last executing test programs: 3.538661409s ago: executing program 4 (id=3344): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_channels={0x50}}) r4 = accept$alg(r2, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[], 0x100000530) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000100)=""/63, 0x3f}], 0x2}}], 0x1, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05004200000000000000010000000c00020000000000000000000c00078008000100", @ANYRES32, @ANYBLOB], 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r6, @ANYRES32=r1, @ANYRES16=r4, @ANYRES8=r0, @ANYRES64=r1], 0xa0}}, 0x4044001) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) 2.605793699s ago: executing program 1 (id=3357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r5, &(0x7f00000001c0)="e7b7bfeb38558f762b60ff399710dd3b9106982d0593a17af6959288b887416e39d0fb4905b9e3069a32a0270ba332d99c547a453674d25b1c89abceac3463a2ee62391b58dcce7be91f2fae5234e927698ce9cc5fd20291d8e5c178c490279693db171b52cfd7b3d52eaf9b0e809a281e5a61517a055bb62923f4ecc9cadb2c5b107341e8b1126f0366ea76e10351e1a23289068703135e50669bb6d42c52ef76c103181cdbdfb5d108cd504d5ef32357c03bb70da3053091f49661de21922dd3aa9c981c2925c49c47add8f5e4488ce41fd4dc62f803f29c", 0xd9, 0x4040014, &(0x7f00000002c0)={0xa, 0x4e20, 0x7, @mcast1, 0x80000001}, 0x1c) socketpair(0x5, 0x800, 0xf3, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000440)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x3}}, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000380)="411c33a78602b2d38cc4965cecf0ffe00fb962abe61babe97056ab81baa5e6488351a30db5126d5174ede0a31f1a07ddbada124f0fee7d00e676b230236d53ed7458a1f3fdfdf46da90cf03353311ef18855968b6bdcea2aed4c7cadeceb5010a7966c1ef8ba16af2f7f082dbefa7f230ed0dde74227e211cd87912d9276b40396892274b8bf08b5cfeb77083d5c21a1ca918bec3b686dcca0b90db548572b0b0eeaf92b18938c3b30f3d10bfd75c2837951aa2bdff819c337", 0xb9, 0x20004080}, 0x20004001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x58, {0x2, 0x4e21, @local}, 'wg0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000580)={'bond_slave_1\x00', 0x100}) socket$inet_udp(0x2, 0x2, 0x0) r10 = epoll_create(0xa) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x12, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x789eb1ab}, [@ldst={0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0x8000000000000006}, @map_fd={0x18, 0x2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @generic={0x3, 0x0, 0x8, 0x3, 0x7ff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x58}]}, &(0x7f0000000680)='GPL\x00', 0x7, 0x7e, &(0x7f00000006c0)=""/126, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x4, 0x6, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x1, 0x4, 0xa}, {0x3, 0x1, 0xf, 0xf}], 0x10, 0x3, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f00000008c0)={0x11}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r13 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r13, &(0x7f0000000940)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r11, 0x8030942b, &(0x7f0000000980)={0x7cf1, {0x25, 0x8, 0x3, 0x7, 0x608}}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb208}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044091}, 0x8080) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c40)={@fallback=r12, r11, 0xd, 0x8, 0x0, @void, @value=r11}, 0x20) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xcf55}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x200000d0) openat$cgroup_ro(r12, &(0x7f0000000d80)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000dc0)={0x0, 'syz1\x00'}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xee1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) 2.495901332s ago: executing program 4 (id=3359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000000), 0x0, 0xfff5}, 0x28) 2.260071774s ago: executing program 3 (id=3362): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) socket(0x1000000000000010, 0x80802, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 2.221670095s ago: executing program 1 (id=3363): r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x34000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@remote, 0x30, r5}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xffffffff, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r6, 0x0, 0x8000002b) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x1, @random="e21fc76a2ec6", 'sit0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) r8 = socket$kcm(0x21, 0x2, 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110, 0xb}], 0x20}, 0x0) getsockopt(r0, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) 2.192399842s ago: executing program 4 (id=3364): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f00000004c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "babbac71c05b63da6edd469f82b3af626fac6eaf165c59acad6632c4c29f14ab8af36e9b7be95f768b203ce50ff04f28f885931e40354314311f081e4c124fa0"}, 0x48}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a4010000e3cb16226b54e0f09bae90e636f516ba7bc81d5a14459819e6c8ae7a4bc949232bea69022ac41251039d9c18d141294e99e6412e7dd20aaa4b5324ab10c4cbf37be9dd76969f8684753859b3a70931dec9d2", @ANYRES16=r4, @ANYBLOB="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"/414], 