last executing test programs: 9.418220377s ago: executing program 3 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 9.273636668s ago: executing program 3 (id=982): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x11b, 0xc, 0x12, 0x0, 0x0, 0x70, {0xbc39, 0x0, 0x8}}}}]}, 0x78}}, 0x0) 9.041671476s ago: executing program 3 (id=985): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000061401002cbd7000fcdbdf2508000180"], 0x20}}, 0x0) 8.864793028s ago: executing program 3 (id=989): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000000c0)="751a75bb0a955bacea01e7eeb9d7327867", 0x11}], 0x3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8.644725281s ago: executing program 3 (id=994): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000000280)=""/227, &(0x7f0000000180)=0xe3) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = socket(0x25, 0xc, 0x0) splice(r3, &(0x7f00000001c0)=0x401, r1, &(0x7f0000000200)=0x20, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x2, 0x3, 0x0, 0x2}}, 0x26) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r4, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x10}, {&(0x7f0000000380)={0x10, 0x3f2}, 0x10}], 0x2}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1400000031001fffffff00000000000003"], 0x114}], 0x1}, 0x0) 8.095937938s ago: executing program 3 (id=1004): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_LIMIT_BURST={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, r2}, 0x38) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a0fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deecd5cb8d69ea6549c58a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f890000fe1a9d24417388290000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a626737e49646a8a14861f2bbd4d6abf0146052414c789df44b161b"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/167, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x7, 0x10, 0x0, 0xfffffffffffffe0c}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) write$binfmt_script(r6, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) recvmmsg(r6, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x102, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r8, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r9, 0xe35, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x17}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040085}, 0x4001d) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd0400"/28], 0x0, 0x38}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x21, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000221d460ab2d506956854cd39fdbb3f2a474642969fe2646f408aa506", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001e000b010000000000000000fe8000000000000000000000000000bb0000000000000000fc01000000000000000000000000000000000073000000000c001d0000000000000000001c0017"], 0x68}}, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000100)={0x1d, r13}, 0x18) connect$can_j1939(r12, &(0x7f0000000140)={0x1d, r13}, 0x18) 3.264912209s ago: executing program 2 (id=1074): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, &(0x7f0000000100)={r3}, 0x0, 0x0) 2.148752942s ago: executing program 2 (id=1087): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) 2.022705688s ago: executing program 2 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 1.887526794s ago: executing program 4 (id=1093): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000380)={0x2c, r1, 0x8, 0x0, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000480)={0x2c, r3, 0xf0a7f0384afb92c5, 0x0, 0x0, {{0x60}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x36}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000fedbdf250200000008000100000000000800020002000000080001000100000008000200020000000800010003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x40081) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b"], 0x28}}, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 1.717074454s ago: executing program 2 (id=1096): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, &(0x7f0000000100)={r3}, 0x0, 0x0) 1.546057878s ago: executing program 4 (id=1097): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000101050000000000000000000200000006001240000100002c0001801400018008000100e000000208000200ac1e001d06000340000000000c0002"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x80000, @mcast1}}, {{0xa, 0x4e21, 0x3, @dev}}}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="6caa0309086355b54d6ce759b75d384b0fd75d77e5ad1ec101ced0184910b5f0b9b8fed92125b6dcdd2cbea69342ff3266a90464c336b096f646b66a38d89aafdaf76bf6dbc52a6f49963d0b637c1aef5101194210c85042152a65397093a6779886aa0605746bfbd5083bd739acc9bd8c1c92565de8d2119023b9e6886ef636fb974357b3f203d50df5f616d9cb", 0x8e}, {&(0x7f00000001c0)='g', 0x1}, {&(0x7f0000000200)="54eea01dba09c38a29a43baffef23f65fa974d4d9b53f4076ce32784cbf9f57e42b4de1de7ba3c7261d825b95c78ceb91201aef978f7530fd3be9fd814a6c03528f9397f2f91a8b94ef523dd4a7ff090e0756915fda71b527e6fadfeeb9fe767a2b70662f81ed7e289dd87d4829776e89d200ab1bdbc9ff8e8e08831b71bd555a9ed64868b90956075ee11ee1e31d443b1eaa9f5c109c6eb556a7654", 0x9c}, {&(0x7f00000002c0)="a1ac999e0261aabefaec1e6d10e365ebe7bd57f678dfa0d2b892c251e8b89e0d4a7bad30f2d83336eff6bfe8ac1181b1ecb65a7022fc05313e624832004db7c3f1fe049168f7eecdad87f39c9e98205e8aa78275b5839d879ab16519715884e778f15baa1f691a615f1a7d40cd53d64ef87c35075f6a52167196be10caa33ad692b1e0a44aa8b78daa8d3687879da41c530c6a595007b40787b4c54396dfc67fccd023095b0791b7ccf2b776454b6e3b767329d87d34758d582f7294f953483ebfed56c0eab78c4d8a25692c34c3fc0c170810aa48a8b60d1868b6c92ffddc008b1d26", 0xe3}, {&(0x7f00000003c0)="92f9a1830c0ccafb08c09f35e9a1bc550eee1276396d34f17a8caa5f6146799de3a81b2576795ffeea57aa1d8275b72be8c2a9bf664710d3e61d5fbfe849ae8d571ff2202ffcecc1a670a030fa9dd932ea", 0x51}], 0x5, &(0x7f0000001a80)=ANY=[@ANYBLOB="38000000004e7fd0175c824040ec6b91d319425ce000000000000700000001441c00030000000000000000ffffffff00311af1825251e4c76126d10000000000000000133085d52897a83841c5bccbcd1817e30609c1d5d279316c0bf9494298f7bd184ae90788f2d2eec2ac37ca63ad5b1f630142c42b60a19bb0569b795a010000008b0d217f248e56c7105ac43639ca2f367012610048ef09d64875adc68cfb1bb26184d01dc12e72ff3839b7ce486d8bdfc5e5c0a6657e3a8c0c991ee9ee83d246dc37ad2eb1f69e31006b89d61e85d0dfa8686f681090ad2831d0628849e94a817484"], 0x38}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4b, &(0x7f00000007c0), 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r4, 0x4) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000000000000100100000e000000af3403addfcaee0f7fa687b62cc9bd9003d5d57ce0888e64850b2d26d60bb87863c85ee6314d83bd0e0fe537318c9a60d9f362bdfe54c21016312f3a4cdb271a4f78a20f5e6bc5edb2ac5c28c72b"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x8041}, 0x10) sendmsg$tipc(r7, &(0x7f0000000340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) socketpair(0x22, 0x3, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000020803000009000000000000020000031400048008000a400000000608000240000000d9050003002f0000000600024088630000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000015) 1.228973168s ago: executing program 4 (id=1102): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 1.154089491s ago: executing program 4 (id=1103): r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004}}) 1.02560052s ago: executing program 0 (id=1104): socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @loopback}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_bt_hci(r0, 0x400448c8, &(0x7f0000000000)) 877.114581ms ago: executing program 0 (id=1106): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2c8, 0x3, 0x398, 0x4, 0x229, 0x240, 0x208, 0x4c000000, 0x300, 0x328, 0x328, 0x300, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00', {}, {}, 0x6}, 0x0, 0x1e8, 0x208, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x100000007, 0x0, 0x0, 0x0, 0x8000, 0xffff}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "41e9"}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 795.097057ms ago: executing program 1 (id=1107): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20}, 