.262697][ T7475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.376973][ T7475] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.426114][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.433260][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.475336][ T7475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.485848][ T7475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.503452][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.510696][ T6588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.745713][ T7759] sock: sock_timestamping_bind_phc: sock not bind to device [ 106.763740][ T7759] tap0: tun_chr_ioctl cmd 1074025675 [ 106.769200][ T7759] tap0: persist disabled [ 106.883725][ T7475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.038846][ T7475] veth0_vlan: entered promiscuous mode [ 107.080100][ T7475] veth1_vlan: entered promiscuous mode [ 107.144701][ T5858] Bluetooth: hci2: command tx timeout [ 107.189460][ T7475] veth0_macvtap: entered promiscuous mode [ 107.208942][ T7475] veth1_macvtap: entered promiscuous mode [ 107.246226][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.297787][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.308361][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.330145][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.403371][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.424535][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.495604][ T7475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.523015][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.556371][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.566610][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.577309][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.587537][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.598291][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.609795][ T7475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.621361][ T7475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.630349][ T7475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.639343][ T7475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.648612][ T7475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.671873][ T7777] infiniband syz0: set down [ 107.683020][ T7777] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.690914][ T7777] infiniband syz0: set active [ 107.699250][ T7777] bond0: (slave team0): Enslaving as an active interface with an up link [ 107.765223][ T7799] bond0: (slave bond_slave_0): Releasing backup interface [ 107.923037][ T7804] bridge_slave_1: left allmulticast mode [ 107.959443][ T7804] bridge_slave_1: left promiscuous mode [ 107.965767][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.975020][ T7804] bridge_slave_0: left allmulticast mode [ 107.980813][ T7804] bridge_slave_0: left promiscuous mode [ 107.990540][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.089760][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.106721][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.169792][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.211701][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.422756][ T7830] delete_channel: no stack [ 108.832764][ T7858] netlink: zone id is out of range [ 108.844150][ T7858] netlink: del zone limit has 4 unknown bytes [ 108.938009][ T7866] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 109.272782][ T7895] bridge0: port 1(syz_tun) entered blocking state [ 109.281928][ T7895] bridge0: port 1(syz_tun) entered disabled state [ 109.312539][ T7895] syz_tun: entered allmulticast mode [ 109.321167][ T7895] syz_tun: entered promiscuous mode [ 109.332045][ T7895] bridge0: port 1(syz_tun) entered blocking state [ 109.338641][ T7895] bridge0: port 1(syz_tun) entered forwarding state [ 109.353164][ T7897] __nla_validate_parse: 10 callbacks suppressed [ 109.353182][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'. [ 109.472036][ T7906] validate_nla: 7 callbacks suppressed [ 109.472057][ T7906] netlink: 'syz.0.591': attribute type 13 has an invalid length. [ 109.698275][ T6566] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.079169][ T7919] sch_tbf: burst 4398 is lower than device lo mtu (1075109906) ! [ 110.224121][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'. [ 110.237580][ T6566] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.424188][ T6566] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.497184][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.561020][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.573115][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.594838][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.613812][ T5862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.623874][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.636703][ T6566] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.996403][ T7957] netlink: 100 bytes leftover after parsing attributes in process `syz.1.607'. [ 111.020434][ T6566] bridge_slave_1: left allmulticast mode [ 111.027477][ T6566] bridge_slave_1: left promiscuous