0x1a4}}, 0x0) 1.97641783s ago: executing program 4 (id=3366): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000700)=0x8f, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}}, 0x4044000) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@loopback}, &(0x7f00000001c0)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4}}]}, 0x38}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES32=r4], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='page_pool_release\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000eb1d95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='page_pool_release\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 1.907909828s ago: executing program 3 (id=3368): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x51}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0xa400}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.664090626s ago: executing program 3 (id=3372): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r4, &(0x7f0000000080), 0x0}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x2}}}, 0x24}}, 0x40004) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) (async) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r4, &(0x7f0000000080), 0x0}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x2}}}, 0x24}}, 0x40004) (async) 1.346150426s ago: executing program 1 (id=3374): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x40000) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x200000100000011, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) socket(0x1000000000000010, 0x80802, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r9, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 1.279998237s ago: executing program 3 (id=3375): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000003e700004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.198054263s ago: executing program 2 (id=3377): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100000000000000000001000000", @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 1.145318001s ago: executing program 0 (id=3378): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000103000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.00413694s ago: executing program 2 (id=3379): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, 0x0, 0x0) (async) unshare(0x2a020400) (async) bpf$PROG_LOAD(0x1c, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = epoll_create1(0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, r3, 0x1, 0x70bd26, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendmmsg$inet(r4, &(0x7f0000000380)=[{{0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x300, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0xa000000d}) (async) syz_emit_ethernet(0x1df, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1a9, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)) 999.545592ms ago: executing program 3 (id=3380): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r0}, 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={@map=0x1, 0xffffffffffffffff, 0x2f, 0x8, 0xffffffffffffffff, @void, @value}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000100)}, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000001100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) recvfrom$inet(r3, &(0x7f0000000180)=""/85, 0x55, 0x0, 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xff1f}, 0x0) 990.158578ms ago: executing program 4 (id=3381): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9f}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newchain={0xff8, 0x64, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}}, [@f_rsvp={{0x9}, {0x4}}, @f_tcindex={{0xc}, {0xfb8, 0x2, [@TCA_TCINDEX_ACT={0x188, 0x7, [@m_vlan={0x100, 0xd, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfb4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xb9, 0x6, "25160be35d6d7a9d9f274cb556e06dbd4bc4a09ad5343cd279841a822aeee30023a567c973171b32a3cb3c923023597f7565bc5cfac38e79226ef411a825a83631a228f713b1fb53123ed2e5cc2d690723daee1c6d29664b39a7070135803a0854e98cab5ee06e65beb30ad0d1a7bc6055903080e3b40c14804ebb9f0e2750975a4da9c18ac69f5171dbfd67df6fb0746ae54b92bfbda5b8221decf0620594f49e04cac4437070eea7de8d934f80caee95a31257c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x84, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x5, 0x5, 0xffffff01, 0xffffff43}}]}, {0x35, 0x6, "be7e0b8c5dca0e5085ed89e390c790dbefd2f3c745d4d1e8031d1846764cd6873e524473a29add72ee460269526726e782"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0xe24, 0x7, [@m_xt={0x5c, 0xf, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xf, 0x6, "0000044fd72c2223861e00"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xdc4, 0x11, 0x0, 0x0, {{0x9}, {0x4}, {0xd95, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xff8}}, 0x40040) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000140)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r8}, &(0x7f0000000080)=0x8) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040), 0xc) close(r9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f0000005480)=0x12, 0x4) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)={r12, 0xfffd, 0x30, 0x0, 