0x20}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="f53dacff", 0x3df5}], 0x1}}], 0x1, 0x0) 754.954363ms ago: executing program 4 (id=1108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="a81bab221b4a9db303d226ce7cb8", 0xe}, {&(0x7f0000000600)='Z', 0x1}, {&(0x7f0000000340)="c81b3c301d85f4fb64e34fc958df04000ef2634d020a78ee00407f0796662e4d01538834aa9f5c5c2b18073a1dff07c2c4d28dd8c973c173bef03901f4066f5b2f3582748595b31331abaeacc859887cdd0104000000000000b172f2db1f67d8da99662dd4c2ddf13a5f2a2e92bf8988f30a8cce0100de6bdb9f09464465655ff52b46ff0000000000000000", 0x8c}, {&(0x7f0000000800)="ed", 0x1}, {&(0x7f00000008c0)="d0", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)='&', 0x1}, {&(0x7f0000000d00)="8f", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)="990e0c0eadc3fb46ba6b74c1b7707224ccfcd08e2e784324433c7fb152c89305f6cabd7938862e09a185cf4f06335008ee96b94e4e7d77591cd4d001524e1c8b7e8eff6132dff8bb6fb86532ceac76c39f2f19b9a55957ba8d6ae96a6f73624a4918af718cbb9732e5eb58c13a976cfbce791d3bb06871722c5dadbf3fa9a151d1", 0x81}, {&(0x7f0000001040)='\f', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001380)="be", 0x1}], 0x41}}], 0x5, 0x4008440) 645.093123ms ago: executing program 0 (id=1109): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 632.154435ms ago: executing program 1 (id=1110): socket$inet(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_remove_blocks\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 612.477729ms ago: executing program 4 (id=1111): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r3}}, 0x24}}, 0x0) 538.674062ms ago: executing program 2 (id=1112): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2009) 528.901234ms ago: executing program 0 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}}, 0x0) 414.991787ms ago: executing program 1 (id=1114): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}], 0x2, 0x0) 325.244629ms ago: executing program 0 (id=1115): r0 = socket(0x1, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xe5c0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r0, 0x0) 303.214786ms ago: executing program 2 (id=1116): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x26, 0x5, 0xd847, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x14, r2, 0x329}, 0x14}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 300.261117ms ago: executing program 1 (id=1117): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)=""/189, 0x32, 0xbd, 0x1}, 0x20) 153.600428ms ago: executing program 0 (id=1118): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x8, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x2a, 0x1, 0x24, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x780, 0x4, 0x5}}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000003b00070100000000000000000100000004000000080001"], 0x28}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x40, r7, 0x5, 0x2000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x16, {0x6, 0x8001, 0x7, 0xa402}}}, @NL80211_ATTR_SSID={0xb, 0x34, @random="d67d51453bbbe5"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 103.579662ms ago: executing program 1 (id=1119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20}, 0x20}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="f53dacff", 0x3df5}], 0x1}}], 0x1, 0x0) 0s ago: executing program 1 (id=1120): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="a81bab221b4a9db303d226ce7cb8", 0xe}, {&(0x7f0000000600)='Z', 0x1}, {&(0x7f0000000340)="c81b3c301d85f4fb64e34fc958df04000ef2634d020a78ee00407f0796662e4d01538834aa9f5c5c2b18073a1dff07c2c4d28dd8c973c173bef03901f4066f5b2f3582748595b31331abaeacc859887cdd0104000000000000b172f2db1f67d8da99662dd4c2ddf13a5f2a2e92bf8988f30a8cce0100de6bdb9f09464465655ff52b46ff0000000000000000", 0x8c}, {&(0x7f0000000800)="ed", 0x1}, {&(0x7f00000008c0)="d0", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)='&', 0x1}, {&(0x7f0000000d00)="8f", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)="990e0c0eadc3fb46ba6b74c1b7707224ccfcd08e2e784324433c7fb152c89305f6cabd7938862e09a185cf4f06335008ee96b94e4e7d77591cd4d001524e1c8b7e8eff6132dff8bb6fb86532ceac76c39f2f19b9a55957ba8d6ae96a6f73624a4918af718cbb9732e5eb58c13a976cfbce791d3bb06871722c5dadbf3fa9a151d1", 0x81}, {&(0x7f0000001040)='\f', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001380)="be", 0x1}], 0x41}}], 0x5, 0x4008440) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 68.071942][ T5084] cgroup: Unknown subsys name 'net' [ 68.217296][ T5084] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.904529][ T5084] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.624925][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.632263][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.633741][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.641331][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.650486][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.656271][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.670738][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.676127][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.680884][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.686815][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.692430][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.699865][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.715525][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.723599][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.725071][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.733898][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.739639][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.746309][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.752327][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.762964][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.767460][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.776291][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.781900][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.787850][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.794404][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.808688][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.810304][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.829276][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.830853][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.876093][ T4491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.335559][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 71.621588][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 71.692722][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 71.704800][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.718350][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.720458][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.725549][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.733017][ T5103] bridge_slave_0: entered allmulticast mode [ 71.745563][ T5103] bridge_slave_0: entered promiscuous mode [ 71.754274][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 71.765620][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.772836][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.780172][ T5103] bridge_slave_1: entered allmulticast mode [ 71.787900][ T5103] bridge_slave_1: entered promiscuous mode [ 71.849835][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 71.915690][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.968216][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.113266][ T5103] team0: Port device team_slave_0 added [ 72.123444][ T5103] team0: Port device team_slave_1 added [ 72.130167][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.138024][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.145209][ T5095] bridge_slave_0: entered allmulticast mode [ 72.152666][ T5095] bridge_slave_0: entered promiscuous mode [ 72.161993][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.169265][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.176447][ T5095] bridge_slave_1: entered allmulticast mode [ 72.184314][ T5095] bridge_slave_1: entered promiscuous mode [ 