last executing test programs: 1m33.606812722s ago: executing program 2 (id=350): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x2, 0x1ffe, 0x2, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r6, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m33.352100185s ago: executing program 2 (id=354): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @enum, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x3}, 0x28) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) (async, rerun: 32) getsockopt$inet_mreqn(r1, 0x0, 0xe3c0a38b5f2f69f4, &(0x7f00000003c0)={@multicast2, @broadcast, 0x0}, &(0x7f0000000400)=0xc) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x3b8, r4, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_WANTED={0x140, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "3cde5d6cdc5a79271c648674837a8c32e28bd01a6ebe8245d92a3850ea2015bc617c68911ac6c31f0425681d5044c66cb6c342d0cba0a0cd9e6890c03f49372f06244f8000358d2fdc418a4cec8dc3d744c14d8f1e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc8be}, @ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "a08ec5a74efe6dcef00fd0a1b838e85cd45b249bb695537991f18661cc86660360bfda61343a31d46633da7096c1233648a522a0910252b8dde7eef64c8c694a80b3db5ccc650c00562f6f9a770fb314508ecc937710b675ea8f201f1d9231b64794a0c90eb9137488f0f2a9204270c9bbb65ce6cf48f1032abc10d19a9d642e08e3c93a520756668dcf7bf3797291d45d0514ab6b84370185783613d0e0cb2f12b437a65574ff8163b9c0ecf25b5472bf159b963fb1109f6847e1eb4c5f0a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}]}, @ETHTOOL_A_FEATURES_WANTED={0x220, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x16c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.%:\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dsmark\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xcf\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '@.-{.-!#//!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ecb(camellia)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\x0f,%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd922}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'h\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xad, 0x5, "e130d74dc4f61e178024ac191ae0c1fe8ea4a95d14bd46c3df824c1d8e59657e94d952bd99670e064b833456e4983982306c650add06a597600d03efdc0e953d8c3908caed18321948fcc3756dffc5f1be1dc7b678b6387435cd9a855614058daabfd844051fed024f8e4836413e8f0b26951d89fcc4de0b2c9723f951c505836b7882ff72e4dc567ca44b35b296901fbb88b0c8953e147673b1e5c42015604d86af757960e8339855"}]}]}, 0x3b8}}, 0x800) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x40800) r12 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ethernet={0x0, @dev}, &(0x7f00000000c0)=0x80) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010008000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r12, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delqdisc={0x64, 0x25, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x10}, {0x4, 0x4}, {0xfff2, 0xb}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004800}, 0x4040001) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x23, 0x0, &(0x7f0000000000)) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x2e8, 0x50}], 0x1, 0x40800) 1m32.205071347s ago: executing program 2 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0xe4, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x11, 0x0, 0x0, 0x800000}, 0x80) 1m15.142813694s ago: executing program 2 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0xe4, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x11, 0x0, 0x0, 0x800000}, 0x80) 59.043360456s ago: executing program 2 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0xe4, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x11, 0x0, 0x0, 0x800000}, 0x80) 47.466321837s ago: executing program 2 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0xe4, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x11, 0x0, 0x0, 0x800000}, 0x80) 22.461780342s ago: executing program 4 (id=1040): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080045000030000000000002907800000000e000030000000078006701ffc693e000000200000000000000000000000000002069028ee5dc65dfe79d7701a296f16dad9b6a1c78afbe862f8abf16722fb77c5a785a4f8615c17f1fb2d18af60372b26da0c39612870441f7af3fb06c3653ae42d33a92589b533818348b08c229069bc3c6603012dc3d047c051682dc2e685684d229bd40fc99915a948ad8c5"], 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00f6de2d660000fe0000000000000008000f00fd000000", 0x28) 22.382711322s ago: executing program 4 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r1, 0x8, 0x55, 0x7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}], 0x2c) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x4040) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00fe0300fc10337081c6e63a62006558000008000280040005"], 0x34}, 0x1, 0x0, 0x0, 0xc800}, 0xc010) 22.268888671s ago: executing program 4 (id=1045): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a000020"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'veth1_to_hsr\x00', {'veth1\x00'}, 0x29c}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8000, 0x80, 0x80c, 0x1, {{0x2f, 0x4, 0x2, 0x1d, 0xbc, 0x68, 0x0, 0xff, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @empty, {[@timestamp_prespec={0x44, 0x24, 0x39, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x7aaa}, {@broadcast, 0x202}, {@empty, 0xffffff4f}]}, @end, @lsrr={0x83, 0x1f, 0xfc, [@dev={0xac, 0x14, 0x14, 0x42}, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @remote]}, @ssrr={0x89, 0x17, 0xc7, [@dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0xfe, 0x3, 0x3, [{@empty, 0x7}, {@remote, 0x2}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x3ff}, {@multicast2, 0x9}, {@private=0xa010102, 0x80}, {@empty, 0x6}, {@broadcast, 0xd}, {@loopback, 0x401}]}]}}}}}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7430000000000008500000067000000b7000000000000009500000200000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffd6e, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @fallback=0x7, 0xffffffffffffffff, 0x6}, 0x94) write(r1, &(0x7f00000001c0)="478e434c7bf7d9cf0334e08dbe8a17869c729c7aa71a9b57185d106ac72fa3cc5dc236e6d82c929252fabae2273137b96a9b44ca7491135c2f414b5700099e307c1711c8b0a46e5c51c7ea9f0e1d13c2db5cee81fec5bab5ce45d11b3aa2f8927725270c7d23e2beb88be561fe491b315d69a6650d", 0x75) 21.993923556s ago: executing program 4 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x48c}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x80, "301a1a38ffeaccf2b9fc49887d2e90b7ded507fa8c04e92a2a4dae970db4cea8dac5752f36ebd9155187a0e84e9d057a478bd9a40956fcb4f63a98715631c40f7dfb13a1b75ed7f3826e9af0b930b61aaf2dfbed472acba5a9690977d7e413819ebe09611e6de9ec0aa3327f0095006ae27929c71d2a48c0fe6b1ff14b1df7b1"}, &(0x7f0000000100)=0xa4) 11.652293051s ago: executing program 4 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x48c}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x80, "301a1a38ffeaccf2b9fc49887d2e90b7ded507fa8c04e92a2a4dae970db4cea8dac5752f36ebd9155187a0e84e9d057a478bd9a40956fcb4f63a98715631c40f7dfb13a1b75ed7f3826e9af0b930b61aaf2dfbed472acba5a9690977d7e413819ebe09611e6de9ec0aa3327f0095006ae27929c71d2a48c0fe6b1ff14b1df7b1"}, &(0x7f0000000100)=0xa4) 2.845690485s ago: executing program 3 (id=1227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$phonet(0x23, 0x2, 0x1) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) (async) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.659988819s ago: executing program 4 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x48c}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x80, "301a1a38ffeaccf2b9fc49887d2e90b7ded507fa8c04e92a2a4dae970db4cea8dac5752f36ebd9155187a0e84e9d057a478bd9a40956fcb4f63a98715631c40f7dfb13a1b75ed7f3826e9af0b930b61aaf2dfbed472acba5a9690977d7e413819ebe09611e6de9ec0aa3327f0095006ae27929c71d2a48c0fe6b1ff14b1df7b1"}, &(0x7f0000000100)=0xa4) 2.617712404s ago: executing program 3 (id=1230): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) read$alg(r3, &(0x7f00000005c0)=""/4096, 0x1000) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.249347015s ago: executing program 3 (id=1233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) accept(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x300, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getsockopt(0xffffffffffffffff, 0x44, 0x1, &(0x7f0000000080)=""/91, &(0x7f0000000000)=0x5b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8000}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.809797896s ago: executing program 0 (id=1237): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e83e6a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c", 0x56}, {&(0x7f0000000280)="af4c42680bee64c57b0c7748a3924e8e5599e0238057", 0x16}, {&(0x7f0000000140)="d6f12351876d5702fb64018cc67dcb307616eafb60", 0x15}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e20, @local}}}, 0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}, [0x8c3f, 0x200, 0x7ff, 0x80000001, 0x0, 0x3, 0x4, 0x5, 0x1, 0x2, 0x8000000000000000, 0x4dcc, 0x7, 0x8, 0x1]}, &(0x7f0000000080)=0x100) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r1, 0x0) 1.683184574s ago: executing program 0 (id=1238): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000000000)="771bce4d784982896174fcc7e9639e7322576f3d353eb182d94305902ddc5674e789d03fbb7200ecd0ef8c82368285ba9a92546a9fb03a6e93d6a001eb23cf0a7e6805ebbe6a59644da272dfbcc1e82099765c22865e45533b61d42fcd583620b477dc0a6ea127aa5ba041c4fcba5620d146a372ebbe13f0ebb19168921ca985") r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r2}) 1.561353792s ago: executing program 0 (id=1240): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7, 0x700, 0x8, 0x9, {{0x2c, 0x4, 0x2, 0x2c, 0xb0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1b, 0x72, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @remote, @remote]}, @rr={0x7, 0x7, 0x40, [@rand_addr=0x64010102]}, @noop, @lsrr={0x83, 0xf, 0x3c, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}]}, @end, @timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0xf, [{@loopback, 0x5}, {@loopback, 0x400}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010100, 0x401}, {@multicast2, 0x7}, {@multicast2, 0x4}, {@multicast1, 0x3}]}, @noop, @end, @timestamp={0x44, 0x28, 0x20, 0x0, 0x7, [0x2, 0x7fff, 0x3, 0x0, 0x0, 0x6, 0x4, 0x9, 0x99]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x6, 0x0, 0xc, @mcast2, @mcast1, 0x10000, 0x0, 0x3, 0x3}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty, @empty}, &(0x7f0000000400)=0xc) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x81, 0x0, 0x8, @mcast2, @mcast1, 0x78c8, 0x8000, 0x1, 0x4}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x20, 0x7, 0x9, 0x5, {{0x14, 0x4, 0x0, 0x2, 0x50, 0x68, 0x0, 0xa, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x2}, {@rand_addr=0x64010101, 0x138}]}, @timestamp={0x44, 0x10, 0xa6, 0x0, 0x6, [0x4, 0x9, 0x3]}, @ssrr={0x89, 0xb, 0xfb, [@remote, @multicast2]}, @cipso={0x86, 0xb, 0x1, [{0x5, 0x3, '_'}, {0x6, 0x2}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x5, 0xd325, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, @private0, 0x88, 0x7f16, 0x2, 0xde08}}) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000700)={@initdev, @multicast1, 0x0}, &(0x7f0000000740)=0xc) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x85, 0x2, 0x13, @remote, @remote, 0x7, 0x8000, 0x257, 0xabb6}}) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0x16, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) (rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18112080}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c00)={0x218, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x24048090}, 0x20004010) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001000)={r0, &(0x7f0000000ec0)="57e65476f5c6c0c7f4b6d9569cef1360816a63c61bc6e38d5c4b1500c1698dd50042bdf280faeeb9d3dd44b1d63b20c5ee1eb4183dd7089a3285002f5a4229022f946778ffe5913392f870c61e27099efe73abc42444aaf2984f0ac0572b2bdf2193a25644ca7923078e4e30fa41c9450cbd13c9329155e5f6a690655af272a9aeafd75cff498574", &(0x7f0000000f80)=@buf="dc273bb4a343e078ef787c0f8ab74920a91b2273b248eab2863d13979fd2f65c155b43d58b871a7ec1ceb541af1a920ae677c93b8bd15df21776fd72f71c1f13e6212b64d487", 0x1}, 0x20) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002380)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002340)={&(0x7f0000001080)={0x12a0, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x1010, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0xf8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*\'\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "b705a69734e8951c976a33b94045177fa6b69f90b8198cb9653862b30ba846cdca3160036a665f96c2018fd34909c756d069c9f4b806aa9d9b8f28f02656e3bff122e7d880db0c10d579e5326cb87ade43094ac2b9584d44548e5bb49f9bd762e186df55c96842d2337b037954c7e310dd4ec319571d17b5c1f62b7bee49ae382ca48da378eece09af413ccc0916a0bc3ac453149bf7984eec7f6b5a2f532db48d6c70f13600846a"}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x20000000) (async, rerun: 64) bind$can_raw(r0, &(0x7f00000023c0), 0x10) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r17, &(0x7f00000027c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002780)={&(0x7f0000002440)={0x330, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x30c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-)\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x36}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}]}]}, @ETHTOOL_A_BITSET_MASK={0x7, 0x5, "9088ab"}, @ETHTOOL_A_BITSET_MASK={0xe8, 0x5, "12bd3e27f1c57bb98aa95aa1a35824d598172888100f53f2173bbdb5ebe969e75968760dd2b34fc78a5fec3a2d6dc9e9ff2ea1149f58fda09d1a155006ae663b7661aa7cd7cdd50d590466614adbe7fbe4c30598f19be7cde318c65ad775c39365b47eb369a737bedbb2a0c3c6e4cef33a14095b9ff35587f440f692080affe4dc50a2e13e6f36b53cec3838370079206b0b0280209cfb1289eb15589b5c5e4bd49437d4f376f75174b79b9eb5c6cf3cf94830d503d473e97f75b3712d9e159a202413ed44f1dc0a4d0108b6492f6cd698dc2cc8e5a46c8ce045f41611a7e9d1f9be39d6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "60715930bfb298643b0aeba78c7c653090e90d67231d19d5aa55179783e5e23e248f48132be50579fb9226e4ed5edd2c04b38c5408541162a2aeb10609310b125901dc0a4a1af651d5206867a38dac098e923f8113493eeb627278916b1b6cda0c9b566bd7f24605469d173f52a8cdc36969ae8c4def20fcc5b9a7fc68fec2407ece2b589496078225b9b7a9f1f2daad7534864d2ebbf6b712daec7d"}, @ETHTOOL_A_BITSET_MASK={0x73, 0x5, "17690774acc0e9977849d003b547ae3335251b4c97d66a6ec3381fe4c4066ea6c1f4fc90b2c6bc8f36be70d33fb7b16e355c811872a24473a7d15540a1eaedc78b8aaa4249d72c09b601b60d0b6728c6c83f8e821b1f71d8289ae918a83f2c28444259f890917181948fb10afa53ac"}, @ETHTOOL_A_BITSET_MASK={0xf, 0x5, "b374070f9696b8cfdc1b26"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}]}, 0x330}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bind$bt_hci(r0, &(0x7f0000002800)={0x1f, 0x2, 0x2}, 0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000002840)=0x2, 0x4) sendmsg$inet(r0, &(0x7f0000002b40)={&(0x7f0000002880)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000002a00)=[{&(0x7f00000028c0)="6f60e72472dbf1094e89d3df4bcf5810cc63e09be3a0b3baf01347e43e14ceb0274be15330cce8784d4724d00ce92faf9cc54538fbb34a79852210692bba6c65677f561b8c640e54c00c0e29b1080db298d77bb2d1391cf28cce05fbc1607f360f6541b67bd678", 0x67}, {&(0x7f0000002940)="e7653aa10b0735ca7484f934ed3c76011cba39aa6d472c0f375b5eee044284818edaa5f9058067e634adab31d8f4ef086ab5a8b5f09345f734c7e6d4f3db7aed5502d044aad19f576032bbc7c1555c524c85e478aab4c0fb369bbea49cefc260e51cd2ef4b61ca1c9f82fe37f2f67ddd1c4ee29e7a7c3f82798d05cb8d52b96147b902ec0b788386cb2ece4153459879468111f1a1a80b6c81aec27162b02c9297ecfa9fadf687d8c7", 0xa9}], 0x2, &(0x7f0000002a40)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x44, 0xa, "8344f44bb7507ac0"}, @timestamp_prespec={0x44, 0x1c, 0x3b, 0x3, 0x8, [{@local, 0x4}, {@rand_addr=0x64010102, 0x2}, {@multicast1}]}, @generic={0x88, 0xe, "88475a3de4a8c0208c8554e1"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xdf, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @cipso={0x86, 0x35, 0x3, [{0x1, 0xb, "b5b1bade0ff2179c4a"}, {0x5, 0xa, "9315f7f28c1c9dfb"}, {0x1, 0x8, "432ce484eb63"}, {0x6, 0x12, "06ee7ea194a57e75091b35558ae7a6b8"}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe4}}, @ip_retopts={{0x10}}], 0xd0}, 0x4000004) (async) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002bc0), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r17, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x45000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x58, r18, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x58}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) (async) recvmsg$qrtr(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002d00)=""/52, 0x34}, {&(0x7f0000002d40)=""/193, 0xc1}, {&(0x7f0000002e40)=""/10, 0xa}, {&(0x7f0000002e80)=""/148, 0x94}, {&(0x7f0000002f40)=""/84, 0x54}, {&(0x7f0000002fc0)=""/41, 0x29}], 0x6, &(0x7f0000003080), 0x0, 0x1}, 0x38, 0x10040) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000031c0)={'sit0\x00', &(0x7f0000003140)={'ip_vti0\x00', r5, 0x7, 0x7f40, 0x0, 0x588f045a, {{0x15, 0x4, 0x2, 0x1, 0x54, 0x64, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp={0x44, 0x8, 0x92, 0x0, 0x5, [0x4]}, @lsrr={0x83, 0x1f, 0x15, [@local, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @rand_addr=0x64010100]}, @cipso={0x86, 0x15, 0xc28146cbc6dccec7, [{0x7, 0xf, "6ca5e0745444948b5938fc0769"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000032c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)=@bridge_delneigh={0x50, 0x1d, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x0, 