0x1}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000003c0)={r6, 0xc9, 0x4, 0x4e25, 0x4, 0x3, 0x1, 0x4a69, {r12, @in6={{0xa, 0x4e24, 0x7fff, @empty}}, 0x400, 0xffffff7b, 0x9, 0x4, 0x3}}, &(0x7f0000000480)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r12, 0x3}, 0x8) recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4082, 0xff2}], 0x1}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280080001007369740020000280080003006401010114000b00ff02000000000000000000000000000108000400ade2"], 0x54}}, 0x0) 884.10196ms ago: executing program 0 (id=3382): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x20, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}}, 0x8801) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0213130002"], 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 879.331174ms ago: executing program 2 (id=3383): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x6, 0x4, {{0x8, 0x4, 0x1, 0x2, 0x20, 0x64, 0x0, 0xfc, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0xb, 0x9e, [@multicast2, @broadcast]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@loopback, @loopback, 0x0}, &(0x7f00000001c0)=0xc) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f00000002c0)=0xc) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x200, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f00000005c0)=@ethtool_eee={0x45, 0x5, 0x9, 0x6, 0x4, 0x6, 0x8, 0x80000000, [0x7, 0x2]}}) (async, rerun: 32) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) preadv(r8, &(0x7f0000000880)=[{&(0x7f0000000640)=""/24, 0x18}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)=""/142, 0x8e}, {&(0x7f0000000840)=""/21, 0x15}], 0x4, 0x3, 0xb) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x8000}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000980)=@assoc_id=r10, 0x4) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f00000009c0)={r10, 0x2}, &(0x7f0000000a00)=0x8) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000001d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d40)={&(0x7f0000000ac0)={0x126c, r11, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x33, 0x5, "a4f1f749e158641aa0c9fc41765277e7605a16d808839ae36a82d3b4b235952f7fdc4c6d26feb33780161ab1c90e75"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "744e1fe8ac9a9b5b0e657822c0fe8b1192b65805b9a09ca7d555265ead479c55136d0b4f310f26e99ac4044ce148b8072f8ec8a10d98e9d11c7dd1e3334c4abc6b8f8e5d2f04cd602b676dbca35cb1976b10ab258973efde56275a68b50d8c6545822217cc930c"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x11a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'caif0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'Z\\/{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x86, 0x5, "10978b025ac42c78191223df327d7ca8b5cfeaa3eb5830fccc17807308c76a257cdd00451385c5ac89155afa1999be5e667267c3b0eb18b6e924c843bc92b7c0f0b3bf2c121ed09aefb23001f84ff54b6c2d20d536b484bcea14c2ff71b4e9fb9b6d5491ac36d738b7dba4700eabd41f9529450fe676a206cc7a1a60654cb59cbc62"}, @ETHTOOL_A_BITSET_MASK={0x67, 0x5, "cff62285e247cb7339167af2c7e884fe88078a8e88f32e4f212a445a6988d7b987a56629ad0af42ec57e90753d49b95b6945a79754e0d35832614592b2278000d52faac9efa4e432e43a5845ce9a15632d3008caf887c18956222ecc21375e4b78dbe2"}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '+-@,)\'.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}]}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "42f568e84dcd"}]}]}, 0x126c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) (async, rerun: 32) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e00), r9) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x24, r12, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x24000005) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r13, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004089}, 0x4) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000002040)=[@in6={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}, @in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x9}, @in6={0xa, 0x4e22, 0x3, @empty, 0x9}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e24, 0x7b2a, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}], 0xd8) syz_genetlink_get_family_id$devlink(&(0x7f0000002140), r0) (async) r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000021c0), r13) sendmsg$NLBL_CIPSOV4_C_ADD(r14, &(0x7f0000002440)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x845486795c06fe67}, 0xc, &(0x7f0000002400)={&(0x7f0000002200)={0x200, r15, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf41e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f20f8d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fa8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f32e9ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb89fdce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x524436fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ec68be9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbfc}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x755c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e73327}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7804f549}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fc57503}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