72.210552][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.218040][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.225787][ T5093] bridge_slave_0: entered allmulticast mode [ 72.233154][ T5093] bridge_slave_0: entered promiscuous mode [ 72.241488][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.248810][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.255996][ T5093] bridge_slave_1: entered allmulticast mode [ 72.263775][ T5093] bridge_slave_1: entered promiscuous mode [ 72.297794][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.305004][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.312440][ T5097] bridge_slave_0: entered allmulticast mode [ 72.319599][ T5097] bridge_slave_0: entered promiscuous mode [ 72.328500][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.335663][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.343403][ T5097] bridge_slave_1: entered allmulticast mode [ 72.350743][ T5097] bridge_slave_1: entered promiscuous mode [ 72.458111][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.471532][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.481952][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.489006][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.515149][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.529943][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.542743][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.554667][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.605845][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.613303][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.639793][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.674244][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.683718][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.691217][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.698688][ T5094] bridge_slave_0: entered allmulticast mode [ 72.705763][ T5094] bridge_slave_0: entered promiscuous mode [ 72.716538][ T5093] team0: Port device team_slave_0 added [ 72.752803][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.760213][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.767583][ T5094] bridge_slave_1: entered allmulticast mode [ 72.774671][ T5094] bridge_slave_1: entered promiscuous mode [ 72.785298][ T5093] team0: Port device team_slave_1 added [ 72.828107][ T4491] Bluetooth: hci1: command tx timeout [ 72.840163][ T5095] team0: Port device team_slave_0 added [ 72.891310][ T5103] hsr_slave_0: entered promiscuous mode [ 72.898261][ T5103] hsr_slave_1: entered promiscuous mode [ 72.907364][ T5100] Bluetooth: hci2: command tx timeout [ 72.911037][ T5109] Bluetooth: hci3: command tx timeout [ 72.913146][ T4491] Bluetooth: hci4: command tx timeout [ 72.918873][ T5111] Bluetooth: hci0: command tx timeout [ 72.924906][ T5095] team0: Port device team_slave_1 added [ 72.953460][ T5097] team0: Port device team_slave_0 added [ 72.974628][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.981792][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.008203][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.021257][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.028314][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.054311][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.080229][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.087319][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.113287][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.126683][ T5097] team0: Port device team_slave_1 added [ 73.149192][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.161713][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.190995][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.198301][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.224817][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.304956][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.312037][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.338918][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.352348][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.359411][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.385391][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.413398][ T5094] team0: Port device team_slave_0 added [ 73.423605][ T5094] team0: Port device team_slave_1 added [ 73.525979][ T5095] hsr_slave_0: entered promiscuous mode [ 73.532637][ T5095] hsr_slave_1: entered promiscuous mode [ 73.539573][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.547899][ T5095] Cannot create hsr debugfs directory [ 73.561882][ T5093] hsr_slave_0: entered promiscuous mode [ 73.568459][ T5093] hsr_slave_1: entered promiscuous mode [ 73.574802][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.582529][ T5093] Cannot create hsr debugfs directory [ 73.594262][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.601350][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.627508][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.640813][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.647888][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.674885][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.789409][ T5097] hsr_slave_0: entered promiscuous mode [ 73.798514][ T5097] hsr_slave_1: entered promiscuous mode [ 73.804801][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.812534][ T5097] Cannot create hsr debugfs directory [ 73.935286][ T5094] hsr_slave_0: entered promiscuous mode [ 73.942513][ T5094] hsr_slave_1: entered promiscuous mode [ 73.952920][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.960630][ T5094] Cannot create hsr debugfs directory [ 74.343908][ T5103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.370087][ T5103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.380870][ T5103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.403343][ T5103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.488793][ T5095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.503958][ T5095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.515713][ T5095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.552590][ T5095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.617932][ T5093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.637661][ T5093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.650236][ T5093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.664338][ T5093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.790464][ T5097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.829613][ T5097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.848644][ T5097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.865190][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.894442][ T5097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.909128][ T5111] Bluetooth: hci1: command tx timeout [ 74.929935][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.963006][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.970506][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.987860][ T5111] Bluetooth: hci0: command tx timeout [ 74.988164][ T4491] Bluetooth: hci4: command tx timeout [ 74.993295][ T5109] Bluetooth: hci3: command tx timeout [ 74.998978][ T5100] Bluetooth: hci2: command tx timeout [ 75.036528][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.043753][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.073461][ T5094] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.105601][ T5094] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.119624][ T5094] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.161879][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.169072][ T5094] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.269711][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.313321][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.330145][ T5103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.399690][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.407354][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.419328][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.426540][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.464610][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.539234][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.546434][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.559862][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.567206][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.632407][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.723792][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.804620][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.811852][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.846571][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.874095][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.907206][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.914467][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.970564][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.025420][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.032778][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.102878][ T5097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.125675][ T5097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.156269][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.163524][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.264557][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.291685][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.353453][ T5103] veth0_vlan: entered promiscuous mode [ 76.400637][ T5103] veth1_vlan: entered promiscuous mode [ 76.511999][ T5093] veth0_vlan: entered promiscuous mode [ 76.580954][ T5093] veth1_vlan: entered promiscuous mode [ 76.601146][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.654427][ T5095] veth0_vlan: entered promiscuous mode [ 76.722813][ T5103] veth0_macvtap: entered promiscuous mode [ 76.734941][ T5095] veth1_vlan: entered promiscuous mode [ 76.801555][ T5103] veth1_macvtap: entered promiscuous mode [ 76.920072][ T5093] veth0_macvtap: entered promiscuous mode [ 76.954731][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.965490][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.986173][ T5095] veth0_macvtap: entered promiscuous mode [ 76.993000][ T5100] Bluetooth: hci1: command tx timeout [ 77.015178][ T5093] veth1_macvtap: entered promiscuous mode [ 77.029890][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.048460][ T5095] veth1_macvtap: entered promiscuous mode [ 77.062348][ T5103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.071525][ T5100] Bluetooth: hci3: command tx timeout [ 77.071577][ T5100] Bluetooth: hci0: command tx timeout [ 77.077597][ T4491] Bluetooth: hci2: command tx timeout [ 77.079688][ T5103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.083445][ T4491] Bluetooth: hci4: command tx timeout [ 77.089045][ T5103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.089082][ T5103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.160680][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.172695][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.185720][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.208417][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.220496][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.232527][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.247821][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.262196][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.296033][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.309645][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.322317][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.332784][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.344009][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.354709][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.370226][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.381780][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.393444][ T5095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.402916][ T5095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.412981][ T5095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.421780][ T5095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.489569][ T5093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.500200][ T5093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.509919][ T5093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.518873][ T5093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.595171][ T5097] veth0_vlan: entered promiscuous mode [ 77.645207][ T5097] veth1_vlan: entered promiscuous mode [ 77.654299][ T5094] veth0_vlan: entered promiscuous mode [ 77.660511][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.670819][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.747750][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.755627][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.785101][ T5094] veth1_vlan: entered promiscuous mode [ 77.856730][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.864392][ T5097] veth0_macvtap: entered promiscuous mode [ 77.892123][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.956143][ T5097] veth1_macvtap: entered promiscuous mode [ 77.963289][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.972284][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.992532][ T5094] veth0_macvtap: entered promiscuous mode [ 78.011802][ T5094] veth1_macvtap: entered promiscuous mode [ 78.028308][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.036185][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.207135][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.228607][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.251263][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.285339][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.300160][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.307490][ T5185] Bluetooth: MGMT ver 1.22 [ 78.314581][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.336802][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.363933][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.367703][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.377679][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.398540][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.413729][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.440195][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.475728][ T5188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.478114][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.505546][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.517599][ T5188] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 78.517943][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.556153][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.569614][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.605056][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.617139][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.627377][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.638018][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.649141][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.661591][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.676467][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.718464][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.767243][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.787267][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.825574][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.838843][ T5194] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.851057][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.872073][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.886969][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.898855][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.928998][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.954912][ T5097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.990517][ T5097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.032425][ T5097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.056943][ T5097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.067800][ T4491] Bluetooth: hci1: command tx timeout [ 79.108391][ T5094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.117816][ T5094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.128409][ T5094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.147537][ T4491] Bluetooth: hci4: command tx timeout [ 79.148073][ T5100] Bluetooth: hci0: command tx timeout [ 79.152974][ T4491] Bluetooth: hci3: command tx timeout [ 79.158918][ T5100] Bluetooth: hci2: command tx timeout [ 79.167072][ T5094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.643121][ T5217] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 79.679688][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.714180][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.859857][ T2484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.878396][ T2484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.970202][ T2459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.023084][ T2459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.217600][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.238533][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.900314][ T5258] sctp: [Deprecated]: syz.4.32 (pid 5258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.900314][ T5258] Use struct sctp_sack_info instead [ 81.661493][ T5283] warning: `syz.1.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.703889][ T5252] syz.4.32 (5252) used greatest stack depth: 18064 bytes left [ 81.730805][ T5288] netlink: 112 bytes leftover after parsing attributes in process `syz.1.46'. [ 81.991217][ T5283] Cannot find add_set index 0 as target [ 82.590219][ T5320] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 82.812485][ T5324] netlink: 'syz.0.62': attribute type 3 has an invalid length. [ 82.841175][ T5324] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.62'. [ 83.689761][ T5356] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.698963][ T5356] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.708837][ T5356] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.718221][ T5356] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.800267][ T5356] vxlan0: entered promiscuous mode [ 83.805840][ T5356] vxlan0: entered allmulticast mode [ 83.887166][ T5356] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.896172][ T5356] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.905366][ T5356] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.914354][ T5356] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.155637][ T5371] netlink: 'syz.3.80': attribute type 3 has an invalid length. [ 84.180473][ T5371] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.80'. [ 85.228801][ T5410] netlink: 'syz.2.97': attribute type 3 has an invalid length. [ 85.267549][ T5410] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.97'. [ 85.379745][ T5415] xt_bpf: check failed: parse error [ 86.670452][ T5463] netlink: 'syz.2.117': attribute type 5 has an invalid length. [ 87.106286][ T783] cfg80211: failed to load regulatory.db [ 87.486423][ T5493] netlink: 'syz.1.131': attribute type 5 has an invalid length. [ 87.907367][ T5509] netlink: 56 bytes leftover after parsing attributes in process `syz.1.137'. [ 88.537049][ T5524] netlink: 'syz.4.144': attribute type 5 has an invalid length. [ 89.332505][ T5556] netlink: 'syz.1.158': attribute type 5 has an invalid length. [ 89.449643][ T5559] bridge_slave_1: left allmulticast mode [ 89.493471][ T5559] bridge_slave_1: left promiscuous mode [ 89.503102][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.579752][ T5559] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 89.634509][ T5563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.162'. [ 90.408755][ T5587] netlink: 'syz.0.172': attribute type 5 has an invalid length. [ 90.458362][ T5588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 90.552753][ T5592] bridge_slave_1: left allmulticast mode [ 90.577043][ T5592] bridge_slave_1: left promiscuous mode [ 90.597729][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.630006][ T5594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 90.642380][ T5592] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 91.890799][ T5628] bridge_slave_1: left allmulticast mode [ 91.896521][ T5628] bridge_slave_1: left promiscuous mode [ 91.922644][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.955369][ T5628] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 92.269827][ T29] audit: type=1800 audit(1719383279.596:2): pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.197" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1957 res=0 errno=0 [ 93.046424][ T29] audit: type=1800 audit(1719383280.376:3): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.211" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1971 res=0 errno=0 [ 93.157525][ T5681] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.231608][ T5681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.592467][ T5697] tipc: MTU too low for tipc bearer [ 93.781594][ T29] audit: type=1800 audit(1719383281.116:4): pid=5705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.225" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1962 res=0 errno=0 [ 94.127108][ T29] audit: type=1804 audit(1719383281.456:5): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.228" name="/root/syzkaller.wXXT1H/62/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 94.451122][ T5728] netlink: 52 bytes leftover after parsing attributes in process `syz.0.235'. [ 94.680499][ T29] audit: type=1800 audit(1719383282.016:6): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.239" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1952 res=0 errno=0 [ 94.945031][ T29] audit: type=1804 audit(1719383282.276:7): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.248" name="/root/syzkaller.VzsJ2B/51/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 95.052671][ T5760] netlink: 52 bytes leftover after parsing attributes in process `syz.2.251'. [ 95.463117][ T5780] xt_bpf: check failed: parse error [ 95.581980][ T5787] tipc: MTU too low for tipc bearer [ 95.820201][ T5800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.155687][ T5814] tipc: MTU too low for tipc bearer [ 96.569403][ T5838] netlink: 'syz.0.286': attribute type 33 has an invalid length. [ 96.742557][ T5846] tipc: MTU too low for tipc bearer [ 96.853188][ T5853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.292'. [ 97.086602][ T5864] team0: Device macvtap1 is already an upper device of the team interface [ 97.348745][ T5872] netlink: 'syz.4.298': attribute type 33 has an invalid length. [ 97.483638][ T5876] dummy0: entered promiscuous mode [ 97.502606][ T5876] dummy0: left promiscuous mode [ 97.829334][ T5887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 98.153307][ T5893] team0: Device macvtap1 is already an upper device of the team interface [ 98.713000][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.322'. [ 98.973120][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 98.989882][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 99.311374][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 99.584545][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.337'. [ 99.753908][ T29] audit: type=1804 audit(1719383287.076:8): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.341" name="/root/syzkaller.VzsJ2B/64/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 100.110102][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 100.826245][ T6031] tipc: Started in network mode [ 100.847015][ T6031] tipc: Node identity fffffffd, cluster identity 4711 [ 100.867360][ T6031] tipc: Node number set to 4294967293 [ 101.356029][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 101.374265][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 101.392654][ T6069] netlink: 47 bytes leftover after parsing attributes in process `syz.0.382'. [ 101.643780][ T6081] dummy0: entered promiscuous mode [ 