0x0, r4, 0x10, 0x8, 0xb}, [@NDA_IFINDEX={0x8, 0x8, r19}, @NDA_MASTER={0x8, 0x9, 0x8b6e}, @NDA_CACHEINFO={0x14, 0x3, {0x9ae8, 0x3, 0x2, 0x5}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_VNI={0x8, 0x7, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c040}, 0x400c000) 1.419415018s ago: executing program 0 (id=1241): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001080}, 0x40001) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x20, 0x0) 1.402087272s ago: executing program 1 (id=1242): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000009c0)="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", 0x14c}], 0x1, &(0x7f00000002c0)="f66ea2297fded0c2a6a5514ef0932365e03c694c1dae506c9e5f6434f65cd33e75e15734f11243925498d858d95e0c84f6dc875f74e34fa23d337d294807524ef8d5c12ac6e8fa32cffdd2cf9746f29b29934c5732b6bbd8a7c69d8516b40fc77a2b082467de35374588e803806bf5167ec818815931de96daf65c54527ef96602ba003fc8928928e8a2961d124893f957d6", 0x92, 0x20004885}, 0x880) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) accept4$tipc(r2, &(0x7f0000000100)=@name, &(0x7f0000000380)=0x10, 0x80000) sendmmsg$sock(r1, &(0x7f00000006c0)=[{{&(0x7f0000000500)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="0661db3b89c9bc7b54a7ce6c7d04befe91a23bf483dc629f51", 0x19}], 0x1, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xe8}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xc0}}], 0x1, 0x40) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000003c5f4fe22651ffffffff8d0f75080ce3fa2d49ffd05a060079af4a4272aab1829e93f18f0b2ed0cbf7b7ce257dfa7faf97e9f4a65de1d7df1ba8747ae9fd5d386af0a46b4d7aab130e37b976721b6f203b8e061e226bbb60b0f8cc79ed86f6a80000004f2a12cb3f3aff3c41", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ddff00000000000b00"/28], 0x48) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) shutdown(r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) 757.844824ms ago: executing program 1 (id=1243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8c000000000000000000000000000000000000000000000000ec0000da1c7ccfd34f74dd0868afe60f5ef881920ecbb045234d4a2d8f169b8a6e9ff36ef7c7c04f2af454f28e35095f821b1fc96afdf2e92965e0b2c99679237ca4139e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r1}, 0x10) 706.314012ms ago: executing program 1 (id=1244): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xfffffffffffffe7b, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), r6) (async) r8 = socket(0x10, 0x3, 0x0) getpeername$packet(r8, 0x0, 0x0) (async) write(r8, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000021c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002180)={&(0x7f0000002040)=ANY=[@ANYBLOB="a7449533", @ANYRES16=r7, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x40055}, 0x4000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r9, 0x0) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r11 = accept4(r9, 0x0, 0x0, 0x0) recvfrom$rose(r11, 0x0, 0x0, 0x10161, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r13, @ANYRESHEX=r12], 0x128}, 0x8000) (async) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 580.996309ms ago: executing program 3 (id=1245): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r3, @ANYBLOB="0d0d00000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="28005080050002000000000009000100baaec2d28c0000000800030004ac0f0005000900010000006c005080050002000500000011000100192af6e02bf81e5b01ee6f2b0f000000110001001448c6b9a9361527f3d5d79a0b0000000900010072b2ccdfe700000008000700000000000b0004002e8de2578aea60000800070001000000050009000000000003"], 0xe8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xd94b1173b64245b6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0x11c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0xf8, 0xc, "5e1c9bfcb7dad9dff7dd0ec49eb1d4d27e76be40a1520eca938fd22de57e65c62f5646f424542ccbfd50e116eb4546878bce97908b61be7c20118728978624a059a6c66a8b98ef921dbb45c9f2e892a4c4d22a909b647e0675247e9c753202856a2eb3fe95ec1eb2a5376983f94c215da4be595e9b753e38e908616948aa3c1dd499e556015b8240293e64bd4def1e7c9a49b431fd8e22bf47f79b1a7fdf82653c64f9a2a16598c8ad6360bfc58fc6ecccfce3d3aaa4f2840e45a493aaf4512d65413d07de2d4e325bdc5fb83731ed5c11ded930249f654c433fe7a5799bf4e75063746c6932b09120a0f1f762c22c72e251e95b"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x100000001}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x28}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x42d8}]}], {0x14}}, 0x230}, 0x1, 0x0, 0x0, 0x20040000}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r9, 0xf01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x88, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x3c}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80800}, 0x1) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r3, @ANYBLOB="0d0d00000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="28005080050002000000000009000100baaec2d28c0000000800030004ac0f0005000900010000006c005080050002000500000011000100192af6e02bf81e5b01ee6f2b0f000000110001001448c6b9a9361527f3d5d79a0b0000000900010072b2ccdfe700000008000700000000000b0004002e8de2578aea60000800070001000000050009000000000003"], 0xe8}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xd94b1173b64245b6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0x11c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0xf8, 0xc, "5e1c9bfcb7dad9dff7dd0ec49eb1d4d27e76be40a1520eca938fd22de57e65c62f5646f424542ccbfd50e116eb4546878bce97908b61be7c20118728978624a059a6c66a8b98ef921dbb45c9f2e892a4c4d22a909b647e0675247e9c753202856a2eb3fe95ec1eb2a5376983f94c215da4be595e9b753e38e908616948aa3c1dd499e556015b8240293e64bd4def1e7c9a49b431fd8e22bf47f79b1a7fdf82653c64f9a2a16598c8ad6360bfc58fc6ecccfce3d3aaa4f2840e45a493aaf4512d65413d07de2d4e325bdc5fb83731ed5c11ded930249f654c433fe7a5799bf4e75063746c6932b09120a0f1f762c22c72e251e95b"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x100000001}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x28}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x42d8}]}], {0x14}}, 0x230}, 0x1, 0x0, 0x0, 0x20040000}, 0xc000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r9, 0xf01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x88, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x3c}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80800}, 0x1) (async) 517.692941ms ago: executing program 0 (id=1246): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@expire={0x138, 0x18, 0x8, 0x70bd2b, 0x25dfdbfb, {{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4e22, 0x2, 0x4e20, 0x9, 0x2, 0x0, 0xa0, 0x4b, r2, r3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x58, 0x400, 0xa81, 0x4, 0xc4d, 0x2, 0xd, 0x4}, {0x7fff, 0x2, 0x5000000000000, 0x3}, {0x1, 0x5}, 0x70bd2d, 0x3503, 0x0, 0x2, 0xe, 0x2b}, 0x9}, [@coaddr={0x14, 0xe, @in=@rand_addr=0x64010100}, @XFRMA_SET_MARK={0x8, 0x1d, 0xf49}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @tfcpad={0x8, 0x16, 0xf01e}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @policy_type={0xa, 0x10, {0x1}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4010) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001500)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000ac0)={0x1, 0x8, @start={r6, 0x0, "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", "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"}, [0x100000001, 0x0, 0xf, 0x9, 0x7d762a6b, 0x3, 0x1, 0x7, 0xe19, 0x5d, 0xf, 0x6, 0x7, 0xa, 0x8, 0x200, 0xffffffffffffffff, 0x4, 0x1ff, 0x0, 0x9, 0x7, 0xb4bb, 0x8, 0x2, 0x5, 0x7, 0x4, 0x5, 0x2, 0x0, 0x5, 0x2c, 0x3, 0x3, 0x5, 0xffffffffffff0000, 0x5, 0xaba, 0xdb, 0xe00000, 0x7, 0x5, 0x6, 0xbc68, 0x81, 0x0, 0x3ff, 0x8001, 0x4, 0x0, 0x6, 0x80000001, 0x8000, 0x9, 0xe84, 0xb7, 0x80, 0x81, 0x4, 0x5, 0x8, 0x3, 0x8000]}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x5}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2000007c872ace}]}}]}, 0x58}}, 0x0) 493.575545ms ago: executing program 1 (id=1247): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x1070bd2c, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'ip6gre0\x00', 0x100}) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000040)="0debe16b9097e7c7") 275.303433ms ago: executing program 0 (id=1248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)={0x34, r1, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x13, 0xc, [@multicast2, @dev, @dev, @empty]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 193.805761ms ago: executing program 3 (id=1249): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, &(0x7f0000000040)=@x25, &(0x7f0000000100)=0x80, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) (async) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x5}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, 0x0, 0x0) 192.265684ms ago: executing program 1 (id=1250): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0xbc8, 0x0, 0xa, 0x148, 0x908, 0x10, 0xb30, 0x2a8, 0x2a8, 0xb30, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x41000000, @multicast1, 0x0, 0x0, 'bridge0\x00', 'virt_wifi0\x00'}, 0x0, 0x8a8, 0x908, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x1}, {0x70}, {0x4, 0x1}, {0x8000, 0x1}, {0x5, 0x3}, {0x9, 0x2}, {0x1000}, {0x8, 0x1}, {0x9, 0x3}, {0x10001}, {0xa}], [{0x0, 0x2}, {0x7ff, 0x80}, {0x7, 0x1}, {0x2, 0x9}, {0x3, 0xb743}, {}, {0x2}, {0x7, 0x100}, {0x8, 0x6}, {0x3, 0x4}, {0x8, 0xcc}], 0x3, 0x3}, {[{0x0, 0x1}, {0x80000000, 0x3}, {0x7, 0x2}, {0x3, 0xdee8dc261cf1d23e}, {0xf, 0x1}, {0xa5a, 0x1}, {0x1ff, 0x2}, {0x10}, {0x9, 0x2}, {0x1, 0x2}, {0xf, 0x3}], [{0x3ff, 0xfe}, {0x2, 0xf}, {0x89, 0x4}, {0x7, 0x9f}, {0xc00, 0xf9}, {0xfffffffa, 0x1a400}, {0x8, 0x7ff}, {0xfffffffd, 0xfffffffc}, {0x8, 0x6}, {0x2, 0x5}, {0xffff, 0x8000}], 0x4, 0x5}, {[{0x4}, {0x7, 0x2}, {0x9, 0x3}, {0x7}, {0x4, 0x2}, {0x3}, {0x27e, 0x2}, {0xff, 0x1}, {0x5, 0x2}, {0x81, 0x2}, {0x3ff, 0x1}], [{0x0, 0x3}, {0xff, 0x5}, {0x4, 0xa}, {0x1, 0x80000001}, {0x5, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0xbc1d, 0x10001}, {0x80000000, 0x6}, {0xfff, 0x5}, {0x10000, 0x10000}], 0x7, 0x8}, {[{0x2}, {0x9}, {0x10000}, {0x4, 0x1}, {0x7, 0x3}, {0xaa, 0x2}, {0x4916d1fa, 0x3}, {0x3ff, 0x1}, {0x697f8a48, 0x2}, {0x9, 0x2}, {0x8, 0x2}], [{0xf, 0x2}, {0x80000001, 0x4}, {0x3, 0x6}, {0x9, 0x1ff}, {0x7, 0xff}, {0x4, 0x9}, {0x9, 0x9}, {0x31c, 0x9}, {0x5, 0x5}, {0x4, 0xc}, {0xfffffffb, 0x7}], 0xb, 0xa}, {[{0x9, 0x3}, {0x8, 0x2}, {0x49, 0x2}, {0xfffffff8, 0x1}, {0x4997, 0x3}, {0x9e63}, {0x6, 0x3}, {0xffffffff, 0x2}, {0x6, 0x1}, {0x8, 0x2}, {0x1, 0x3}], [{0x6, 0xcb8}, {0x7f, 0x1800000}, {0x2, 0x9064}, {0xffff, 0xe2}, {0x8, 0x8001}, {0x1, 0xb9}, {0xd, 0x1}, {0xd, 0x4}, {0x9, 0x8}, {0x5, 0x4000000}, {0x3ff, 0x6}], 0x0, 0x1}, {[{0x5, 0x1}, {0x5, 0x3}, {0x7}, {0x269, 0x3}, {0x401, 0x1}, {0x9}, {0x80000001, 0x3}, {0x9, 0x3}, {0x80000001, 0x2}, {0x8001, 0x3}, {0x7}], [{0x2, 0x4}, {0xb2, 0x1}, {0x8001, 0x10000}, {0x4, 0x1}, {0xffffdef4, 0xc}, {0x95, 0xfffffffb}, {0x8, 0x8}, {0x605f, 0x40}, {0x81, 0xb}, {0x5, 0x3}, {0x8, 0x54a1ee43}], 0x1, 0xa}, {[{0x1, 0x2}, {0x2, 0x3}, {0x6, 0x1}, {0xffff5fe8, 0x2}, {0xfffffff7, 0x1}, {0x5, 0x3}, {0xfe, 0x2}, {0x2324, 0x2}, {0x4, 0x2}, {0x7, 0x3}, {0x40, 0x3}], [{0x7, 0x6}, {0x2, 0x83}, {0x2b, 0x4}, {0x2, 0x4}, {0x7ff, 0x5}, {0x4fe9, 0x9b}, {0x9, 0x6}, {0x5, 0x5}, {0x9, 0x3}, {0x25}, {0x400, 0x5}], 0x0, 0x3}, {[{0x101}, {0x7f, 0x3}, {0x37, 0x2}, {0x8, 0x3}, {0x0, 0x1}, {0x4}, {0x9}, {0x502, 0x1}, {0x3939}, {0x3, 0x2}, {0xbe, 0x3}], [{0x1, 0x100}, {0x8, 0x57}, {0x7, 0xc4b5}, {0x401, 0x2}, {0xfffff333, 0x1}, {0xd0c5, 0x1}, {0x2, 0xfffffffa}, {0x48000, 0x2}, {0x5ac, 0x7ff}, {0x4, 0x8}, {0x0, 0x8}], 0x9, 0x9}, {[{}, {0x4}, {0xe}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0xbf, 0x3}, {0x7}, {0x80000000, 0x1}, {0x0, 0x2}, {0xe, 0x1}], [{0xef0, 0x2}, {0x1, 0xfff}, {0x5, 0x40}, {0xfffffffe, 0x8}, {0x90000, 0x3}, {0x5, 0x400}, {0x2, 0x7}, {0x5, 0xc}, {0x4, 0x1}, {0x80, 0x6}, {0x94d}], 0x6, 0x9}, {[{0x8, 0x3}, {0x8}, {0xb80d, 0x3}, {0x4}, {0xfffffffc, 0x3}, {0x1}, {0x7fffffff, 0x2}, {0x2, 0x3}, {0x2, 0x3}, {0xe180000, 0x1}, {0x7, 0x1}], [{0x80000001, 0x3}, {0x1, 0x401}, {0x2, 0x3}, {0x4, 0x8000}, {0x3ff, 0x40}, {0x3, 0x8}, {0x1}, {0x1000, 0xf7}, {0x5359, 0x7fffffff}, {0x400, 0x6}, {0x1, 0xfff}], 0x8, 0x3}, {[{0x9}, {0xe, 0x2}, {0x400}, {0x7, 0x3}, {0x6, 0x2}, {0x9, 0x3}, {0x2, 0x2}, {0xfffffffc, 0x3}, {0xc6, 0x3}, {0xfffff001, 0x3}, {0x101}], [{0x9, 0x8000}, {0x980, 0x100}, {0xdda, 0x7}, {0x2, 0xffff}, {0x4, 0x1}, {0x6, 0x42}, {0x1, 0x40}, {0x3, 0x47}, {0x7, 0x9}, {0x2, 0x4}, {0x9, 0x2}], 0xa, 0x1}]}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x406, 0xa359e000, 0x0, 0x20}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x3ff, 0x5, [0x3f, 0x20, 0x29, 0x38, 0x21, 0x7, 0x3b, 0xf, 0x11, 0x33, 0x3a, 0x4, 0x12, 0x7, 0x31, 0x1d], 0x1, 0x5, 0x1}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'pimreg1\x00', 'veth0_to_team\x00', {0xff}, {}, 0x40}, 0x0, 0x208, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x1, 0x30, 0x0, 0x0, 0x7ffe, 0x1ff, 0xfffffff5}}}, @common=@set={{0x40}, {{0x1, [0x2, 0x2, 0x0, 0x4, 0x5, 0x4], 0x5}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xc28) 53.858302ms ago: executing program 3 (id=1251): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10002, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) sendmmsg$inet6(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b826", 0x2}], 0x1}}], 0x1, 0xc0000) 0s ago: executing program 1 (id=1252): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x2efb, 0x4) (async, rerun: 64) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r5) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x24, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000001, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000170000000000000000001200c61dd34e6cec46ce911dad914b6cc905bd1d76f74da9383739d13edd32f5cdaac5955cb877285e20dab0148a2eaf5d95848d43f309128fd14328950962ad23fb9d013361b81d62662f3fc66f2cf590f0d1102c49399484b564fd116d"], 0x50) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xbae9, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xd1, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3005000000000305040000001700000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000000000008001c00", @ANYRES32, @ANYBLOB], 0x30}}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080)="f0aa6ec1755373e6a0f7472dda", &(0x7f00000000c0)=@udp=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r9, 0x1, 0x6}, 0x99795d732647d9f8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events.local\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): dded [ 91.713439][ T5860] team0: Port device team_slave_1 added [ 91.725797][ T5843] hsr_slave_0: entered promiscuous mode [ 91.733139][ T5843] hsr_slave_1: entered promiscuous mode [ 91.742100][ T5854] team0: Port device team_slave_1 added [ 91.773804][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.780959][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.806969][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.863458][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.871462][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.897805][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.924093][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.931179][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.957567][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.986900][ T9] cfg80211: failed to load regulatory.db [ 92.051888][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.058894][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.085637][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.123713][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.130855][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.157345][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.171293][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.178274][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.204805][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.224257][ T5847] hsr_slave_0: entered promiscuous mode [ 92.230875][ T5847] hsr_slave_1: entered promiscuous mode [ 92.237061][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.244930][ T5847] Cannot create hsr debugfs directory [ 92.360392][ T5850] hsr_slave_0: entered promiscuous mode [ 92.367170][ T5850] hsr_slave_1: entered promiscuous mode [ 92.373736][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.381753][ T5850] Cannot create hsr debugfs directory [ 92.500158][ T5854] hsr_slave_0: entered promiscuous mode [ 92.507356][ T5854] hsr_slave_1: entered promiscuous mode [ 92.514309][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.522387][ T5854] Cannot create hsr debugfs directory [ 92.560239][ T5860] hsr_slave_0: entered promiscuous mode [ 92.566837][ T5860] hsr_slave_1: entered promiscuous mode [ 92.573467][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.581145][ T5860] Cannot create hsr debugfs directory [ 93.025153][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.040241][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.066980][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.079836][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.199965][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.213654][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.257292][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.268086][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.332678][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.341924][ T5856] Bluetooth: hci0: command tx timeout [ 93.355063][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.367792][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.378811][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.411190][ T5856] Bluetooth: hci1: command tx timeout [ 93.474824][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.491055][ T5856] Bluetooth: hci2: command tx timeout [ 93.491177][ T51] Bluetooth: hci3: command tx timeout [ 93.524974][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.566282][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.577112][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.584450][ T51] Bluetooth: hci4: command tx timeout [ 93.599268][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.632276][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.650340][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.657704][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.704453][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.711687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.744449][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.766429][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.799636][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.810272][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.946585][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.965153][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.064270][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.076074][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.105166][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.112398][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.126433][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.133666][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.171556][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.178760][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.190206][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.197491][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.346624][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.379199][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.395063][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.427689][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.456546][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.463848][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.528574][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.578871][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.586149][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.631808][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.639016][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.679283][ T5847] veth0_vlan: entered promiscuous mode [ 94.706801][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.714029][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.804074][ T5847] veth1_vlan: entered promiscuous mode [ 94.917750][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.952595][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.051739][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.082514][ T5847] veth0_macvtap: entered promiscuous mode [ 95.169680][ T5847] veth1_macvtap: entered promiscuous mode [ 95.226797][ T5843] veth0_vlan: entered promiscuous mode [ 95.274586][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.287229][ T5843] veth1_vlan: entered promiscuous mode [ 95.330261][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.348035][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.376717][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.392037][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.401256][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.410032][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.421549][ T51] Bluetooth: hci0: command tx timeout [ 95.431866][ T5850] veth0_vlan: entered promiscuous mode [ 95.457682][ T5850] veth1_vlan: entered promiscuous mode [ 95.501583][ T51] Bluetooth: hci1: command tx timeout [ 95.544869][ T5850] veth0_macvtap: entered promiscuous mode [ 95.572310][ T51] Bluetooth: hci3: command tx timeout [ 95.581512][ T51] Bluetooth: hci2: command tx timeout [ 95.595935][ T5843] veth0_macvtap: entered promiscuous mode [ 95.609250][ T5850] veth1_macvtap: entered promiscuous mode [ 95.627996][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.651332][ T51] Bluetooth: hci4: command tx timeout [ 95.678813][ T5854] veth0_vlan: entered promiscuous mode [ 95.690147][ T5843] veth1_macvtap: entered promiscuous mode [ 95.704473][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.747767][ T5854] veth1_vlan: entered promiscuous mode [ 95.764544][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.791441][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.799448][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.827353][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.839801][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.853106][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.864322][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.930124][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.965094][ T5854] veth0_macvtap: entered promiscuous mode [ 95.977168][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.992834][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.994445][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.002753][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.019192][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.028468][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.040616][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.062406][ T5854] veth1_macvtap: entered promiscuous mode [ 96.170377][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.187456][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.217440][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.255159][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.265327][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.276335][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.285423][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.368138][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.389264][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.465316][ T5961] IPVS: set_ctl: invalid protocol: 136 172.20.20.43:20003 [ 96.487151][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.505444][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.568257][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.579913][ T5860] veth0_vlan: entered promiscuous mode [ 96.607733][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.615500][ T5860] veth1_vlan: entered promiscuous mode [ 96.674216][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.687347][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.793227][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.808770][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.831338][ T5860] veth0_macvtap: entered promiscuous mode [ 96.908992][ T5860] veth1_macvtap: entered promiscuous mode [ 96.936661][ T5971] gtp0: entered promiscuous mode [ 96.960231][ T5971] gtp0: entered allmulticast mode [ 96.978220][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.998389][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.019945][ T5974] gtp1: entered promiscuous mode [ 97.030130][ T5974] gtp1: entered allmulticast mode [ 97.038407][ T5969] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.107960][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.111648][ T5969] xt_ipcomp: unknown flags B [ 97.169131][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.221654][ T5860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.280590][ T5860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.289375][ T5860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.342490][ T5860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.490940][ T51] Bluetooth: hci0: command tx timeout [ 97.495657][ T5993] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.575709][ T51] Bluetooth: hci1: command tx timeout [ 97.603767][ T5993] netlink: 'syz.1.10': attribute type 25 has an invalid length. [ 97.651583][ T51] Bluetooth: hci2: command tx timeout [ 97.656682][ T5856] Bluetooth: hci3: command tx timeout [ 97.731393][ T5856] Bluetooth: hci4: command tx timeout [ 97.785474][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.834432][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.028595][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.051857][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.126708][ T6013] Zero length message leads to an empty skb [ 98.361951][ T6018] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 99.081321][ T6036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.794213][ T6055] netlink: 'syz.1.31': attribute type 4 has an invalid length. [ 100.181521][ T6064] veth0: entered promiscuous mode [ 100.207890][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 100.436516][ T6076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.512097][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 100.524498][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 100.698038][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.38'. [ 101.183591][ T6109] syz.2.45 uses obsolete (PF_INET,SOCK_PACKET) [ 101.356278][ T6122] Bluetooth: MGMT ver 1.23 [ 101.634163][ T6135] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.146572][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 102.164904][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 102.179742][ T6154] netlink: 14 bytes leftover after parsing attributes in process `syz.3.58'. [ 102.618509][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.633901][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.645248][ T6154] bond0 (unregistering): Released all slaves [ 102.706857][ T6174] sit0: Master is either lo or non-ether device [ 102.804160][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 103.073180][ T6192] bond0: entered promiscuous mode [ 103.079179][ T6192] bond0: entered allmulticast mode [ 103.086986][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.118496][ T6202] v: renamed from ip6_vti0 (while UP) [ 103.539980][ T6213] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 103.855619][ T6225] netlink: 108 bytes leftover after parsing attributes in process `syz.1.76'. [ 103.873481][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 104.643348][ T6269] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 104.810077][ T6273] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.247441][ T6298] __nla_validate_parse: 13 callbacks suppressed [ 105.247463][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'. [ 105.319124][ T6295] xt_CT: No such helper "pptp" [ 105.339773][ T6306] netlink: 'syz.0.103': attribute type 11 has an invalid length. [ 105.348502][ T6306] netlink: 224 bytes leftover after parsing attributes in process `syz.0.103'. [ 105.612117][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 105.717725][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 105.739946][ T6319] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.920787][ T6331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.241302][ T6347] netlink: 9896 bytes leftover after parsing attributes in process `syz.3.112'. [ 106.317880][ T6345] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 106.618652][ T6358] netlink: 'syz.4.117': attribute type 4 has an invalid length. [ 106.699878][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.120'. [ 106.726496][ T6360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.800996][ T6360] bridge0: entered allmulticast mode [ 106.808575][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.120'. [ 106.818546][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 106.854466][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.120'. [ 106.873047][ T6360] bridge_slave_1: left allmulticast mode [ 106.891562][ T6360] bridge_slave_1: left promiscuous mode [ 106.930395][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.948949][ T6360] bridge_slave_0: left allmulticast mode [ 106.955557][ T6360] bridge_slave_0: left promiscuous mode [ 106.972873][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.044216][ T6360] bridge0 (unregistering): left allmulticast mode [ 107.345768][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.120'. [ 107.585540][ T6393] xt_ecn: cannot match TCP bits for non-tcp packets [ 108.044889][ T6413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 108.547413][ T6437] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 108.577599][ T6437] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:2 [ 108.906453][ T6449] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 109.356505][ T6473] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 109.979421][ T6500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.285914][ T6517] openvswitch: netlink: Key type 272 is out of range max 32 [ 110.475576][ T6531] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 110.492490][ T6532] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 110.946381][ T6550] IPv4: Oversized IP packet from 172.20.20.24 [ 110.954548][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 110.961645][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 111.200828][ T6562] __nla_validate_parse: 8 callbacks suppressed [ 111.200847][ T6562] netlink: 84 bytes leftover after parsing attributes in process `syz.2.173'. [ 111.457786][ T6572] netlink: 204 bytes leftover after parsing attributes in process `syz.1.176'. [ 111.582631][ T6579] netlink: 40 bytes leftover after parsing attributes in process `syz.2.177'. [ 111.848664][ T6585] netlink: 60 bytes leftover after parsing attributes in process `syz.4.182'. [ 111.876957][ T6587] netlink: 88 bytes leftover after parsing attributes in process `syz.2.180'. [ 111.886297][ T6585] unsupported nlmsg_type 40 [ 111.926479][ T6587] netem: invalid attributes len -24 [ 111.935500][ T6587] netem: change failed [ 112.072075][ T6596] netlink: 'syz.4.184': attribute type 23 has an invalid length. [ 112.460866][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 112.501342][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 112.803566][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 113.558737][ T6639] netlink: 165 bytes leftover after parsing attributes in process `syz.3.194'. [ 113.735371][ T6634] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 113.844520][ T6651] netlink: 256 bytes leftover after parsing attributes in process `syz.1.196'. [ 113.947483][ T6654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 114.194618][ T6660] netlink: 'syz.4.199': attribute type 2 has an invalid length. [ 114.455882][ T6675] netlink: 'syz.4.204': attribute type 33 has an invalid length. [ 114.681581][ T6689] xt_limit: Overflow, try lower: 0/0 [ 114.864507][ T6703] netlink: 'syz.1.210': attribute type 10 has an invalid length. [ 114.905492][ T6703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.968285][ T6703] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 114.998704][ T6686] syzkaller1: entered promiscuous mode [ 115.004809][ T6686] syzkaller1: entered allmulticast mode [ 116.318979][ T6734] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 116.563338][ T6772] __nla_validate_parse: 8 callbacks suppressed [ 116.563359][ T6772] netlink: 128 bytes leftover after parsing attributes in process `syz.3.234'. [ 116.598334][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 116.649930][ T5882] IPVS: starting estimator thread 0... [ 116.682366][ T6775] wg2: entered promiscuous mode [ 116.687428][ T6775] wg2: entered allmulticast mode [ 116.781058][ T6780] IPVS: using max 25 ests per chain, 60000 per kthread [ 116.788735][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.235'. [ 117.023516][ T6788] netlink: 2 bytes leftover after parsing attributes in process `syz.3.236'. [ 117.099942][ T6783] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.235'. [ 117.140264][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 117.176432][ T6803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.239'. [ 117.307355][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 117.455533][ T6818] netlink: 256 bytes leftover after parsing attributes in process `syz.0.244'. [ 117.477313][ T6817] netlink: 'syz.1.243': attribute type 33 has an invalid length. [ 117.479025][ T6810] gtp0: entered promiscuous mode [ 117.496664][ T6810] gtp0: entered allmulticast mode [ 117.555708][ T6817] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.243'. [ 117.569031][ T6825] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 118.009189][ T6836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.355609][ T6869] netlink: 'syz.2.255': attribute type 8 has an invalid length. [ 118.385307][ T6862] netlink: 'syz.4.253': attribute type 21 has an invalid length. [ 118.660734][ T6881] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 118.690761][ T6881] netlink: 'syz.3.260': attribute type 2 has an invalid length. [ 119.053717][ T6904] netlink: 'syz.0.265': attribute type 5 has an invalid length. [ 119.333156][ T6917] netlink: 'syz.1.270': attribute type 2 has an invalid length. [ 119.400996][ T6920] netlink: 'syz.1.270': attribute type 2 has an invalid length. [ 119.665607][ T6933] netlink: 'syz.1.275': attribute type 29 has an invalid length. [ 119.745491][ T6935] xt_addrtype: ipv6 does not support BROADCAST matching [ 119.757708][ T6935] netlink: 'syz.0.276': attribute type 11 has an invalid length. [ 120.418240][ T6960] Cannot find del_set index 5 as target [ 120.665452][ T6972] tipc: Enabling of bearer