31a7}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x164, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x230afa13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d741982}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58a7f1d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65c0b673}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a115d78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2b1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6402}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a693d87}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd79d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ff7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c179bc1}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaca5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x755c831}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75287229}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb16}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb549}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf98}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x715dcae4}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6df17f3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e9dd4d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ef3bbc4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf48f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1392}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7d9}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x647c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x203cf33d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5423e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe349}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3155}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e3b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf0b236c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async) socket(0x11, 0x3, 0x8) 830.041915ms ago: executing program 1 (id=3384): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x57}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x10000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f0000000100)="0308a8", 0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x19, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x6, 0xa7, &(0x7f0000000200)=""/167, 0x41100, 0x10, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xe, 0x2, 0x63}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x2, 0x5, 0x3, 0x1}, {0x2, 0x4, 0xa, 0x1}, {0x2, 0x4, 0x1}, {0x1, 0x2, 0x3, 0x8}, {0x5, 0x1, 0x9, 0x2}, {0x5, 0x1, 0xe, 0xa}], 0x10, 0x7, @void, @value}, 0x90) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffffff9c, 0x8) connect$vsock_stream(r5, &(0x7f0000000380)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, 0x5a, 0x4, 0x0, 0x0, {0x9}}, 0x33}}, 0x24044014) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000e03a0200000018000000000000000000000000000090cd58562a15002c000064a6693bad89000000000018000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2, 0x0, 0xffbffffd}, 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r8, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) close(0x3) setsockopt$inet_tcp_int(r6, 0x6, 0x8, &(0x7f0000000000)=0xfe, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="092c302a89941b7d793aeee61846b53ba81da5a04ec9307005a6572e8af171cf47f2a5d9a367bd6551325cd11bf3265ef3d27d5d0eec32000000000000000092de196a2f047eb5215235f74a670ed40104827642f80c8496af7280696943ba4a3bbd6101b79d3a794f10024f2a6fbb2b8994ad9f354c45a3e762a031af1427c15cea437d8775a1205984055845469af06190e78dd7db021eee64b5dc78f559735b2b598a698c8ec947b74f9bce19a116af2a32bb4c853aadaabaaff41a69378157fa3d9cc360bd4cbb5991e172eb504669fcdd084b15c294f885decb0b3e65b13375fb7113b194edaafdcf3b9df6a17ec6a43667088d0feb4a"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 648.157469ms ago: executing program 0 (id=3385): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x1021}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x3fff}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x134}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_to_team\x00', 0x1000}) 647.315027ms ago: executing program 1 (id=3386): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a008017e451000000af0000000000000000000000960002000000ac1414000000000000000000"], 0x28}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x44}}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r2, &(0x7f00000002c0)=ANY=[], 0x15) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) 606.393616ms ago: executing program 2 (id=3387): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)={0x83a0, 0x9, 0x1, 0x101, 0x2, [{0x3, 0xf, 0x17d, '\x00', 0x20c}, {0x6, 0x4, 0xb6a9, '\x00', 0x200e}]}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) sendto$packet(r5, &(0x7f0000000dc0)="d0b4163e96457321d877d01ac22cf3", 0xf, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r4, 0x1, 0x70, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4094884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) (async, rerun: 32) sendto$inet6(r6, &(0x7f0000000780)="0d0ad7", 0x3, 0x6d91fb6102d8d9cc, 0x0, 0x0) (rerun: 