mode [ 111.033226][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.092839][ T6566] bridge_slave_0: left allmulticast mode [ 111.101532][ T6566] bridge_slave_0: left promiscuous mode [ 111.142369][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.204261][ T7966] netlink: 100 bytes leftover after parsing attributes in process `syz.0.608'. [ 111.738280][ T6566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.752107][ T6566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.762695][ T6566] bond0 (unregistering): Released all slaves [ 111.781752][ T7973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.201504][ T7939] chnl_net:caif_netlink_parms(): no params data found [ 112.416906][ T8006] ͺͺͺͺͺͺ: renamed from vlan0 (while UP) [ 112.667564][ T5862] Bluetooth: hci2: command tx timeout [ 112.681823][ T8014] Bluetooth: MGMT ver 1.23 [ 112.704560][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.711742][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.730094][ T7939] bridge_slave_0: entered allmulticast mode [ 112.765803][ T7939] bridge_slave_0: entered promiscuous mode [ 112.949762][ T8010] veth0_vlan: left allmulticast mode [ 112.974833][ T8029] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 112.981306][ T8010] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 112.990122][ T8010] macvtap1: left allmulticast mode [ 113.001087][ T8010] erspan0: left allmulticast mode [ 113.027760][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.035057][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.042287][ T7939] bridge_slave_1: entered allmulticast mode [ 113.049422][ T7939] bridge_slave_1: entered promiscuous mode [ 113.158501][ T6566] hsr_slave_0: left promiscuous mode [ 113.168234][ T6566] hsr_slave_1: left promiscuous mode [ 113.178445][ T6566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.188539][ T6566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.200276][ T6566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.213215][ T6566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.262852][ T6566] veth1_macvtap: left promiscuous mode [ 113.272026][ T6566] veth0_macvtap: left promiscuous mode [ 113.284723][ T6566] veth1_vlan: left promiscuous mode [ 113.300323][ T6566] veth0_vlan: left promiscuous mode [ 113.757720][ T6566] team0 (unregistering): Port device team_slave_1 removed [ 113.798787][ T6566] team0 (unregistering): Port device team_slave_0 removed [ 114.171854][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 114.203668][ T7939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.248015][ T7939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.348526][ T8057] xt_TCPMSS: Only works on TCP SYN packets [ 114.406542][ T7939] team0: Port device team_slave_0 added [ 114.436652][ T7939] team0: Port device team_slave_1 added [ 114.534901][ T8063] netlink: 116 bytes leftover after parsing attributes in process `syz.2.630'. [ 114.629775][ T8068] list_del corruption, ffff88807fb09c00->next is LIST_POISON1 (dead000000000100) [ 114.652314][ T8068] ------------[ cut here ]------------ [ 114.658287][ T8068] kernel BUG at lib/list_debug.c:58! [ 114.669680][ T8068] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 114.670073][ T7939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.676630][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.0.632 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 114.676652][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.676662][ T8068] RIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140 [ 114.694900][ T7939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.704204][ T8068] Code: e8 01 7c 00 07 90 0f 0b 48 c7 c7 a0 07 61 8c 4c 89 fe e8 ef 7b 00 07 90 0f 0b 48 c7 c7 00 08 61 8c 4c 89 fe e8 dd 7b 00 07 90 <0f> 0b 48 c7 c7 60 08 61 8c 4c 89 fe e8 cb 7b 00 07 90 0f 0b 48 c7 [ 114.704222][ T8068] RSP: 0018:ffffc90003cd77d8 EFLAGS: 00010246 [ 114.711481][ T7939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.736972][ T8068] RAX: 000000000000004e RBX: dead000000000122 RCX: 03bf58204c122d00 [ 114.736989][ T8068] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 114.736999][ T8068] RBP: dffffc0000000000 R08: ffffffff8174a14c R09: fffffbfff1cf9fd0 [ 114.737011][ T8068] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: dffffc0000000000 [ 114.737024][ T8068] R13: ffff888033dcc000 R14: dead000000000100 R15: ffff88807fb09c00 [ 114.737037][ T8068] FS: 00007f590961b6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 114.737052][ T8068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.737065][ T8068] CR2: 00007f03ca773f98 CR3: 0000000065390000 CR4: 00000000003526f0 [ 114.737080][ T8068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.737090][ T8068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.737099][ T8068] Call Trace: [ 114.737106][ T8068] [ 114.737114][ T8068] ? __die_body+0x5f/0xb0 [ 114.759574][ T7939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.762759][ T8068] ? die+0x9e/0xc0 [ 114.774117][ T7939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.781181][ T8068] ? do_trap+0x15a/0x3a0 [ 114.781208][ T8068] ? __list_del_entry_valid_or_report+0xf4/0x140 [ 114.781232][ T8068] ? do_error_trap+0x1dc/0x2c0 [ 114.781252][ T8068] ? __list_del_entry_valid_or_report+0xf4/0x140 [ 114.789351][ T7939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.797151][ T8068] ? __pfx_do_error_trap+0x10/0x10 [ 114.797179][ T8068] ? handle_invalid_op+0x34/0x40 [ 114.797197][ T8068] ? __list_del_entry_valid_or_report+0xf4/0x140 [ 114.797219][ T8068] ? exc_invalid_op+0x38/0x50 [ 114.797237][ T8068] ? asm_exc_invalid_op+0x1a/0x20 [ 114.797257][ T8068] ? __wake_up_klogd+0xcc/0x110 [ 114.826173][ T5982] IPVS: starting estimator thread 0... [ 114.828662][ T8068] ? __list_del_entry_valid_or_report+0xf4/0x140 [ 114.880949][ T8083] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 114.899683][ T8068] ? __list_del_entry_valid_or_report+0xf3/0x140 [ 114.899722][ T8068] mgmt_pending_remove+0x26/0x1a0 [ 114.899740][ T8068] mgmt_pending_foreach+0xd1/0x130 [ 114.899763][ T8068] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 114.899781][ T8068] __mgmt_power_off+0x183/0x430 [ 114.899798][ T8068] ? __pfx___mgmt_power_off+0x10/0x10 [ 114.899818][ T8068] ? __mutex_trylock_common+0x183/0x2e0 [ 114.899836][ T8068] ? __pfx___might_resched+0x10/0x10 [ 114.899855][ T8068] ? __pfx___mutex_trylock_common+0x10/0x10 [ 114.899874][ T8068] ? rcu_is_watching+0x15/0xb0 [ 114.899891][ T8068] ? trace_contention_end+0x3c/0x120 [ 114.899908][ T8068] ? __mutex_lock+0x2ef/0xd70 [ 114.899926][ T8068] ? __mutex_unlock_slowpath+0x21d/0x750 [ 114.899945][ T8068] ? hci_dev_close_sync+0x5c8/0x11c0 [ 114.899966][ T8068] ? __pfx___mutex_lock+0x10/0x10 [ 114.914978][ T8084] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 114.915251][ T8068] ? lockdep_hardirqs_on+0x99/0x150 [ 114.921561][ T8084] netlink: 636 bytes leftover after parsing attributes in process `syz.4.636'. [ 114.932026][ T8068] ? _raw_spin_unlock_irq+0x2e/0x50 [ 114.932044][ T8068] ? drain_workqueue+0x2d3/0x3a0 [ 114.932067][ T8068] ? hci_discovery_set_state+0x57/0x180 [ 114.932086][ T8068] hci_dev_close_sync+0x6c4/0x11c0 [ 114.932110][ T8068] hci_dev_close+0x112/0x210 [ 114.932128][ T8068] sock_do_ioctl+0x158/0x460 [ 114.932153][ T8068] ? __pfx_sock_do_ioctl+0x10/0x10 [ 114.939648][ T8083] netlink: 636 bytes leftover after parsing attributes in process `syz.4.636'. [ 114.942158][ T8068] sock_ioctl+0x626/0x8e0 [ 114.948566][ T8079] IPVS: using max 37 ests per chain, 88800 per kthread [ 114.953112][ T8068] ? __pfx_sock_ioctl+0x10/0x10 [ 114.953136][ T8068] ? __fget_files+0x29/0x470 [ 115.148054][ T8068] ? __fget_files+0x3f3/0x470 [ 115.152738][ T8068] ? __pfx_sock_ioctl+0x10/0x10 [ 115.157596][ T8068] __se_sys_ioctl+0xf9/0x170 [ 115.162197][ T8068] do_syscall_64+0xf3/0x230 [ 115.166698][ T8068] ? clear_bhb_loop+0x35/0x90 [ 115.171369][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.177254][ T8068] RIP: 0033:0x7f590877e719 [ 115.181686][ T8068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.201288][ T8068] RSP: 002b:00007f590961b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.209696][ T8068] RAX: ffffffffffffffda RBX: 00007f5908935f80 RCX: 00007f590877e719 [ 115.217666][ T8068] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 115.225624][ T8068] RBP: 00007f59087f139e R08: 0000000000000000 R09: 0000000000000000 [ 115.233583][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.241548][ T8068] R13: 0000000000000000 R14: 00007f5908935f80 R15: 00007fffa3ab6fb8 [ 115.249513][ T8068] [ 115.252545][ T8068] Modules linked in: [ 115.257424][ T8068] ---[ end trace 0000000000000000 ]--- [ 115.260940][ T5862] Bluetooth: hci2: command tx timeout [ 115.269386][ T8068] RIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140 [ 115.293596][ T8068] Code: e8 01 7c 00 07 90 0f 0b 48 c7 c7 a0 07 61 8c 4c 89 fe e8 ef 7b 00 07 90 0f 0b 48 c7 c7 00 08 61 8c 4c 89 fe e8 dd 7b 00 07 90 <0f> 0b 48 c7 c7 60 08 61 8c 4c 89 fe e8 cb 7b 00 07 90 0f 0b 48 c7 [ 115.328845][ T8068] RSP: 0018:ffffc90003cd77d8 EFLAGS: 00010246 [ 115.344473][ T8068] RAX: 000000000000004e RBX: dead000000000122 RCX: 03bf58204c122d00 [ 115.352752][ T8068] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 115.358719][ T8082] netdevsim netdevsim2: Firmware load for 'up/../file0/file0' refused, path contains '..' component [ 115.362832][ T8068] RBP: dffffc0000000000 R08: ffffffff8174a14c R09: fffffbfff1cf9fd0 [ 115.389562][ T8068] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: dffffc0000000000 [ 115.398401][ T8068] R13: ffff888033dcc000 R14: dead000000000100 R15: ffff88807fb09c00 [ 115.408361][ T8068] FS: 00007f590961b6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 115.418035][ T8068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.426683][ T8068] CR2: 00007ffeea917fa8 CR3: 0000000065390000 CR4: 00000000003526f0 [ 115.434781][ T8068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.442769][ T8068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.452703][ T8068] Kernel panic - not syncing: Fatal exception [ 115.459026][ T8068] Kernel Offset: disabled [ 115.463339][ T8068] Rebooting in 86400 seconds..