rejected, media not registered [ 121.020644][ T6986] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.047828][ T6986] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.070670][ T6986] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.079610][ T6986] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.094004][ T6986] geneve2: entered promiscuous mode [ 121.099386][ T6986] geneve2: entered allmulticast mode [ 121.671970][ T7007] __nla_validate_parse: 20 callbacks suppressed [ 121.671989][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 121.716684][ T7009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.303'. [ 121.814501][ T7009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.303'. [ 121.915063][ T7009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.303'. [ 121.931478][ T7009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.303'. [ 121.976631][ T7009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.303'. [ 122.025356][ T7009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.303'. [ 122.075263][ T7009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.303'. [ 122.136901][ T7009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.303'. [ 122.154132][ T7009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.303'. [ 123.189054][ T7075] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 123.422558][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.431210][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.997217][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.014195][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.196228][ T7070] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.212552][ T7070] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.223014][ T7070] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.232334][ T7070] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.517753][ T7125] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 124.590070][ T7130] batadv0: Device is already in use. [ 124.620142][ T7125] x_tables: ip_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 16 [ 124.780869][ T7134] validate_nla: 67 callbacks suppressed [ 124.780892][ T7134] netlink: 'syz.4.327': attribute type 3 has an invalid length. [ 124.995733][ T7145] netlink: 'syz.3.331': attribute type 27 has an invalid length. [ 125.114389][ T7155] tipc: Enabling of bearer rejected, failed to enable media [ 125.356604][ T7166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.555039][ T7170] vlan1: entered allmulticast mode [ 125.571789][ T7170] veth0_vlan: entered allmulticast mode [ 126.228132][ T7205] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 126.335912][ T7211] syz.1.353: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.389715][ T7211] CPU: 1 UID: 0 PID: 7211 Comm: syz.1.353 Not tainted 6.16.0-rc5-syzkaller-00205-g531d0d32de3e #0 PREEMPT(full) [ 126.389745][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.389766][ T7211] Call Trace: [ 126.389774][ T7211] [ 126.389783][ T7211] dump_stack_lvl+0x189/0x250 [ 126.389826][ T7211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.389852][ T7211] ? __pfx__printk+0x10/0x10 [ 126.389882][ T7211] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.389911][ T7211] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.389940][ T7211] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 126.389972][ T7211] warn_alloc+0x214/0x310 [ 126.390009][ T7211] ? __pfx_warn_alloc+0x10/0x10 [ 126.390050][ T7211] ? __get_vm_area_node+0x28f/0x300 [ 126.390078][ T7211] ? hash_ipportip_create+0x358/0xfe0 [ 126.390112][ T7211] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 126.390140][ T7211] ? do_syscall_64+0xfa/0x3b0 [ 126.390194][ T7211] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.390229][ T7211] ? rcu_is_watching+0x15/0xb0 [ 126.390257][ T7211] ? hash_ipportip_create+0x358/0xfe0 [ 126.390285][ T7211] ? hash_ipportip_create+0x358/0xfe0 [ 126.390312][ T7211] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 126.390338][ T7211] ? hash_ipportip_create+0x358/0xfe0 [ 126.390367][ T7211] ? hash_ipportip_create+0x2fe/0xfe0 [ 126.390401][ T7211] hash_ipportip_create+0x358/0xfe0 [ 126.390440][ T7211] ? __nla_parse+0x40/0x60 [ 126.390462][ T7211] ? __pfx_hash_ipportip_create+0x10/0x10 [ 126.390506][ T7211] ip_set_create+0xa94/0x1940 [ 126.390527][ T7211] ? ip_set_create+0x4a2/0x1940 [ 126.390559][ T7211] ? __pfx_ip_set_create+0x10/0x10 [ 126.390620][ T7211] nfnetlink_rcv_msg+0xb4d/0x1130 [ 126.390657][ T7211] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 126.390713][ T7211] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 126.390785][ T7211] ? __lock_acquire+0xab9/0xd20 [ 126.390826][ T7211] netlink_rcv_skb+0x205/0x470 [ 126.390854][ T7211] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 126.390889][ T7211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.390930][ T7211] ? bpf_lsm_capable+0x9/0x20 [ 126.390953][ T7211] ? security_capable+0x7e/0x2e0 [ 126.390991][ T7211] nfnetlink_rcv+0x26a/0x2520 [ 126.391027][ T7211] ? unwind_get_return_address+0x4d/0x90 [ 126.391051][ T7211] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 126.391081][ T7211] ? arch_stack_walk+0xfc/0x150 [ 126.391122][ T7211] ? stack_trace_save+0x9c/0xe0 [ 126.391153][ T7211] ? stack_depot_save_flags+0x40/0x900 [ 126.391188][ T7211] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 126.391223][ T7211] ? kasan_save_track+0x4f/0x80 [ 126.391244][ T7211] ? kasan_save_track+0x3e/0x80 [ 126.391274][ T7211] ? __lock_acquire+0xab9/0xd20 [ 126.391324][ T7211] ? __lock_acquire+0xab9/0xd20 [ 126.391359][ T7211] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.391393][ T7211] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.391419][ T7211] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.391452][ T7211] netlink_unicast+0x759/0x8e0 [ 126.391515][ T7211] netlink_sendmsg+0x805/0xb30 [ 126.391553][ T7211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.391585][ T7211] ? aa_sock_msg_perm+0x94/0x160 [ 126.391619][ T7211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.391651][ T7211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.391679][ T7211] __sock_sendmsg+0x21c/0x270 [ 126.391703][ T7211] ____sys_sendmsg+0x505/0x830 [ 126.391738][ T7211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.391776][ T7211] ? import_iovec+0x74/0xa0 [ 126.391806][ T7211] ___sys_sendmsg+0x21f/0x2a0 [ 126.391837][ T7211] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.391907][ T7211] ? __fget_files+0x2a/0x420 [ 126.391935][ T7211] ? __fget_files+0x3a0/0x420 [ 126.391976][ T7211] __x64_sys_sendmsg+0x19b/0x260 [ 126.392008][ T7211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.392047][ T7211] ? rcu_is_watching+0x15/0xb0 [ 126.392079][ T7211] ? do_syscall_64+0xbe/0x3b0 [ 126.392106][ T7211] do_syscall_64+0xfa/0x3b0 [ 126.392125][ T7211] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.392158][ T7211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.392179][ T7211] ? clear_bhb_loop+0x60/0xb0 [ 126.392206][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.392226][ T7211] RIP: 0033:0x7f1680f8e929 [ 126.392254][ T7211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.392271][ T7211] RSP: 002b:00007f1681d41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.392293][ T7211] RAX: ffffffffffffffda RBX: 00007f16811b5fa0 RCX: 00007f1680f8e929 [ 126.392309][ T7211] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 126.392322][ T7211] RBP: 00007f1681010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 126.392335][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.392347][ T7211] R13: 0000000000000000 R14: 00007f16811b5fa0 R15: 00007ffc10f2cd98 [ 126.392381][ T7211] [ 126.888383][ T7211] Mem-Info: [ 126.892158][ T7211] active_anon:5782 inactive_anon:0 isolated_anon:0 [ 126.892158][ T7211] active_file:1242 inactive_file:39836 isolated_file:0 [ 126.892158][ T7211] unevictable:768 dirty:42 writeback:0 [ 126.892158][ T7211] slab_reclaimable:10227 slab_unreclaimable:97911 [ 126.892158][ T7211] mapped:29234 shmem:1367 pagetables:1115 [ 126.892158][ T7211] sec_pagetables:0 bounce:0 [ 126.892158][ T7211] kernel_misc_reclaimable:0 [ 126.892158][ T7211] free:1335015 free_pcp:13762 free_cma:0 [ 126.940098][ T7211] Node 0 active_anon:22968kB inactive_anon:0kB active_file:4968kB inactive_file:159144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116844kB dirty:192kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12512kB pagetables:4416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 126.975303][ T7211] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 127.007523][ T7211] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.036990][ T7211] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 127.043291][ T7211] Node 0 DMA32 free:1429636kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22916kB inactive_anon:0kB active_file:4968kB inactive_file:157576kB unevictable:1536kB writepending:192kB present:3129332kB managed:2558392kB mlocked:0kB bounce:0kB free_pcp:36024kB local_pcp:15136kB free_cma:0kB [ 127.077373][ T7211] lowmem_reserve[]: 0 0 1 1 1 [ 127.082438][ T7211] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 127.112027][ T7211] lowmem_reserve[]: 0 0 0 0 0 [ 127.116837][ T7211] Node 1 Normal free:3895188kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19168kB local_pcp:10208kB free_cma:0kB [ 127.148633][ T7211] lowmem_reserve[]: 0 0 0 0 0 [ 127.153805][ T7211] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.168971][ T7211] Node 0 DMA32: 359*4kB (ME) 243*8kB (UM) 189*16kB (UME) 80*32kB (UME) 23*64kB (UME) 7*128kB (UM) 19*256kB (ME) 8*512kB (UM) 3*1024kB (M) 7*2048kB (ME) 340*4096kB (M) = 1430340kB [ 127.191315][ T7211] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 127.204139][ T7211] Node 1 Normal: 185*4kB (UE) 44*8kB (UME) 51*16kB (UME) 83*32kB (UME) 35*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3895188kB [ 127.223958][ T7211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.233877][ T7211] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.243575][ T7211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.253510][ T7211] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.264412][ T7211] 42440 total pagecache pages [ 127.269154][ T7211] 0 pages in swap cache [ 127.275274][ T7211] Free swap = 124996kB [ 127.279474][ T7211] Total swap = 124996kB [ 127.288070][ T7211] 2097051 pages RAM [ 127.292182][ T7211] 0 pages HighMem/MovableOnly [ 127.296899][ T7211] 425411 pages reserved [ 127.301561][ T7211] 0 pages cma reserved [ 127.657737][ T7239] __nla_validate_parse: 66 callbacks suppressed [ 127.657757][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 127.730175][ T1106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.883490][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 128.023275][ T1106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.082701][ T7252] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 128.200920][ T1106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.432601][ T1106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.541928][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 128.590192][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'. [ 128.978353][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.988814][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.997075][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.007129][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.029111][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.158360][ T1106] bridge_slave_1: left allmulticast mode [ 129.192626][ T1106] bridge_slave_1: left promiscuous mode [ 129.199594][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.279019][ T1106] bridge_slave_0: left allmulticast mode [ 129.286795][ T1106] bridge_slave_0: left promiscuous mode [ 129.294618][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.368706][ T7302] netlink: 'syz.0.380': attribute type 32 has an invalid length. [ 129.868243][ T7321] sctp: [Deprecated]: syz.1.386 (pid 7321) Use of int in max_burst socket option deprecated. [ 129.868243][ T7321] Use struct sctp_assoc_value instead [ 130.139381][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.150800][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.162920][ T1106] bond0 (unregistering): Released all slaves [ 130.182305][ T7292] netlink: 'syz.3.379': attribute type 29 has an invalid length. [ 130.192441][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 130.477266][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 131.090685][ T51] Bluetooth: hci1: command tx timeout [ 131.115338][ T7354] netlink: 240 bytes leftover after parsing attributes in process `syz.4.394'. [ 131.244925][ T7359] netlink: 40 bytes leftover after parsing attributes in process `syz.4.394'. [ 131.483741][ T1106] hsr_slave_0: left promiscuous mode [ 131.520979][ T1106] hsr_slave_1: left promiscuous mode [ 131.532836][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.540376][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.568763][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.575604][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'. [ 131.590598][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.634508][ T1106] veth1_macvtap: left promiscuous mode [ 131.642381][ T1106] veth0_macvtap: left promiscuous mode [ 131.654844][ T1106] veth1_vlan: left promiscuous mode [ 131.666710][ T1106] veth0_vlan: left promiscuous mode [ 132.034334][ T7378] tipc: Can't bind to reserved service type 1 [ 132.047138][ T7378] netlink: 56 bytes leftover after parsing attributes in process `syz.0.400'. [ 132.197074][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 132.236888][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 132.951157][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.957880][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.200884][ T51] Bluetooth: hci1: command tx timeout [ 133.647529][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 134.276470][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.293667][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.302062][ T7287] bridge_slave_0: entered allmulticast mode [ 134.310115][ T7287] bridge_slave_0: entered promiscuous mode [ 134.410364][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.438841][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.463657][ T7287] bridge_slave_1: entered allmulticast mode [ 134.483249][ T7287] bridge_slave_1: entered promiscuous mode [ 134.648852][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.711023][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.930783][ T7487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.418'. [ 134.994880][ T7287] team0: Port device team_slave_0 added [ 135.015346][ T7287] team0: Port device team_slave_1 added [ 135.043431][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 135.066801][ T7490] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 135.149153][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 135.207752][ T7501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.420'. [ 135.250793][ T51] Bluetooth: hci1: command tx timeout [ 135.275654][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.284571][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.314455][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.328248][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.366314][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.421014][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 135.447432][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.563446][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.730285][ T7522] netlink: 'syz.1.424': attribute type 13 has an invalid length. [ 135.754811][ T7522] netlink: 'syz.1.424': attribute type 58 has an invalid length. [ 135.776517][ T7522] netlink: 152 bytes leftover after parsing attributes in process `syz.1.424'. [ 135.788723][ T7511] bridge_slave_0 (unregistering): left allmulticast mode [ 135.810112][ T7511] bridge_slave_0 (unregistering): left promiscuous mode [ 135.826739][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.111628][ T7287] hsr_slave_0: entered promiscuous mode [ 136.118386][ T7287] hsr_slave_1: entered promiscuous mode [ 136.171546][ T7287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.192815][ T7287] Cannot create hsr debugfs directory [ 136.800238][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 137.331008][ T51] Bluetooth: hci1: command tx timeout [ 138.017808][ T7596] bond0: (slave batadv0): Releasing backup interface [ 138.042123][ T7596] bridge_slave_0: left allmulticast mode [ 138.054371][ T7596] bridge_slave_0: left promiscuous mode [ 138.065695][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.079879][ T7596] bridge_slave_1: left allmulticast mode [ 138.117384][ T7596] bridge_slave_1: left promiscuous mode [ 138.145228][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.178797][ T7596] bond0: (slave bond_slave_0): Releasing backup interface [ 138.224847][ T7596] bond0: (slave bond_slave_1): Releasing backup interface [ 138.277796][ T7596] team0: Port device team_slave_0 removed [ 138.311560][ T7596] team0: Port device team_slave_1 removed [ 138.337986][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.360132][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.432520][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.455491][ T7614] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 138.473613][ T7614] team0: Failed to send options change via netlink (err -105) [ 