101.663562][ T6081] dummy0: left promiscuous mode [ 101.725130][ T6084] netlink: 'syz.2.389': attribute type 5 has an invalid length. [ 101.985375][ T29] audit: type=1804 audit(1719383289.316:9): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.396" name="/root/syzkaller.CYSbKF/86/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 102.220413][ T6109] netlink: 'syz.0.400': attribute type 3 has an invalid length. [ 102.250783][ T6109] netlink: 'syz.0.400': attribute type 3 has an invalid length. [ 102.294035][ T6114] netlink: 'syz.2.402': attribute type 1 has an invalid length. [ 102.395146][ T6122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.449256][ T6122] bond0: (slave bond1): Enslaving as an active interface with an up link [ 102.467450][ T6116] tipc: Started in network mode [ 102.483111][ T6116] tipc: Node identity fffffffd, cluster identity 4711 [ 102.513283][ T6116] tipc: Node number set to 4294967293 [ 102.539301][ T6123] netlink: 'syz.4.405': attribute type 5 has an invalid length. [ 102.594130][ T6114] bond1: entered promiscuous mode [ 102.626982][ T6114] bond1: entered allmulticast mode [ 103.151147][ T6154] ebt_among: dst integrity fail: 102 [ 103.260772][ T6158] netlink: 'syz.2.420': attribute type 5 has an invalid length. [ 103.275250][ T6157] netlink: 'syz.1.419': attribute type 3 has an invalid length. [ 103.307302][ T6157] netlink: 'syz.1.419': attribute type 3 has an invalid length. [ 103.816735][ T6182] ebt_among: dst integrity fail: 102 [ 103.983106][ T6191] netlink: 'syz.1.436': attribute type 3 has an invalid length. [ 103.999258][ T6191] netlink: 'syz.1.436': attribute type 3 has an invalid length. [ 104.190334][ T6200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.402583][ T6212] ebt_among: dst integrity fail: 102 [ 104.622078][ T29] audit: type=1804 audit(1719383291.956:10): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.449" name="/root/syzkaller.Me7RQg/96/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 104.775795][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.450'. [ 104.817120][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.450'. [ 105.202350][ T6245] ebt_among: dst integrity fail: 102 [ 105.636623][ T6267] Zero length message leads to an empty skb [ 105.849779][ T6280] ebt_among: dst integrity fail: 102 [ 106.023784][ T6292] netlink: 60 bytes leftover after parsing attributes in process `syz.1.481'. [ 106.049693][ T6292] unsupported nlmsg_type 40 [ 106.394909][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 106.404937][ T6316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.419268][ T6308] syzkaller0: entered allmulticast mode [ 106.685257][ T6324] netlink: 332 bytes leftover after parsing attributes in process `syz.1.497'. [ 106.740628][ T6324] netlink: 104 bytes leftover after parsing attributes in process `syz.1.497'. [ 106.777485][ T6324] netlink: 32 bytes leftover after parsing attributes in process `syz.1.497'. [ 106.957478][ T6335] validate_nla: 2 callbacks suppressed [ 106.957500][ T6335] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 107.099658][ T6342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.109102][ T6342] bond0: (slave bond1): Enslaving as an active interface with an up link [ 107.185929][ T6335] bond1: entered promiscuous mode [ 107.194722][ T6335] bond1: entered allmulticast mode [ 107.734435][ T6384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 108.642446][ T6429] syzkaller0: entered allmulticast mode [ 108.644401][ T29] audit: type=1804 audit(1719383295.976:11): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.539" name="/root/syzkaller.CYSbKF/126/memory.events" dev="sda1" ino=1970 res=1 errno=0 [ 109.233297][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.552'. [ 109.252005][ T6462] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 109.295680][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.4.551'. [ 109.897087][ T6499] netlink: 60 bytes leftover after parsing attributes in process `syz.2.565'. [ 109.909520][ T6503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.081162][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 110.264380][ T6521] netlink: 36 bytes leftover after parsing attributes in process `syz.4.573'. [ 110.346535][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'. [ 110.654398][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 110.679727][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 110.935157][ T6548] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 110.957392][ T6548] netlink: 224 bytes leftover after parsing attributes in process `syz.2.584'. [ 111.079987][ T6551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.255622][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 111.284500][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 111.659030][ T6594] netlink: 18 bytes leftover after parsing attributes in process `syz.0.604'. [ 112.204727][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.315356][ T6696] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 113.423957][ T6698] netlink: 'syz.0.652': attribute type 28 has an invalid length. [ 113.796149][ T6720] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 113.820160][ T6720] macsec1: entered promiscuous mode [ 113.876632][ T6720] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 114.088533][ T6737] netlink: 'syz.4.667': attribute type 28 has an invalid length. [ 114.305340][ T6744] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 114.324959][ T6744] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 114.921852][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.090063][ T6784] __nla_validate_parse: 21 callbacks suppressed [ 115.090087][ T6784] netlink: 6 bytes leftover after parsing attributes in process `syz.3.687'. [ 115.335037][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.695'. [ 115.345165][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.695'. [ 115.355053][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 115.364787][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.695'. [ 115.427901][ T6804] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 115.607643][ T6815] Bluetooth: hci3: invalid length 0, exp 2 for type 21 [ 115.851306][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.708'. [ 115.867154][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.708'. [ 115.885371][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 115.894869][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.708'. [ 116.255007][ T6849] trusted_key: syz.0.710 sent an empty control message without MSG_MORE. [ 117.019670][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 117.191981][ T29] audit: type=1804 audit(1719383304.526:12): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.731" name="/root/syzkaller.VzsJ2B/142/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 118.042980][ T6918] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 118.076240][ T6918] macsec1: entered promiscuous mode [ 118.094456][ T6918] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 118.927852][ T6962] tipc: Enabling of bearer rejected, failed to enable media [ 119.272917][ T6981] Κό: entered promiscuous mode [ 119.292739][ T6981] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 119.728106][ T7007] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 119.912314][ T7018] netlink: 'syz.4.788': attribute type 5 has an invalid length. [ 120.233159][ T7035] __nla_validate_parse: 7 callbacks suppressed [ 120.233184][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 120.378406][ T7040] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 120.494151][ T7044] ip6gretap0: entered promiscuous mode [ 120.501451][ T7044] batadv_slave_0: entered promiscuous mode [ 120.532501][ T7044] ip6gretap0: left promiscuous mode [ 120.542331][ T7044] batadv_slave_0: left promiscuous mode [ 120.578644][ T7046] dccp_invalid_packet: P.Data Offset(172) too large [ 120.918810][ T7056] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 120.945773][ T7060] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 