32) syz_emit_ethernet(0x173, &(0x7f0000000440)={@random="e33110495bfd", @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x48, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x5, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map=r10, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000000c0), 0x12) write$cgroup_int(r4, &(0x7f00000003c0)=0x1000, 0x12) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r13, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd47afd956246f5a0}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x108, 0xb, 0x108, 0x1c0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) r15 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 316.03074ms ago: executing program 1 (id=3389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000200)={0x8, 'macvlan1\x00', {'veth0\x00'}, 0x3}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100feffffff00000000200000001c002d8005000400000000e50400010000000000080002000100000008000300", @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x240008c0}, 0x4080) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200e5ffffffffffffff00000000000000000000000000000000000000000000000000000200000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c00000000000000640101020000000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000003200000002"], 0x23c}}, 0x0) 270.535374ms ago: executing program 2 (id=3390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x6, @dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x0, 'rr\x00'}, 0x2c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000760001"], 0x20}}, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x800443d2, 0x20000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x134, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xac, 0x3, "d7a808e489a6b22d431f0880c8105769bdf54c2ae3d2358a9c1047ed1d86ed7d406229f126b03f95797a3e3884a61303121f5c29917333e96b5ea4acf3bbe982f0d874b7c5a04fd5a731285acd9fe518087adfa30a2c017a26a3ff41b5e6cf2adb82a5f32cc985722749cc9bff28878325ed22c7735baf1d4e9c17a4d208a026410abb5d522991b52c6beb3240172029ae8fc73c1aa99ac484c78403f254bc65058aadbc4e1f8114"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "d3472d9dfa969e12695b1e7469bd1dcd2d6c375170973fe4e929d8a5260fe849"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x134}}, 0x800) 216.592205ms ago: executing program 0 (id=3391): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000001310000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 76.114715ms ago: executing program 0 (id=3392): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 71.191412ms ago: executing program 3 (id=3393): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd079c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9359b69bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a67f00000000000000eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff00003459c117f78aff010000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9b920e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbc2b5fcbc2715bf4df1da8699febe7ca0c5373381fd9545ceb43577e5cec0140809ba424dcf545703d71c7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000000), 0x0, 0x2000000}, 0x28) 69.110557ms ago: executing program 2 (id=3394): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) socket(0x1000000000000010, 0x80802, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xc7, &(0x7f0000000100)="75dc231fb3f1734e9fac7ad8133f6ead319fa18719df23b07324d5bec33b0a7274d5d34edc3332051b39ce092b8361037f330303a104dd20a5dd6995f4f033206c842b99dbfe4876a1f56ed4314c98532766141b1d92ae9ad4f54b80cd0026bad6eeccd54baa5223359c21f0d7cde91017ce02551f4055bcefbe9a4274e250c847f27528b68722e6c0a9114481a5bcce93b95f95cd8e8ac448372a61d191e0f45ca089ed714d8a21b21b80c6a448e6c68fc06344d83da4ad14729b499c12", 0xbe) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 0s ago: executing program 4 (id=3395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f, 0x9, @dev, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {@remote}, {@dev}, {@local}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f, 0x9, @dev, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {@remote}, {@dev}, {@local}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) kernel console output (not intermixed with test programs): __pfx_netlink_rcv_skb+0x10/0x10 [ 223.908321][T11417] ? __netlink_deliver_tap+0x77e/0x7c0 [ 223.913977][T11417] genl_rcv+0x28/0x40 [ 223.917979][T11417] netlink_unicast+0x7f6/0x990 [ 223.922777][T11417] ? __pfx_netlink_unicast+0x10/0x10 [ 223.928083][T11417] ? __virt_addr_valid+0x183/0x530 [ 223.933202][T11417] ? __check_object_size+0x49c/0x900 [ 223.938519][T11417] ? bpf_lsm_netlink_send+0x9/0x10 [ 223.943663][T11417] netlink_sendmsg+0x8e4/0xcb0 [ 223.948535][T11417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.953912][T11417] ? __import_iovec+0x536/0x820 [ 223.958792][T11417] ? aa_sock_msg_perm+0x91/0x160 [ 223.963768][T11417] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.969068][T11417] ? security_socket_sendmsg+0x87/0xb0 [ 223.974620][T11417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.979923][T11417] __sock_sendmsg+0x221/0x270 [ 223.984603][T11417] ____sys_sendmsg+0x525/0x7d0 [ 