138.495207][ T7621] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 138.502607][ T7614] team0: Port device batadv1 added [ 138.566365][ T7623] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 138.818210][ T7628] bond0: entered allmulticast mode [ 138.825923][ T7628] bond_slave_0: entered allmulticast mode [ 138.848905][ T7628] bond_slave_1: entered allmulticast mode [ 138.954226][ T7287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.015525][ T7287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.044540][ T7636] x_tables: duplicate underflow at hook 1 [ 139.109565][ T7287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.129111][ T7287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.201775][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 139.623088][ T7674] xt_hashlimit: invalid rate [ 139.629341][ T7674] netlink: 'syz.1.460': attribute type 32 has an invalid length. [ 139.660998][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 139.693418][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.728725][ T7674] (unnamed net_device) (uninitialized): option coupled_control: invalid value (98) [ 139.925291][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.004526][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.011775][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.123727][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.131755][ T7413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.338862][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 140.485472][ T7705] netlink: 236 bytes leftover after parsing attributes in process `syz.1.466'. [ 140.918485][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 141.047138][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 141.048992][ T7725] netlink: 'syz.4.470': attribute type 6 has an invalid length. [ 141.122363][ T7723] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 141.636346][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.636625][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 141.693641][ T7738] veth1_macvtap: left promiscuous mode [ 141.732052][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 141.780898][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 141.821543][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 141.850898][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 141.891106][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 141.933748][ T7287] veth0_vlan: entered promiscuous mode [ 141.959944][ T7287] veth1_vlan: entered promiscuous mode [ 142.049503][ T7752] sctp: [Deprecated]: syz.0.477 (pid 7752) Use of int in maxseg socket option. [ 142.049503][ T7752] Use struct sctp_assoc_value instead [ 142.098363][ T7287] veth0_macvtap: entered promiscuous mode [ 142.182160][ T7287] veth1_macvtap: entered promiscuous mode [ 142.299570][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.368041][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.434013][ T7287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.459858][ T7287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.489757][ T7287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.510599][ T7287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.934100][ T7783] xt_hashlimit: size too large, truncated to 1048576 [ 142.964495][ T7419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.013818][ T7419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.166574][ T7786] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 143.313418][ T7789] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 143.360908][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.421159][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.908708][ T7405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.107277][ T7405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.343558][ T7405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.622614][ T7405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.959420][ T7883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.118987][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.128439][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.143473][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.162605][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.181657][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.336577][ T7908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.598733][ T7921] ieee802154 phy0 wpan0: encryption failed: -90 [ 146.678511][ T7405] bridge_slave_1: left allmulticast mode [ 146.697333][ T7405] bridge_slave_1: left promiscuous mode [ 146.724595][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.778245][ T7405] bridge_slave_0: left allmulticast mode [ 146.795857][ T7405] bridge_slave_0: left promiscuous mode [ 146.816387][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.897416][ T7933] __nla_validate_parse: 61 callbacks suppressed [ 146.897435][ T7933] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.515'. [ 147.615348][ T7405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.631655][ T7405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.644421][ T7405] bond0 (unregistering): Released all slaves [ 147.669814][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 147.923768][ T7962] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.519'. [ 147.980042][ T7962] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.519'. [ 148.094091][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.520'. [ 148.121432][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.520'. [ 148.190967][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.520'. [ 148.274316][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.520'. [ 148.302001][ T51] Bluetooth: hci1: command tx timeout [ 148.330648][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.520'. [ 148.398656][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.520'. [ 148.850910][ T7405] hsr_slave_0: left promiscuous mode [ 148.905295][ T7405] hsr_slave_1: left promiscuous mode [ 148.927703][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.950863][ T7405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.968099][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.989823][ T7405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.054899][ T7405] veth1_macvtap: left promiscuous mode [ 149.077943][ T7405] veth0_macvtap: left promiscuous mode [ 149.094329][ T7405] veth1_vlan: left promiscuous mode [ 149.104588][ T7405] veth0_vlan: left promiscuous mode [ 150.181686][ T7405] team0 (unregistering): Port device team_slave_1 removed [ 150.224082][ T7405] team0 (unregistering): Port device team_slave_0 removed [ 150.372074][ T51] Bluetooth: hci1: command tx timeout [ 151.183694][ T8047] vlan0: entered allmulticast mode [ 151.188992][ T8047] team0: entered allmulticast mode [ 151.250938][ T8047] team0: Device vlan0 is already an upper device of the team interface [ 151.435078][ T7896] chnl_net:caif_netlink_parms(): no params data found [ 151.573840][ T7117] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 151.583465][ T7117] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 151.591094][ T7117] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 151.601719][ T7117] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 151.611706][ T7117] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 151.619951][ T7117] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 151.635530][ T8064] gretap0: entered promiscuous mode [ 151.658146][ T7117] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 151.907982][ T8071] fido_id[8071]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 152.012650][ T8083] netlink: 'syz.4.544': attribute type 11 has an invalid length. [ 152.020471][ T8083] __nla_validate_parse: 33 callbacks suppressed [ 152.027299][ T8083] netlink: 224 bytes leftover after parsing attributes in process `syz.4.544'. [ 152.071165][ T8084] GUP no longer grows the stack in syz.0.543 (8084): 200000003000-200000005000 (200000001000) [ 152.082082][ T8084] CPU: 0 UID: 0 PID: 8084 Comm: syz.0.543 Not tainted 6.16.0-rc5-syzkaller-00205-g531d0d32de3e #0 PREEMPT(full) [ 152.082112][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.082125][ T8084] Call Trace: [ 152.082134][ T8084] [ 152.082144][ T8084] dump_stack_lvl+0x189/0x250 [ 152.082181][ T8084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.082207][ T8084] ? __pfx__printk+0x10/0x10 [ 152.082234][ T8084] ? find_vma+0xe7/0x160 [ 152.082275][ T8084] __get_user_pages+0x2a60/0x30b0 [ 152.082340][ T8084] ? __pfx___get_user_pages+0x10/0x10 [ 152.082362][ T8084] ? __gup_longterm_locked+0xbf7/0x15b0 [ 152.082386][ T8084] ? down_read_killable+0x1d1/0x350 [ 152.082409][ T8084] ? try_get_folio+0x633/0x660 [ 152.082438][ T8084] __gup_longterm_locked+0xd66/0x15b0 [ 152.082468][ T8084] ? try_grab_folio_fast+0x35b/0x4f0 [ 152.082499][ T8084] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 152.082532][ T8084] gup_fast_fallback+0x1cd4/0x2260 [ 152.082599][ T8084] ? __pfx_gup_fast_fallback+0x10/0x10 [ 152.082628][ T8084] ? xfd_validate_state+0x6d/0x150 [ 152.082659][ T8084] ? rcu_is_watching+0x15/0xb0 [ 152.082689][ T8084] ? pin_user_pages_fast+0x4d/0xb0 [ 152.082715][ T8084] iov_iter_extract_pages+0x35a/0x5e0 [ 152.082753][ T8084] extract_iter_to_sg+0xe46/0x24e0 [ 152.082779][ T8084] ? __lock_acquire+0xab9/0xd20 [ 152.082814][ T8084] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 152.082836][ T8084] ? __local_bh_enable_ip+0x12d/0x1c0 [ 152.082861][ T8084] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.082897][ T8084] ? __local_bh_enable_ip+0x12d/0x1c0 [ 152.082921][ T8084] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 152.082953][ T8084] ? __asan_memset+0x22/0x50 [ 152.082977][ T8084] hash_sendmsg+0x4f4/0x11d0 [ 152.083037][ T8084] ? __pfx_hash_sendmsg+0x10/0x10 [ 152.083070][ T8084] __sock_sendmsg+0x21c/0x270 [ 152.083095][ T8084] ____sys_sendmsg+0x505/0x830 [ 152.083131][ T8084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.083171][ T8084] ? import_iovec+0x74/0xa0 [ 152.083202][ T8084] ___sys_sendmsg+0x21f/0x2a0 [ 152.083233][ T8084] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.083308][ T8084] ? __fget_files+0x2a/0x420 [ 152.083335][ T8084] ? __fget_files+0x3a0/0x420 [ 152.083378][ T8084] __x64_sys_sendmsg+0x19b/0x260 [ 152.083411][ T8084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.083454][ T8084] ? rcu_is_watching+0x15/0xb0 [ 152.083485][ T8084] ? do_syscall_64+0xbe/0x3b0 [ 152.083512][ T8084] do_syscall_64+0xfa/0x3b0 [ 152.083532][ T8084] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.083565][ T8084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.083587][ T8084] ? clear_bhb_loop+0x60/0xb0 [ 152.083623][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.083644][ T8084] RIP: 0033:0x7f333898e929 [ 152.083665][ T8084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.083684][ T8084] RSP: 002b:00007f333979f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.083707][ T8084] RAX: ffffffffffffffda RBX: 00007f3338bb6160 RCX: 00007f333898e929 [ 152.083723][ T8084] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 152.083737][ T8084] RBP: 00007f3338a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 152.083750][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.083762][ T8084] R13: 0000000000000000 R14: 00007f3338bb6160 R15: 00007ffcd3b15768 [ 152.083796][ T8084] [ 152.497913][ T51] Bluetooth: hci1: command tx timeout [ 152.597989][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 153.052062][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.073259][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.095320][ T7896] bridge_slave_0: entered allmulticast mode [ 153.115256][ T7896] bridge_slave_0: entered promiscuous mode [ 153.134010][ T7896] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.169005][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.195772][ T7896] bridge_slave_1: entered allmulticast mode [ 153.214516][ T7896] bridge_slave_1: entered promiscuous mode [ 153.227834][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 153.240187][ T8103] wg2: left promiscuous mode [ 153.263109][ T8103] wg2: left allmulticast mode [ 153.358301][ T8117] wg2: entered promiscuous mode [ 153.363392][ T8117] wg2: entered allmulticast mode [ 153.624149][ T8135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.553'. [ 153.655211][ T8135] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 153.687140][ T7896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.769262][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 153.774094][ T7896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.899205][ T8141] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 153.933072][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.942388][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.115717][ T7896] team0: Port device team_slave_0 added [ 154.154757][ T7896] team0: Port device team_slave_1 added [ 154.387962][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.427782][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.480595][ T7896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.496780][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.521992][ T8165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.563'. [ 154.531244][ T51] Bluetooth: hci1: command tx timeout [ 154.546203][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.580929][ T7896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.774552][ T7896] hsr_slave_0: entered promiscuous mode [ 154.827024][ T7896] hsr_slave_1: entered promiscuous mode [ 154.860051][ T7896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.905931][ T7896] Cannot create hsr debugfs directory [ 155.242792][ T8189] netlink: 'syz.3.569': attribute type 10 has an invalid length. [ 155.287114][ T8194] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 155.348559][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 155.617954][ T8209] netlink: 48 bytes leftover after parsing attributes in process `syz.1.574'. [ 155.655982][ T8209] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 155.674781][ T8211] netlink: 'syz.0.575': attribute type 9 has an invalid length. [ 155.777399][ T8209] trusted_key: syz.1.574 sent an empty control message without MSG_MORE. [ 156.133823][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.580'. [ 156.235353][ T8234] netlink: 388 bytes leftover after parsing attributes in process `syz.3.583'. [ 156.322171][ T8244] sctp: [Deprecated]: syz.4.585 (pid 8244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.322171][ T8244] Use struct sctp_sack_info instead [ 156.359037][ T8244] sctp: [Deprecated]: syz.4.585 (pid 8244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.359037][ T8244] Use struct sctp_sack_info instead [ 156.775390][ T7896] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.801712][ T7896] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.849692][ T7896] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.887502][ T7896] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.020704][ T8285] __nla_validate_parse: 8 callbacks suppressed [ 157.020724][ T8285] netlink: 148 bytes leftover after parsing attributes in process `syz.4.594'. [ 157.042372][ T8285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 157.404227][ T8293] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 157.627824][ T7896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.730426][ T7896] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.805333][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.812712][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.019397][ T8327] netlink: 'syz.1.605': attribute type 2 has an invalid length. [ 158.039882][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 158.093285][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.100570][ T7413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.456819][ T8348] netlink: 112 bytes leftover after parsing attributes in process `syz.0.608'. [ 158.619164][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 158.972873][ T7896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.159090][ T7896] veth0_vlan: entered promiscuous mode [ 159.208181][ T7896] veth1_vlan: entered promiscuous mode [ 159.323701][ T7896] veth0_macvtap: entered promiscuous mode [ 159.365171][ T7896] veth1_macvtap: entered promiscuous mode [ 159.428190][ T7896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.468445][ T7896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.514935][ T7896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.541052][ T7896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.566598][ T7896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.586969][ T7896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.798764][ T7419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.866951][ T7419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.969246][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.989161][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.096650][ T8413] Bluetooth: MGMT ver 1.23 [ 160.364879][ T8425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.624'. [ 160.459378][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 160.568152][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 160.736715][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 160.757097][ T8440] netlink: 'syz.3.628': attribute type 11 has an invalid length. [ 160.876524][ T8446] ip6t_srh: unknown srh match flags 4001 [ 160.898158][ T1106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.026994][ T1106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.271972][ T8456] netlink: 'syz.0.629': attribute type 21 has an invalid length. [ 161.273857][ T1106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.322790][ T8460] netlink: 'syz.3.631': attribute type 1 has an invalid length. [ 161.346859][ T8460] netlink: 'syz.3.631': attribute type 2 has an invalid length. [ 161.361112][ T8460] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.631'. [ 161.381209][ T8456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.629'. [ 161.515810][ T1106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.558551][ T8465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.634827][ T8468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.642467][ T8468] IPv6: NLM_F_CREATE should be set when creating new route [ 161.649725][ T8468] IPv6: NLM_F_CREATE should be set when creating new route [ 161.957297][ T1106] bridge_slave_1: left allmulticast mode [ 161.967144][ T1106] bridge_slave_1: left promiscuous mode [ 161.999195][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.040331][ T1106] bridge_slave_0: left allmulticast mode [ 162.060828][ T1106] bridge_slave_0: left promiscuous mode [ 162.082329][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.269062][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.285331][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.296157][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.304803][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.312773][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.834366][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.850371][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.867600][ T1106] bond0 (unregistering): Released all slaves [ 162.905377][ T8503] __nla_validate_parse: 2 callbacks suppressed [ 162.905398][ T8503] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.644'. [ 162.961322][ T8503] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.644'. [ 163.096743][ T8514] macvtap1: entered promiscuous mode [ 163.121289][ T8514] vlan0: entered promiscuous mode [ 163.136208][ T8514] macvtap1: entered allmulticast mode [ 163.151302][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 163.180309][ T8520] netlink: 64 bytes leftover after parsing attributes in process `syz.1.647'. [ 163.194341][ T8514] vlan0: entered allmulticast mode [ 163.215038][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 163.220657][ T8514] veth0_vlan: entered allmulticast mode [ 163.250110][ T8514] vlan0: left allmulticast mode [ 163.279882][ T8514] veth0_vlan: left allmulticast mode [ 163.290606][ T8514] vlan0: left promiscuous mode [ 163.469893][ T8522] bridge1: entered promiscuous mode [ 163.480676][ T8522] bridge1: entered allmulticast mode [ 163.775162][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 163.915617][ T1106] hsr_slave_0: left promiscuous mode [ 163.941081][ T1106] hsr_slave_1: left promiscuous mode [ 163.950237][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.984187][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.996949][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.005299][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.051242][ T1106] veth1_macvtap: left promiscuous mode [ 164.057095][ T1106] veth0_macvtap: left promiscuous mode [ 164.067367][ T1106] veth1_vlan: left promiscuous mode [ 164.077449][ T1106] veth0_vlan: left promiscuous mode [ 164.146055][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 164.189369][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 164.240293][ T8576] Bluetooth: MGMT ver 1.23 [ 164.346468][ T8578] openvswitch: netlink: IP tunnel dst address not specified [ 164.370734][ T51] Bluetooth: hci1: command tx timeout [ 164.505933][ T8584] IPVS: length: 145 != 8 [ 164.768243][ T8573] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 164.805743][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 164.846751][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 165.712091][ T8622] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 165.859493][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 166.010145][ T8626] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.040298][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 166.113152][ T8635] macvlan2: entered promiscuous mode [ 166.142319][ T8635] macvlan2: entered allmulticast mode [ 166.447506][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.451789][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 166.462947][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.491829][ T8489] bridge_slave_0: entered allmulticast mode [ 166.511740][ T8489] bridge_slave_0: entered promiscuous mode [ 166.522478][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.531187][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.538476][ T8489] bridge_slave_1: entered allmulticast mode [ 166.546736][ T8489] bridge_slave_1: entered promiscuous mode [ 166.612732][ T8668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.647426][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.673185][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.813277][ T8489] team0: Port device team_slave_0 added [ 166.838757][ T8489] team0: Port device team_slave_1 added [ 166.848365][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 166.900321][ T8679] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 166.908395][ T8680] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 166.934269][ T8679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.982977][ T8680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.045588][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.063585][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.133345][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.151375][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.158744][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.193656][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.373976][ T8489] hsr_slave_0: entered promiscuous mode [ 167.385153][ T8489] hsr_slave_1: entered promiscuous mode [ 167.392578][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.401422][ T8489] Cannot create hsr debugfs directory [ 167.879144][ T8706] netlink: 'syz.0.690': attribute type 4 has an invalid length. [ 168.190952][ T8721] team0: No ports can be present during mode change [ 168.200138][ T8721] __nla_validate_parse: 3 callbacks suppressed [ 168.200157][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 168.219112][ T8722] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 168.327226][ T8723] IPv6: sit1: Disabled Multicast RS [ 168.355801][ T8723] sit1: entered allmulticast mode [ 168.532591][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 168.645124][ T8489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.667989][ T8489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.695912][ T8489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.728969][ T8489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.760721][ T8753] netlink: 'syz.0.704': attribute type 25 has an invalid length. [ 168.771579][ T8754] netlink: 'syz.0.704': attribute type 25 has an invalid length. [ 169.186543][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.248369][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.306333][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.313631][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.374122][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.381408][ T7419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.391048][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 169.408760][ T8778] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 169.440461][ T8778] netlink: 224 bytes leftover after parsing attributes in process `syz.4.710'. [ 169.583990][ T8489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.624653][ T8792] netlink: 'syz.3.712': attribute type 6 has an invalid length. [ 169.679987][ T8796] netlink: 'syz.3.712': attribute type 6 has an invalid length. [ 169.742486][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 169.774585][ T8798] openvswitch: netlink: Flow actions attr not present in new flow. [ 169.849766][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.716'. [ 169.909548][ T8804] netlink: 104 bytes leftover after parsing attributes in process `syz.4.715'. [ 169.932045][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 169.935939][ T8804] netlink: 'syz.4.715': attribute type 16 has an invalid length. [ 169.971221][ T8804] netlink: 'syz.4.715': attribute type 17 has an invalid length. [ 170.224499][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.269787][ T8824] delete_channel: no stack [ 170.295007][ T8489] veth0_vlan: entered promiscuous mode [ 170.315739][ T8489] veth1_vlan: entered promiscuous mode [ 170.362990][ T8489] veth0_macvtap: entered promiscuous mode [ 170.388514][ T8489] veth1_macvtap: entered promiscuous mode [ 170.417467][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.440029][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.463676][ T8489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.474875][ T8489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.489027][ T8489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.500441][ T8489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.518584][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 170.614339][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 170.786040][ T8853] raw_sendmsg: syz.1.727 forgot to set AF_INET. Fix it! [ 170.786540][ T8854] netlink: 104 bytes leftover after parsing attributes in process `syz.3.728'. [ 171.151148][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.189321][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.239930][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 171.273926][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.286756][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.307659][ T8860] lo: entered allmulticast mode [ 171.315568][ T8860] lo: left allmulticast mode [ 171.778722][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.805060][ T8886] bond0: (slave rose0): Enslaving as an active interface with an up link [ 172.451193][ T3437] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.740108][ T3437] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.976940][ T3437] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.082223][ T3437] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.451706][ T8942] netlink: 'syz.3.745': attribute type 18 has an invalid length. [ 173.479947][ T8942] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.489090][ T8942] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.498614][ T8942] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.507849][ T8942] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.739429][ T3437] bridge_slave_1: left allmulticast mode [ 173.780631][ T3437] bridge_slave_1: left promiscuous mode [ 173.786495][ T3437] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.838540][ T3437] bridge_slave_0: left allmulticast mode [ 173.844774][ T3437] bridge_slave_0: left promiscuous mode [ 173.873139][ T3437] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.044559][ T8958] __nla_validate_parse: 3 callbacks suppressed [ 174.044580][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 174.311395][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.321781][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.330242][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.366507][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.381387][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.829971][ T3437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.846980][ T3437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.869281][ T3437] bond0 (unregistering): Released all slaves [ 174.903948][ T8959] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 174.931745][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 175.281123][ T8997] netlink: 'syz.3.752': attribute type 13 has an invalid length. [ 175.315899][ T8997] veth0_macvtap: left promiscuous mode [ 175.347488][ T8997] macvtap0: entered allmulticast mode [ 175.360457][ T9000] netlink: 'syz.1.753': attribute type 7 has an invalid length. [ 175.383012][ T8997] macvtap0: refused to change device tx_queue_len [ 175.437227][ T8993] dvmrp0: entered allmulticast mode [ 175.676730][ T3437] hsr_slave_0: left promiscuous mode [ 175.695276][ T3437] hsr_slave_1: left promiscuous mode [ 175.703193][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.718153][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.727181][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.742453][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.786299][ T3437] veth1_macvtap: left promiscuous mode [ 175.810034][ T3437] veth0_macvtap: left promiscuous mode [ 175.823782][ T3437] veth1_vlan: left promiscuous mode [ 175.839503][ T3437] veth0_vlan: left promiscuous mode [ 176.257241][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 176.457041][ T51] Bluetooth: hci1: command tx timeout [ 176.607697][ T3437] team0 (unregistering): Port device team_slave_1 removed [ 176.652454][ T3437] team0 (unregistering): Port device team_slave_0 removed [ 177.502181][ T9059] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 177.518734][ T8972] chnl_net:caif_netlink_parms(): no params data found [ 177.679608][ T9061] netlink: 'syz.3.771': attribute type 15 has an invalid length. [ 177.691433][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'. [ 177.892680][ T8972] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.910722][ T8972] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.918028][ T8972] bridge_slave_0: entered allmulticast mode [ 177.926319][ T8972] bridge_slave_0: entered promiscuous mode [ 177.944321][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.965885][ T8972] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.981051][ T8972] bridge_slave_1: entered allmulticast mode [ 177.992490][ T8972] bridge_slave_1: entered promiscuous mode [ 178.127605][ T8972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.216179][ T8972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.259974][ T9092] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 178.311584][ T9092] netlink: 184 bytes leftover after parsing attributes in process `syz.0.779'. [ 178.331490][ T9092] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 178.417315][ T8972] team0: Port device team_slave_0 added [ 178.437568][ T8972] team0: Port device team_slave_1 added [ 178.534948][ T51] Bluetooth: hci1: command tx timeout [ 178.581661][ T8972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.590162][ T8972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.626033][ T8972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.641664][ T8972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.648866][ T8972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.696947][ T8972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.872610][ T8972] hsr_slave_0: entered promiscuous mode [ 178.890706][ T8972] hsr_slave_1: entered promiscuous mode [ 178.898085][ T8972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.920579][ T8972] Cannot create hsr debugfs directory [ 179.190670][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 179.245383][ T9126] bridge_slave_1: left allmulticast mode [ 179.262303][ T9126] bridge_slave_1: left promiscuous mode [ 179.268287][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.295203][ T9126] bridge_slave_0: left allmulticast mode [ 179.301637][ T9126] bridge_slave_0: left promiscuous mode [ 179.307583][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.353286][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.794'. [ 179.486471][ T9141] Cannot find map_set index 65532 as target [ 179.489650][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 179.541587][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'. [ 179.610881][ T9147] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 179.629373][ T9147] netlink: 236 bytes leftover after parsing attributes in process `syz.0.797'. [ 179.650750][ T9149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 179.829590][ T8972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.849561][ T9153] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 179.857492][ T9155] netlink: 'syz.4.801': attribute type 7 has an invalid length. [ 179.875945][ T8972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.897615][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 179.911375][ T8972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.974860][ T8972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.998864][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.802'. [ 180.112856][ T9173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.804'. [ 180.142378][ T9173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.804'. [ 180.388396][ T9181] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 180.433458][ T8972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.502270][ T8972] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.535436][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.542724][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.605960][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.611224][ T51] Bluetooth: hci1: command tx timeout [ 180.613190][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.712935][ T8972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.741007][ T8972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.167688][ T8972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.264718][ T8972] veth0_vlan: entered promiscuous mode [ 181.286530][ T8972] veth1_vlan: entered promiscuous mode [ 181.345260][ T8972] veth0_macvtap: entered promiscuous mode [ 181.363095][ T8972] veth1_macvtap: entered promiscuous mode [ 181.399145][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.423082][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.437090][ T9232] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 181.451239][ T8972] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.470007][ T8972] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.479237][ T8972] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.494792][ T8972] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.604047][ T9236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.619364][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.630356][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.677189][ T7405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.687340][ T7405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.246428][ T9265] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 182.322443][ T9265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.357811][ T9269] gretap2: entered promiscuous mode [ 182.384553][ T9269] bond1: (slave gretap2): making interface the new active one [ 182.394763][ T9269] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 182.504772][ T9265] macvlan0: entered promiscuous mode [ 182.525495][ T9265] macvlan0: entered allmulticast mode [ 182.565319][ T9265] bond1: entered promiscuous mode [ 182.578355][ T9265] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 182.592450][ T9265] bond1: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 182.615245][ T9265] bond1: left promiscuous mode [ 182.690917][ T5856] Bluetooth: hci1: command tx timeout [ 182.783456][ T9286] netlink: 'syz.4.836': attribute type 5 has an invalid length. [ 183.127845][ T9315] ªªªªªª: renamed from lo [ 183.726674][ T9333] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 183.736094][ T9333] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 183.745176][ T9333] netlink: 'syz.3.849': attribute type 2 has an invalid length. [ 183.906314][ T9343] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 184.229790][ T9363] netlink: 'syz.1.853': attribute type 33 has an invalid length. [ 184.248326][ T9363] __nla_validate_parse: 80 callbacks suppressed [ 184.248345][ T9363] netlink: 152 bytes leftover after parsing attributes in process `syz.1.853'. [ 184.772066][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.853'. [ 184.782726][ T9354] netlink: 272 bytes leftover after parsing attributes in process `syz.1.853'. [ 184.800673][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 185.063309][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'. [ 185.087018][ T9382] Cannot find del_set index 5 as target [ 185.101963][ T9384] Cannot find del_set index 5 as target [ 185.195697][ T9381] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 185.201880][ T9389] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 185.224335][ T9391] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 185.231356][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 185.257705][ T9393] netlink: 'syz.3.866': attribute type 1 has an invalid length. [ 185.295590][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.866'. [ 185.302445][ T9381] sit0: entered promiscuous mode [ 185.313764][ T9381] sit0: entered allmulticast mode [ 185.472517][ T9406] syz.3.869 uses old SIOCAX25GETINFO [ 185.679795][ T9424] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 185.764366][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 185.828588][ T9428] dvmrp1: entered allmulticast mode [ 186.706699][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 186.745363][ T9467] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 187.130213][ T9487] netlink: 'syz.4.888': attribute type 10 has an invalid length. [ 187.239229][ T9482] netlink: 48 bytes leftover after parsing attributes in process `syz.4.888'. [ 187.308532][ T9487] veth0_macvtap: left promiscuous mode [ 187.572444][ T9498] netlink: 'syz.3.891': attribute type 29 has an invalid length. [ 187.610102][ T9498] netlink: 'syz.3.891': attribute type 29 has an invalid length. [ 188.008264][ T9528] netlink: 'syz.0.901': attribute type 10 has an invalid length. [ 188.068890][ T9528] batadv0: entered promiscuous mode [ 188.079019][ T9528] batadv0: entered allmulticast mode [ 188.100024][ T9528] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 188.841204][ T9567] IPVS: set_ctl: invalid protocol: 194 255.255.255.255:20003 [ 189.002075][ T9571] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 189.022172][ T9571] netlink: 'syz.1.914': attribute type 4 has an invalid length. [ 189.309442][ T9575] can: request_module (can-proto-0) failed. [ 189.330793][ T9574] can: request_module (can-proto-0) failed. [ 189.485651][ T9587] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 189.500986][ T9587] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 189.587017][ T7117] IPVS: starting estimator thread 0... [ 189.593350][ T9592] __nla_validate_parse: 8 callbacks suppressed [ 189.593369][ T9592] netlink: 116 bytes leftover after parsing attributes in process `syz.4.922'. [ 189.691517][ T9596] IPVS: using max 26 ests per chain, 62400 per kthread [ 189.806194][ T9606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'. [ 189.817064][ T9606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'. [ 190.191704][ T9631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.931'. [ 190.285121][ T9636] netlink: 'syz.0.933': attribute type 2 has an invalid length. [ 190.342463][ T9638] xt_limit: Overflow, try lower: 2147483649/128 [ 190.699222][ T9661] Cannot find add_set index 4 as target [ 190.699601][ T9657] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 190.954437][ T9671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.944'. [ 191.465604][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 191.475984][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 191.830268][ T9717] netlink: 'syz.4.958': attribute type 6 has an invalid length. [ 191.838198][ T9717] netlink: 32 bytes leftover after parsing attributes in process `syz.4.958'. [ 191.998889][ T9730] netlink: 256 bytes leftover after parsing attributes in process `syz.4.961'. [ 192.098544][ T9734] vlan0: entered promiscuous mode [ 192.110915][ T9734] vlan0: entered allmulticast mode [ 192.123027][ T9734] hsr_slave_1: entered allmulticast mode [ 192.270079][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 192.449747][ T9763] netlink: 'syz.1.971': attribute type 29 has an invalid length. [ 192.461770][ T9763] netlink: 'syz.1.971': attribute type 29 has an invalid length. [ 192.600365][ T9777] netlink: 'syz.1.974': attribute type 1 has an invalid length. [ 192.987869][ T9799] netlink: 'syz.4.980': attribute type 10 has an invalid length. [ 193.037715][ T9799] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 193.065624][ T9799] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 193.261256][ T9812] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003 [ 193.526175][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.567445][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.652789][ T9828] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 194.223539][ T7117] IPVS: starting estimator thread 0... [ 194.320978][ T9870] IPVS: using max 32 ests per chain, 76800 per kthread [ 194.378973][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.385554][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.588062][ T9886] block nbd0: Unsupported socket: shutdown callout must be supported. [ 194.784779][ T9893] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.801928][ T9890] openvswitch: netlink: Key type 265 is out of range max 32 [ 194.809682][ T9895] openvswitch: netlink: Key type 265 is out of range max 32 [ 194.819482][ T9893] __nla_validate_parse: 6 callbacks suppressed [ 194.819500][ T9893] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1003'. [ 194.847288][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 194.993719][ T9905] openvswitch: netlink: Tunnel attr 28 out of range max 16 [ 195.535906][ T9931] syzkalle: renamed from vxcan1 [ 195.702664][ T9938] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 195.831043][ T9950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.936429][ T9965] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1020'. [ 195.964100][ T9965] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1020'. [ 196.022700][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 196.070740][ T9968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1021'. [ 196.099850][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 196.142186][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 196.169946][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 196.480762][ T9991] netlink: 'syz.4.1028': attribute type 21 has an invalid length. [ 196.529694][ T9991] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.552363][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1027'. [ 196.638429][ T9991] bond2: entered promiscuous mode [ 196.644131][ T9991] bond2: entered allmulticast mode [ 196.649877][ T9991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.690284][ T9994] vlan0: entered allmulticast mode [ 196.732357][ T9994] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 196.887767][T10013] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 196.899000][T10012] xt_ipcomp: unknown flags B [ 197.089814][T10022] SET target dimension over the limit! [ 197.217531][T10032] Driver unsupported XDP return value 0 on prog (id 392) dev N/A, expect packet loss! [ 197.269217][T10037] syz_tun: entered allmulticast mode [ 197.278992][T10036] syz_tun: left allmulticast mode [ 197.324138][T10039] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 197.338397][T10039] netlink: 'syz.3.1042': attribute type 32 has an invalid length. [ 197.347143][T10039] (unnamed net_device) (uninitialized): option coupled_control: invalid value (28) [ 197.379947][T10041] openvswitch: netlink: Flow key attr not present in new flow. [ 197.549563][T10046] netlink: 'syz.3.1046': attribute type 12 has an invalid length. [ 197.767312][ T3437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.782587][ T3437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 197.897106][ T3437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.908029][ T3437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 198.075220][ T3437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.099363][ T3437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 198.124748][T10060] netlink: 'syz.3.1050': attribute type 6 has an invalid length. [ 198.143728][T10060] netlink: 'syz.3.1050': attribute type 6 has an invalid length. [ 198.188306][ T3437] bond0: (slave netdevsim0): Releasing backup interface [ 198.216415][ T3437] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 198.239840][ T3437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.267520][ T3437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 198.552308][ T5166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.572232][ T5166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.583592][ T5166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.605992][ T5166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.614821][ T5166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.041221][ T3437] bridge_slave_1: left allmulticast mode [ 199.046961][ T3437] bridge_slave_1: left promiscuous mode [ 199.053639][ T3437] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.728235][ T3437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.739170][ T3437] bond_slave_0: left allmulticast mode [ 199.756423][ T3437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.766591][ T3437] bond_slave_1: left allmulticast mode [ 199.776518][ T3437] bond0 (unregistering): Released all slaves [ 199.795280][ T3437] bond1 (unregistering): Released all slaves [ 199.911865][ T3437] bond2 (unregistering): Released all slaves [ 200.136790][T10124] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 200.155768][T10124] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 200.166593][T10124] gretap1: entered promiscuous mode [ 200.173605][T10124] gretap1: entered allmulticast mode [ 200.419980][T10073] chnl_net:caif_netlink_parms(): no params data found [ 200.528589][ T30] audit: type=1107 audit(1752737286.893:2): pid=10139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 200.547621][T10140] sctp: [Deprecated]: syz.3.1069 (pid 10140) Use of int in maxseg socket option. [ 200.547621][T10140] Use struct sctp_assoc_value instead [ 200.691785][ T5856] Bluetooth: hci4: command tx timeout [ 200.769936][ T3437] hsr_slave_0: left promiscuous mode [ 200.778953][ T3437] hsr_slave_1: left promiscuous mode [ 200.790870][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.799640][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.815596][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.826394][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.850040][ T3437] veth1_macvtap: left promiscuous mode [ 200.863301][ T3437] veth1_vlan: left promiscuous mode [ 200.868813][ T3437] veth0_vlan: left promiscuous mode [ 201.427523][ T3437] team0 (unregistering): Port device team_slave_1 removed [ 201.478907][ T3437] team0 (unregistering): Port device team_slave_0 removed [ 201.967586][T10154] __nla_validate_parse: 9 callbacks suppressed [ 201.967600][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 202.122779][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.136214][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.145002][T10073] bridge_slave_0: entered allmulticast mode [ 202.157565][T10073] bridge_slave_0: entered promiscuous mode [ 202.178662][T10169] veth0: entered promiscuous mode [ 202.180056][T10166] netlink: 'syz.1.1076': attribute type 4 has an invalid length. [ 202.186342][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.200166][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.209838][T10073] bridge_slave_1: entered allmulticast mode [ 202.218253][T10073] bridge_slave_1: entered promiscuous mode [ 202.234853][T10173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1077'. [ 202.244225][T10173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1077'. [ 202.284169][T10166] netlink: 'syz.1.1076': attribute type 29 has an invalid length. [ 202.300587][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 202.340035][T10165] veth0: left promiscuous mode [ 202.425024][T10073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.446090][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 202.456221][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 202.484771][T10181] netlink: 'syz.0.1078': attribute type 13 has an invalid length. [ 202.496599][T10073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.664979][T10181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.698577][T10073] team0: Port device team_slave_0 added [ 202.699212][ T3437] IPVS: stop unused estimator thread 0... [ 202.725026][T10073] team0: Port device team_slave_1 added [ 202.770891][ T5856] Bluetooth: hci4: command tx timeout [ 202.861068][T10073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.874330][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.906495][T10073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.927522][T10200] netlink: 'syz.0.1082': attribute type 3 has an invalid length. [ 203.029637][T10073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.037074][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.064731][T10073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.082415][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1085'. [ 203.239263][T10073] hsr_slave_0: entered promiscuous mode [ 203.248300][T10073] hsr_slave_1: entered promiscuous mode [ 203.263407][T10073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.274830][T10073] Cannot create hsr debugfs directory [ 203.359884][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 203.473554][T10223] netlink: 'syz.0.1091': attribute type 2 has an invalid length. [ 203.485958][T10223] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1091'. [ 203.516009][T10225] netlink: 'syz.3.1092': attribute type 11 has an invalid length. [ 203.556765][T10225] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 203.714540][T10227] ip6gre1: entered allmulticast mode [ 204.125310][T10253] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 204.185131][ T30] audit: type=1804 audit(1752737290.543:3): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1099" name="/newroot/259/cgroup.controllers" dev="tmpfs" ino=1339 res=1 errno=0 [ 204.208903][ T30] audit: type=1800 audit(1752737290.553:4): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1099" name="cgroup.controllers" dev="tmpfs" ino=1339 res=0 errno=0 [ 204.309772][T10253] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.338226][T10257] netlink: 'syz.1.1100': attribute type 1 has an invalid length. [ 204.366577][T10257] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1100'. [ 204.567887][T10073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.597678][T10073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.658259][T10073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.694336][T10073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.814441][T10278] lo: entered promiscuous mode [ 204.826896][T10278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.851646][ T5856] Bluetooth: hci4: command tx timeout [ 205.049413][T10073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.145367][T10073] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.166784][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.174041][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.216649][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.223899][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.619521][T10299] netlink: 'syz.1.1113': attribute type 33 has an invalid length. [ 205.884097][T10073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.128712][T10318] netlink: 'syz.0.1115': attribute type 9 has an invalid length. [ 206.656497][T10073] veth0_vlan: entered promiscuous mode [ 206.694938][T10073] veth1_vlan: entered promiscuous mode [ 206.774599][T10073] veth0_macvtap: entered promiscuous mode [ 206.810114][T10073] veth1_macvtap: entered promiscuous mode [ 206.819226][T10345] x_tables: duplicate underflow at hook 3 [ 206.869254][T10073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.897873][T10073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.916250][T10073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.932491][ T5856] Bluetooth: hci4: command tx timeout [ 206.936426][T10073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.959853][T10073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.969140][T10073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.043991][T10353] ip6t_REJECT: ECHOREPLY is not supported [ 207.141976][ T7405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.159838][ T7405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.206296][ T7405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.215922][ T7405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.234263][T10357] syz.0.1127 (10357) used greatest stack depth: 19696 bytes left [ 207.396128][T10363] xt_connbytes: Forcing CT accounting to be enabled [ 207.500429][T10369] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 207.703934][T10382] __nla_validate_parse: 4 callbacks suppressed [ 207.703954][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 207.726187][T10380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1137'. [ 207.745298][T10382] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1136'. [ 207.901246][T10390] tipc: Failed to obtain node identity [ 207.906814][T10390] tipc: Enabling of bearer rejected, failed to enable media [ 207.932276][T10392] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 208.062881][T10396] netlink: 'syz.0.1143': attribute type 11 has an invalid length. [ 208.086431][T10396] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1143'. [ 208.139676][ T3437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.316758][T10402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.326108][T10401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.365873][ T3437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.499916][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 208.508371][T10419] netlink: 'syz.1.1148': attribute type 33 has an invalid length. [ 208.568570][T10418] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1147'. [ 208.625562][ T3437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.896357][ T3437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.263880][T10447] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007 [ 209.278861][ T5166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.294860][ T5166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.303210][ T5166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.318307][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1156'. [ 209.328469][ T5166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.354692][ T5166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.636654][ T3437] bridge_slave_1: left allmulticast mode [ 209.648067][ T3437] bridge_slave_1: left promiscuous mode [ 209.657485][ T3437] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.679826][ T3437] bridge_slave_0: left allmulticast mode [ 209.681386][T10456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1157'. [ 209.685919][ T3437] bridge_slave_0: left promiscuous mode [ 209.706888][ T3437] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.720811][T10456] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 209.860021][T10463] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1158'. [ 209.935979][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 210.223903][ T3437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.235453][ T3437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.246619][ T3437] bond0 (unregistering): Released all slaves [ 210.317257][T10463] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 210.546867][T10448] chnl_net:caif_netlink_parms(): no params data found [ 211.059450][T10492] team_slave_1: entered allmulticast mode [ 211.143532][ T3437] hsr_slave_0: left promiscuous mode [ 211.157429][ T3437] hsr_slave_1: left promiscuous mode [ 211.177698][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.195767][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.205529][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.218584][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.238495][ T3437] veth1_macvtap: left promiscuous mode [ 211.244968][ T3437] veth0_macvtap: left promiscuous mode [ 211.251235][ T3437] veth1_vlan: left promiscuous mode [ 211.256607][ T3437] veth0_vlan: left promiscuous mode [ 211.414227][ T5166] Bluetooth: hci4: command tx timeout [ 211.733625][ T3437] team0 (unregistering): Port device team_slave_1 removed [ 211.777076][ T3437] team0 (unregistering): Port device team_slave_0 removed [ 211.812968][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 211.815153][ T5166] Bluetooth: hci3: command 0x0406 tx timeout [ 212.382987][T10448] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.411436][T10448] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.429078][T10448] bridge_slave_0: entered allmulticast mode [ 212.451033][T10448] bridge_slave_0: entered promiscuous mode [ 212.500616][T10448] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.508367][T10448] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.528852][T10448] bridge_slave_1: entered allmulticast mode [ 212.537458][T10448] bridge_slave_1: entered promiscuous mode [ 212.698845][T10448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.728184][T10448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.882316][T10448] team0: Port device team_slave_0 added [ 212.906596][T10448] team0: Port device team_slave_1 added [ 212.991603][T10448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.998699][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.032099][T10448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.047656][T10448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.055994][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.083263][T10448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.100110][T10558] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 213.108761][T10558] __nla_validate_parse: 5 callbacks suppressed [ 213.108778][T10558] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1178'. [ 213.169565][T10448] hsr_slave_0: entered promiscuous mode [ 213.177570][T10448] hsr_slave_1: entered promiscuous mode [ 213.185207][T10448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.196480][T10448] Cannot create hsr debugfs directory [ 213.490774][ T5856] Bluetooth: hci4: command tx timeout [ 213.668334][T10582] openvswitch: netlink: IP tunnel dst address not specified [ 213.882506][T10594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1187'. [ 213.952401][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 214.054171][T10600] netlink: 'syz.1.1190': attribute type 21 has an invalid length. [ 214.077112][T10600] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 214.117013][T10448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.144713][T10448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.166810][T10448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.192725][T10604] xt_cgroup: path and classid specified [ 214.203638][T10448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.297123][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 214.354056][T10616] tipc: Enabling of bearer rejected, failed to enable media [ 214.468942][T10448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.477899][T10620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1196'. [ 214.516549][T10448] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.533296][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.540585][ T7413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.571441][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.578653][ T7405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.728036][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 214.737257][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 215.177520][T10448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.507707][T10675] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1210'. [ 215.517612][T10675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.581787][ T5856] Bluetooth: hci4: command tx timeout [ 215.709609][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 215.763832][T10448] veth0_vlan: entered promiscuous mode [ 215.800360][T10448] veth1_vlan: entered promiscuous mode [ 215.866195][T10448] veth0_macvtap: entered promiscuous mode [ 215.879139][T10448] veth1_macvtap: entered promiscuous mode [ 215.909158][T10448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.935286][T10448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.957578][T10448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.969992][T10448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.984381][T10448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.994428][T10448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.111941][ T7413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.119851][ T7413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.177753][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.187036][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.232103][T10701] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 216.427651][T10711] sctp: [Deprecated]: syz.1.1220 (pid 10711) Use of int in max_burst socket option. [ 216.427651][T10711] Use struct sctp_assoc_value instead [ 216.597971][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 217.203829][ T3437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.395306][ T3437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.522497][T10753] netlink: 'syz.1.1232': attribute type 21 has an invalid length. [ 217.551365][T10753] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 217.717853][ T3437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.002165][ T3437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.095438][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.118639][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.130282][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.156084][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.164385][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.201503][T10774] netlink: 'syz.1.1239': attribute type 4 has an invalid length. [ 218.371257][ T3437] bridge_slave_1: left allmulticast mode [ 218.377007][ T3437] bridge_slave_1: left promiscuous mode [ 218.389237][ T3437] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.414987][ T3437] bridge_slave_0: left allmulticast mode [ 218.425195][ T3437] bridge_slave_0: left promiscuous mode [ 218.431986][ T3437] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.806321][ T3437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.819073][ T3437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.830185][ T3437] bond0 (unregistering): Released all slaves [ 218.927489][T10785] tipc: Enabling of bearer rejected, media not registered [ 219.258347][T10804] __nla_validate_parse: 4 callbacks suppressed [ 219.258362][T10804] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1245'. [ 219.362030][T10803] ip6gre0: entered promiscuous mode [ 219.370300][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 219.548140][ T3437] hsr_slave_0: left promiscuous mode [ 219.570360][ T3437] hsr_slave_1: left promiscuous mode [ 219.578911][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.590005][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.614138][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.630868][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.669725][ T3437] veth1_macvtap: left promiscuous mode [ 219.676691][ T3437] veth0_macvtap: left promiscuous mode [ 219.691223][ T3437] veth1_vlan: left promiscuous mode [ 219.696652][ T3437] veth0_vlan: left promiscuous mode [ 219.891714][T10831] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000ac: 0000 [#1] SMP KASAN PTI [ 219.903788][T10831] KASAN: null-ptr-deref in range [0x0000000000000560-0x0000000000000567] [ 219.912225][T10831] CPU: 0 UID: 0 PID: 10831 Comm: syz.3.1251 Not tainted 6.16.0-rc5-syzkaller-00205-g531d0d32de3e #0 PREEMPT(full) [ 219.924330][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.934436][T10831] RIP: 0010:atmtcp_c_send+0x1da/0x950 [ 219.939855][T10831] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c [ 219.959496][T10831] RSP: 0018:ffffc9000d537950 EFLAGS: 00010206 [ 219.965591][T10831] RAX: 00000000000000ac RBX: 0000000000000000 RCX: 0000000000000002 [ 219.973597][T10831] RDX: ffff88801e77da00 RSI: 00000000ffffffff RDI: ffff88807b6770cc [ 219.981594][T10831] RBP: ffff88807ca5adc0 R08: ffff88807b6770cb R09: 0000000000000002 [ 219.989588][T10831] R10: ffff88807b6770ca R11: ffffffff870eaa60 R12: dffffc0000000000 [ 219.997698][T10831] R13: ffff88807b6770c0 R14: 0000000000000560 R15: 0000000000000000 [ 220.005700][T10831] FS: 00007fb8d02056c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 220.014655][T10831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.021313][T10831] CR2: 00007fb8d0204f98 CR3: 0000000055d50000 CR4: 00000000003526f0 [ 220.029308][T10831] Call Trace: [ 220.032617][T10831] [ 220.035571][T10831] vcc_sendmsg+0xa13/0xc60 [ 220.040031][T10831] ? __pfx_vcc_sendmsg+0x10/0x10 [ 220.045012][T10831] ? __pfx_autoremove_wake_function+0x10/0x10 [ 220.051137][T10831] ? aa_sock_msg_perm+0x94/0x160 [ 220.056109][T10831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.061424][T10831] ? __pfx_vcc_sendmsg+0x10/0x10 [ 220.066390][T10831] __sock_sendmsg+0x21c/0x270 [ 220.071263][T10831] sock_write_iter+0x258/0x330 [ 220.076057][T10831] ? __pfx_sock_write_iter+0x10/0x10 [ 220.081390][T10831] ? bpf_lsm_file_permission+0x9/0x20 [ 220.086786][T10831] ? security_file_permission+0x75/0x290 [ 220.092448][T10831] vfs_write+0x54b/0xa90 [ 220.096714][T10831] ? __pfx_sock_write_iter+0x10/0x10 [ 220.102029][T10831] ? __pfx_vfs_write+0x10/0x10 [ 220.106815][T10831] ? __fget_files+0x2a/0x420 [ 220.111434][T10831] ksys_write+0x145/0x250 [ 220.115787][T10831] ? __pfx_ksys_write+0x10/0x10 [ 220.120663][T10831] ? do_syscall_64+0xbe/0x3b0 [ 220.125365][T10831] do_syscall_64+0xfa/0x3b0 [ 220.129890][T10831] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.135125][T10831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.141214][T10831] ? clear_bhb_loop+0x60/0xb0 [ 220.145919][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.151838][T10831] RIP: 0033:0x7fb8cf38e929 [ 220.156274][T10831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.175908][T10831] RSP: 002b:00007fb8d0205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.184346][T10831] RAX: ffffffffffffffda RBX: 00007fb8cf5b6160 RCX: 00007fb8cf38e929 [ 220.192337][T10831] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000004 [ 220.200323][T10831] RBP: 00007fb8cf410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 220.208310][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.216300][T10831] R13: 0000000000000001 R14: 00007fb8cf5b6160 R15: 00007ffdbd2c7278 [ 220.224302][T10831] [ 220.227337][T10831] Modules linked in: [ 220.233648][T10831] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.244764][ T5856] Bluetooth: hci4: command tx timeout [ 220.297542][T10831] RIP: 0010:atmtcp_c_send+0x1da/0x950 [ 220.307540][T10833] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1253'. [ 220.344539][T10831] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c [ 220.415147][T10831] RSP: 0018:ffffc9000d537950 EFLAGS: 00010206 [ 220.426917][T10831] RAX: 00000000000000ac RBX: 0000000000000000 RCX: 0000000000000002 [ 220.446100][T10831] RDX: ffff88801e77da00 RSI: 00000000ffffffff RDI: ffff88807b6770cc [ 220.463870][T10831] RBP: ffff88807ca5adc0 R08: ffff88807b6770cb R09: 0000000000000002 [ 220.482929][T10831] R10: ffff88807b6770ca R11: ffffffff870eaa60 R12: dffffc0000000000 [ 220.491330][T10831] R13: ffff88807b6770c0 R14: 0000000000000560 R15: 0000000000000000 [ 220.499373][T10831] FS: 00007fb8d02056c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 220.509712][T10831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.516912][T10831] CR2: 00007fb8d0204f98 CR3: 0000000055d50000 CR4: 00000000003526f0 [ 220.526286][T10831] Kernel panic - not syncing: Fatal exception [ 220.532764][T10831] Kernel Offset: disabled [ 220.537105][T10831] Rebooting in 86400 seconds..