121.201128][ T7077] netlink: 60 bytes leftover after parsing attributes in process `syz.4.813'. [ 121.394741][ T7068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.811'. [ 121.692762][ T7095] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 121.952130][ T7107] SET target dimension over the limit! [ 122.253268][ T7124] batadv_slave_1: entered promiscuous mode [ 122.293677][ T7124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.836'. [ 122.317847][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 122.370570][ T7123] batadv_slave_1: left promiscuous mode [ 122.463082][ T7134] SET target dimension over the limit! [ 122.510249][ T7137] sit0: entered promiscuous mode [ 122.516637][ T7137] sit0: entered allmulticast mode [ 122.619225][ T7143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.841'. [ 122.743880][ T7151] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 122.911826][ T7159] netlink: 'syz.0.850': attribute type 5 has an invalid length. [ 122.920494][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.850'. [ 123.166448][ T7164] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 123.381152][ T7170] ebt_among: src integrity fail: 300 [ 123.494023][ T7174] sit0: entered promiscuous mode [ 123.505469][ T7174] sit0: entered allmulticast mode [ 124.079670][ T7196] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 124.113124][ T7196] netlink: 224 bytes leftover after parsing attributes in process `syz.4.860'. [ 124.123857][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.866'. [ 124.124896][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 124.173707][ T7199] netlink: 'syz.1.868': attribute type 2 has an invalid length. [ 124.195422][ T7199] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 125.712539][ T7269] netlink: 'syz.2.900': attribute type 9 has an invalid length. [ 125.739802][ T7269] __nla_validate_parse: 1 callbacks suppressed [ 125.739827][ T7269] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.900'. [ 126.043055][ T7270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.901'. [ 126.484112][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.916'. [ 126.585497][ T7311] netlink: 'syz.0.918': attribute type 3 has an invalid length. [ 126.608170][ T7311] netlink: 'syz.0.918': attribute type 3 has an invalid length. [ 126.632430][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'. [ 126.678751][ T7320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.921'. [ 127.351530][ T7362] x_tables: unsorted underflow at hook 3 [ 127.824758][ T7386] batman_adv: batadv0: Adding interface: ipvlan2 [ 127.850063][ T7386] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.916188][ T7386] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 129.356667][ T7444] netlink: 44 bytes leftover after parsing attributes in process `syz.2.978'. [ 130.345978][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 130.359494][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1003'. [ 130.420431][ T7504] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 130.558066][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 130.621402][ T7511] netlink: 'syz.3.1004': attribute type 29 has an invalid length. [ 131.049097][ T7532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1012'. [ 132.224306][ T7572] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1024'. [ 132.275316][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.286581][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.297841][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.309781][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.328987][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.336436][ T5109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.876808][ T7574] chnl_net:caif_netlink_parms(): no params data found [ 133.113450][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.124168][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.133499][ T7574] bridge_slave_0: entered allmulticast mode [ 133.141441][ T7574] bridge_slave_0: entered promiscuous mode [ 133.154704][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.164699][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.171463][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.181790][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.189837][ T7574] bridge_slave_1: entered allmulticast mode [ 133.199420][ T7574] bridge_slave_1: entered promiscuous mode [ 133.329623][ T7574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.342032][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 133.371192][ T7574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.518362][ T7574] team0: Port device team_slave_0 added [ 133.554116][ T7574] team0: Port device team_slave_1 added [ 133.708643][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.753469][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.754077][ T7634] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1048'. [ 133.830148][ T7574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.869903][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.898965][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.981465][ T7574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.111497][ T7574] hsr_slave_0: entered promiscuous mode [ 134.140784][ T7574] hsr_slave_1: entered promiscuous mode [ 134.168369][ T7574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.176526][ T7574] Cannot create hsr debugfs directory [ 134.429003][ T5109] Bluetooth: hci1: command tx timeout [ 134.665929][ T7668] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1059'. [ 134.693959][ T7574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.840830][ T7574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.058814][ T7574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.210457][ T7574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.221726][ T7693] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1072'. [ 135.354566][ T7691] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 135.544394][ T7574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 135.565665][ T7574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.580627][ T7574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.603339][ T7574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.879914][ T7574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.924810][ T7574] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.971591][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.978860][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.040367][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.047678][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.307512][ T7718] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1082'. [ 136.518415][ T5109] Bluetooth: hci1: command tx timeout [ 136.683214][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 136.749038][ T7574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.795708][ T7749] tipc: Failed to remove unknown binding: 66,1,1/4294967293:2135893561/2135893563 [ 136.835238][ T7749] tipc: Failed to remove unknown binding: 66,1,1/4294967293:2135893561/2135893563 [ 136.874606][ T7749] tipc: Failed to remove unknown binding: 66,1,1/4294967293:2135893561/2135893563 [ 136.971821][ T7574] veth0_vlan: entered promiscuous mode [ 137.012381][ T7574] veth1_vlan: entered promiscuous mode [ 137.060240][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 137.130001][ T7574] veth0_macvtap: entered promiscuous mode [ 137.160038][ T7574] veth1_macvtap: entered promiscuous mode [ 137.338654][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.386965][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.427648][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.459681][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.491753][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.506382][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.521554][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.541947][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.564416][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.576789][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.601522][ T7574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.668592][ T7779] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 137.723749][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.758896][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.771654][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.797418][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.808356][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.846247][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.890889][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.931143][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.941937][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.953955][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.970603][ T7574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.989632][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 138.091685][ T7789] bond1: entered promiscuous mode [ 138.126313][ T7574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.148899][ T7574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.165673][ T7574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.178018][ T7574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.213806][ T7795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.223160][ T7795] bond2: entered promiscuous mode [ 138.231112][ T7795] bond1: (slave bond2): Enslaving as an active interface with an up link [ 138.243257][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 138.329260][ T7798] bond1 (unregistering): (slave bond2): Releasing backup interface [ 138.373705][ T7798] bond2: left promiscuous mode [ 138.380561][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 138.391633][ T7809] openvswitch: netlink: Flow actions attr not present in new flow. [ 138.421970][ T7798] bond1 (unregistering): Released all slaves [ 138.464068][ T7804] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000193: 0000 [#1] PREEMPT SMP KASAN PTI [ 138.476819][ T7804] KASAN: null-ptr-deref in range [0x0000000000000c98-0x0000000000000c9f] [ 138.485287][ T7804] CPU: 1 PID: 7804 Comm: syz.2.1116 Not tainted 6.10.0-rc4-syzkaller-00936-g50b70845fc5c #0 [ 138.495468][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 138.505655][ T7804] RIP: 0010:coalesce_fill_reply+0xcc/0x1b70 [ 138.511603][ T7804] Code: e8 19 2c f9 f7 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 e3 f1 5e f8 bb 98 0c 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 c5 f1 5e f8 48 8b 03 48 89 44 24 [ 138.531242][ T7804] RSP: 0018:ffffc90004286ee0 EFLAGS: 00010206 [ 138.537336][ T7804] RAX: 0000000000000193 RBX: 0000000000000c98 RCX: 0000000000040000 [ 138.545407][ T7804] RDX: ffffc9000a05c000 RSI: 0000000000002bc8 RDI: 0000000000002bc9 [ 138.553389][ T7804] RBP: ffffc90004287118 R08: ffffffff899bb137 R09: 006e75745f7a7973 [ 138.561550][ T7804] R10: dffffc0000000000 R11: ffffffff899cf860 R12: ffffffff899cf860 [ 138.569891][ T7804] R13: dffffc0000000000 R14: ffff888029873180 R15: ffff888028d4a000 [ 138.577880][ T7804] FS: 00007fd4e872f6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 138.586912][ T7804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.593594][ T7804] CR2: 0000001b32207ff8 CR3: 0000000063cbc000 CR4: 00000000003506f0 [ 138.602121][ T7804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.610151][ T7804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.618148][ T7804] Call Trace: [ 138.621441][ T7804] [ 138.624381][ T7804] ? __die_body+0x88/0xe0 [ 138.628909][ T7804] ? die_addr+0x108/0x140 [ 138.633254][ T7804] ? exc_general_protection+0x3dd/0x5d0 [ 138.638821][ T7804] ? asm_exc_general_protection+0x26/0x30 [ 138.644560][ T7804] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 138.650234][ T7804] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 138.656006][ T7804] ? ethnl_default_dumpit+0x517/0xb30 [ 138.662106][ T7804] ? coalesce_fill_reply+0xcc/0x1b70 [ 138.667452][ T7804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.673474][ T7804] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 138.679779][ T7804] ? rcu_is_watching+0x15/0xb0 [ 138.684563][ T7804] ? trace_contention_end+0x3c/0x120 [ 138.689860][ T7804] ? nla_put+0x131/0x1e0 [ 138.694223][ T7804] ? __asan_memcpy+0x40/0x70 [ 138.699086][ T7804] ? nla_put+0x131/0x1e0 [ 138.703347][ T7804] ? ethnl_fill_reply_header+0x295/0x3c0 [ 138.709095][ T7804] ? __pfx_netdev_run_todo+0x10/0x10 [ 138.714400][ T7804] ? __pfx_ethnl_fill_reply_header+0x10/0x10 [ 138.720617][ T7804] ? ethnl_ops_complete+0xba/0xd0 [ 138.725674][ T7804] ? coalesce_prepare_data+0x175/0x1e0 [ 138.731162][ T7804] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 138.736810][ T7804] ? ethnl_default_dumpit+0x83/0xb30 [ 138.742110][ T7804] ethnl_default_dumpit+0x5ac/0xb30 [ 138.747514][ T7804] ? ethnl_default_dumpit+0x83/0xb30 [ 138.752858][ T7804] genl_dumpit+0x107/0x1a0 [ 138.757303][ T7804] netlink_dump+0x647/0xd80 [ 138.761922][ T7804] ? __pfx_netlink_dump+0x10/0x10 [ 138.767262][ T7804] ? genl_start+0x597/0x6d0 [ 138.771916][ T7804] __netlink_dump_start+0x59f/0x780 [ 138.777167][ T7804] genl_rcv_msg+0x88c/0xec0 [ 138.781967][ T7804] ? mark_lock+0x9a/0x350 [ 138.786408][ T7804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.791473][ T7804] ? __pfx_genl_start+0x10/0x10 [ 138.796368][ T7804] ? __pfx_genl_dumpit+0x10/0x10 [ 138.801331][ T7804] ? __pfx_genl_done+0x10/0x10 [ 138.806142][ T7804] ? __pfx_lock_acquire+0x10/0x10 [ 138.811185][ T7804] ? __pfx_ethnl_default_start+0x10/0x10 [ 138.816976][ T7804] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 138.822745][ T7804] ? __pfx_ethnl_default_done+0x10/0x10 [ 138.828431][ T7804] ? __pfx___might_resched+0x10/0x10 [ 138.833745][ T7804] netlink_rcv_skb+0x1e3/0x430 [ 138.838607][ T7804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.843643][ T7804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.849049][ T7804] ? __netlink_deliver_tap+0x77e/0x7c0 [ 138.854658][ T7804] genl_rcv+0x28/0x40 [ 138.858663][ T7804] netlink_unicast+0x7f0/0x990 [ 138.863457][ T7804] ? __pfx_netlink_unicast+0x10/0x10 [ 138.868876][ T7804] ? __virt_addr_valid+0x183/0x520 [ 138.874032][ T7804] ? __check_object_size+0x49c/0x900 [ 138.879341][ T7804] ? bpf_lsm_netlink_send+0x9/0x10 [ 138.884471][ T7804] netlink_sendmsg+0x8e4/0xcb0 [ 138.889344][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.894654][ T7804] ? __import_iovec+0x536/0x820 [ 138.899702][ T7804] ? aa_sock_msg_perm+0x91/0x160 [ 138.904659][ T7804] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.910040][ T7804] ? security_socket_sendmsg+0x87/0xb0 [ 138.915511][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.920827][ T7804] __sock_sendmsg+0x221/0x270 [ 138.925520][ T7804] ____sys_sendmsg+0x525/0x7d0 [ 138.930320][ T7804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.935714][ T7804] __sys_sendmsg+0x2b0/0x3a0 [ 138.940329][ T7804] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.945476][ T7804] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 138.951418][ T7804] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.957758][ T7804] ? do_syscall_64+0x100/0x230 [ 138.962648][ T7804] ? do_syscall_64+0xb6/0x230 [ 138.967514][ T7804] do_syscall_64+0xf3/0x230 [ 138.972035][ T7804] ? clear_bhb_loop+0x35/0x90 [ 138.976729][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.982915][ T7804] RIP: 0033:0x7fd4e7975ae9 [ 138.987345][ T7804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.007653][ T7804] RSP: 002b:00007fd4e872f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 139.016166][ T7804] RAX: ffffffffffffffda RBX: 00007fd4e7b03fa0 RCX: 00007fd4e7975ae9 [ 139.024319][ T7804] RDX: 0000000000000000 RSI: 0000000020000e80 RDI: 0000000000000003 [ 139.032383][ T7804] RBP: 00007fd4e79f6746 R08: 0000000000000000 R09: 0000000000000000 [ 139.040369][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.048376][ T7804] R13: 000000000000000b R14: 00007fd4e7b03fa0 R15: 00007ffed317dff8 [ 139.056367][ T7804] [ 139.059563][ T7804] Modules linked in: [