223.989370][T11417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.994673][T11417] __sys_sendmsg+0x2b0/0x3a0 [ 223.999279][T11417] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.004402][T11417] ? vfs_write+0x7c4/0xc90 [ 224.009284][T11417] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.015611][T11417] ? do_syscall_64+0x100/0x230 [ 224.020470][T11417] ? do_syscall_64+0xb6/0x230 [ 224.025145][T11417] do_syscall_64+0xf3/0x230 [ 224.029648][T11417] ? clear_bhb_loop+0x35/0x90 [ 224.034592][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.040564][T11417] RIP: 0033:0x7feacf77def9 [ 224.044973][T11417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.064771][T11417] RSP: 002b:00007fead0617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.073211][T11417] RAX: ffffffffffffffda RBX: 00007feacf935f80 RCX: 00007feacf77def9 [ 224.081202][T11417] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 224.089182][T11417] RBP: 00007fead0617090 R08: 0000000000000000 R09: 0000000000000000 [ 224.097260][T11417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.105309][T11417] R13: 0000000000000000 R14: 00007feacf935f80 R15: 00007ffd6ed0d608 [ 224.109329][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 224.113282][T11417] [ 224.810310][T11465] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 224.837707][T11465] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.2390'. [ 224.869371][T11465] netlink: 'syz.1.2390': attribute type 2 has an invalid length. [ 224.888287][T11465] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 225.149191][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 225.223995][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2396'. [ 225.297407][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 225.548622][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 225.553993][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2402'. [ 225.974799][T11522] netlink: 'syz.0.2410': attribute type 13 has an invalid length. [ 226.013911][T11522] macvtap0: entered allmulticast mode [ 226.021685][T11522] macvtap0: refused to change device tx_queue_len [ 226.189153][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 226.372245][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2417'. [ 226.484102][T11549] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 226.566720][T11549] bridge0: port 3(dummy0) entered disabled state [ 226.573415][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.581224][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.593456][T11549] bridge0: entered allmulticast mode [ 227.023517][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 227.038387][T11555] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 227.047576][T11555] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2422'. [ 227.058271][T11555] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 227.068455][T11555] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 227.229235][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 227.309518][ T8208] wlan1: Trigger new scan to find an IBSS to join [ 227.695809][T11567] pim6reg: entered allmulticast mode [ 227.817032][T11565] pim6reg: left allmulticast mode [ 227.911087][T11579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2431'. [ 228.272199][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.518387][T11603] netlink: 'syz.2.2439': attribute type 3 has an invalid length. [ 228.533384][T11603] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 228.543099][T11603] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 228.952261][ T64] wlan1: Creating new IBSS network, BSSID 1a:7f:22:6d:0e:d2 [ 229.280012][T11623] __nla_validate_parse: 2 callbacks suppressed [ 229.280032][T11623] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2446'. [ 229.309274][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 229.484472][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 229.554928][T11636] netlink: 'syz.3.2449': attribute type 4 has an invalid length. [ 229.705162][T11640] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 230.231454][T11664] netlink: 'syz.1.2459': attribute type 15 has an invalid length. [ 230.349170][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 230.764883][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 230.793872][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 230.939984][T11686] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 231.122205][T11696] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2469'. [ 231.155939][T11696] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2469'. [ 231.389233][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.401632][T11715] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2476'. [ 231.421384][T11715] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 231.668032][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 231.842312][T11729] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 231.890943][T11729] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.898683][T11729] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.924880][T11729] bridge0: entered allmulticast mode [ 232.429631][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.476431][T11761] netlink: 'syz.3.2493': attribute type 1 has an invalid length. [ 232.505359][T11761] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.2493'. [ 232.540953][T11761] netlink: 'syz.3.2493': attribute type 1 has an invalid length. [ 232.553333][T11767] syzkaller1: entered promiscuous mode [ 232.573508][T11761] netlink: 'syz.3.2493': attribute type 2 has an invalid length. [ 232.584222][T11767] syzkaller1: entered allmulticast mode [ 232.923402][T11785] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 232.959175][T11788] netlink: 'syz.2.2500': attribute type 11 has an invalid length. [ 233.212995][T11795] netlink: 'syz.4.2503': attribute type 2 has an invalid length. [ 233.232846][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2503'. [ 233.469376][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.561469][T11814] x_tables: duplicate underflow at hook 1 [ 234.353082][T11861] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 234.509521][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.552896][T11876] netlink: 'syz.3.2527': attribute type 10 has an invalid length. [ 234.582498][T11876] __nla_validate_parse: 3 callbacks suppressed [ 234.582517][T11876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2527'. [ 235.014132][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'. [ 235.035627][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 235.066103][T11902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2537'. [ 235.087140][T11902] netlink: 'syz.2.2537': attribute type 9 has an invalid length. [ 235.103457][T11902] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2537'. [ 235.476858][T11922] netlink: 'syz.3.2540': attribute type 1 has an invalid length. [ 235.549176][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.720655][T11929] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2544'. [ 236.044108][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 236.589136][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.612789][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 236.637512][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 236.928326][T11960] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2555'. [ 237.629173][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 237.803524][T12004] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 238.021676][T12020] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.273910][T12031] delete_channel: no stack [ 238.361743][T12027] x_tables: duplicate underflow at hook 2 [ 238.376976][T12027] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 238.434740][T12027] bond0: (slave bond_slave_0): Releasing backup interface [ 238.507980][T12037] tap0: tun_chr_ioctl cmd 1074025677 [ 238.527743][T12037] tap0: linktype set to 3 [ 238.669275][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 239.340630][T12073] netlink: 'syz.4.2595': attribute type 13 has an invalid length. [ 239.365657][T12073] veth0_macvtap: left promiscuous mode [ 239.402917][T12073] macvtap0: entered allmulticast mode [ 239.411458][T12082] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 239.440554][T12073] macvtap0: refused to change device tx_queue_len [ 239.602817][T12090] netlink: 'syz.2.2600': attribute type 4 has an invalid length. [ 239.709152][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.405645][T12117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.598148][T12126] __nla_validate_parse: 9 callbacks suppressed [ 240.598167][T12126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2611'. [ 240.675025][T12130] FAULT_INJECTION: forcing a failure. [ 240.675025][T12130] name failslab, interval 1, probability 0, space 0, times 0 [ 240.688342][T12130] CPU: 1 UID: 0 PID: 12130 Comm: syz.2.2613 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 240.699140][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.709207][T12130] Call Trace: [ 240.712498][T12130] [ 240.715422][T12130] dump_stack_lvl+0x241/0x360 [ 240.720100][T12130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.725300][T12130] ? __pfx__printk+0x10/0x10 [ 240.729884][T12130] ? ref_tracker_alloc+0x332/0x490 [ 240.735081][T12130] should_fail_ex+0x3b0/0x4e0 [ 240.739759][T12130] ? skb_clone+0x20c/0x390 [ 240.744172][T12130] should_failslab+0xac/0x100 [ 240.748849][T12130] ? skb_clone+0x20c/0x390 [ 240.749678][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.753278][T12130] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 240.765664][T12130] skb_clone+0x20c/0x390 [ 240.769914][T12130] __netlink_deliver_tap+0x3cc/0x7c0 [ 240.775200][T12130] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.780390][T12130] netlink_deliver_tap+0x19d/0x1b0 [ 240.785497][T12130] netlink_sendskb+0x68/0x140 [ 240.790175][T12130] netlink_unicast+0x39d/0x990 [ 240.795036][T12130] ? __asan_memcpy+0x40/0x70 [ 240.799627][T12130] ? __pfx_netlink_unicast+0x10/0x10 [ 240.804952][T12130] netlink_rcv_skb+0x262/0x430 [ 240.809716][T12130] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 240.815255][T12130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.820631][T12130] ? apparmor_capable+0x13b/0x1b0 [ 240.826020][T12130] ? bpf_lsm_capable+0x9/0x10 [ 240.830709][T12130] ? security_capable+0x90/0xb0 [ 240.835855][T12130] nfnetlink_rcv+0x297/0x2ad0 [ 240.840623][T12130] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 240.846416][T12130] ? __dev_queue_xmit+0x2da/0x3e90 [ 240.851534][T12130] ? __dev_queue_xmit+0x1763/0x3e90 [ 240.856899][T12130] ? kasan_save_track+0x51/0x80 [ 240.861842][T12130] ? do_syscall_64+0xf3/0x230 [ 240.866615][T12130] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 240.871805][T12130] ? __dev_queue_xmit+0x2da/0x3e90 [ 240.877109][T12130] ? __pfx___dev_queue_xmit+0x10/0x10 [ 240.882488][T12130] ? ref_tracker_free+0x643/0x7e0 [ 240.887595][T12130] ? __asan_memcpy+0x40/0x70 [ 240.892213][T12130] ? __pfx_ref_tracker_free+0x10/0x10 [ 240.897963][T12130] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.903155][T12130] ? skb_clone+0x240/0x390 [ 240.907565][T12130] ? __pfx_lock_release+0x10/0x10 [ 240.912594][T12130] ? __netlink_deliver_tap+0x77e/0x7c0 [ 240.918144][T12130] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.923342][T12130] netlink_unicast+0x7f6/0x990 [ 240.928205][T12130] ? __pfx_netlink_unicast+0x10/0x10 [ 240.933495][T12130] ? __virt_addr_valid+0x183/0x530 [ 240.938961][T12130] ? __check_object_size+0x49c/0x900 [ 240.944249][T12130] ? bpf_lsm_netlink_send+0x9/0x10 [ 240.949373][T12130] netlink_sendmsg+0x8e4/0xcb0 [ 240.954169][T12130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.959467][T12130] ? __import_iovec+0x536/0x820 [ 240.964417][T12130] ? aa_sock_msg_perm+0x91/0x160 [ 240.969374][T12130] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 240.975003][T12130] ? security_socket_sendmsg+0x87/0xb0 [ 240.980652][T12130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.985959][T12130] __sock_sendmsg+0x221/0x270 [ 240.990950][T12130] ____sys_sendmsg+0x525/0x7d0 [ 240.996283][T12130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.001632][T12130] __sys_sendmsg+0x2b0/0x3a0 [ 241.006537][T12130] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.011862][T12130] ? vfs_write+0x7c4/0xc90 [ 241.016332][T12130] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 241.022666][T12130] ? do_syscall_64+0x100/0x230 [ 241.027433][T12130] ? do_syscall_64+0xb6/0x230 [ 241.032190][T12130] do_syscall_64+0xf3/0x230 [ 241.036692][T12130] ? clear_bhb_loop+0x35/0x90 [ 241.041545][T12130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.047531][T12130] RIP: 0033:0x7fe703d7def9 [ 241.052753][T12130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.072543][T12130] RSP: 002b:00007fe704b4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.081049][T12130] RAX: ffffffffffffffda RBX: 00007fe703f35f80 RCX: 00007fe703d7def9 [ 241.089107][T12130] RDX: 0000000000004000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 241.097248][T12130] RBP: 00007fe704b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.105216][T12130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.113186][T12130] R13: 0000000000000000 R14: 00007fe703f35f80 R15: 00007ffd2f15ce78 [ 241.121314][T12130] [ 241.550603][T12139] syzkaller0: entered promiscuous mode [ 241.556259][T12139] syzkaller0: entered allmulticast mode [ 241.727789][T12154] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.789192][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.895473][T12160] FAULT_INJECTION: forcing a failure. [ 241.895473][T12160] name failslab, interval 1, probability 0, space 0, times 0 [ 241.927779][T12160] CPU: 1 UID: 0 PID: 12160 Comm: syz.3.2624 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 241.938610][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 241.948704][T12160] Call Trace: [ 241.952103][T12160] [ 241.955070][T12160] dump_stack_lvl+0x241/0x360 [ 241.959791][T12160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.967859][T12160] ? __pfx__printk+0x10/0x10 [ 241.972520][T12160] ? ref_tracker_alloc+0x332/0x490 [ 241.977675][T12160] should_fail_ex+0x3b0/0x4e0 [ 241.982413][T12160] ? skb_clone+0x20c/0x390 [ 241.986871][T12160] should_failslab+0xac/0x100 [ 241.991609][T12160] ? skb_clone+0x20c/0x390 [ 241.996149][T12160] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 242.001654][T12160] skb_clone+0x20c/0x390 [ 242.005938][T12160] __netlink_deliver_tap+0x3cc/0x7c0 [ 242.011435][T12160] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.017034][T12160] netlink_deliver_tap+0x19d/0x1b0 [ 242.022184][T12160] netlink_sendskb+0x68/0x140 [ 242.027752][T12160] netlink_unicast+0x39d/0x990 [ 242.032641][T12160] ? __pfx_netlink_unicast+0x10/0x10 [ 242.037996][T12160] ? nfnl_pernet+0x23/0x240 [ 242.042547][T12160] nfnetlink_unicast+0x51/0x80 [ 242.047368][T12160] nf_tables_gettable+0x5be/0x6e0 [ 242.052454][T12160] ? __pfx_nf_tables_gettable+0x10/0x10 [ 242.058212][T12160] ? __nla_parse+0x40/0x60 [ 242.062731][T12160] ? nfnetlink_rcv_msg+0x225/0x1180 [ 242.067935][T12160] ? __pfx_nf_tables_gettable+0x10/0x10 [ 242.073777][T12160] nfnetlink_rcv_msg+0x8a2/0x1180 [ 242.078829][T12160] ? kernel_text_address+0xa7/0xe0 [ 242.084008][T12160] ? nfnetlink_rcv_msg+0x225/0x1180 [ 242.089249][T12160] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 242.094789][T12160] ? netlink_deliver_tap+0x19d/0x1b0 [ 242.100478][T12160] ? netlink_unicast+0x7c4/0x990 [ 242.105541][T12160] ? netlink_sendmsg+0x8e4/0xcb0 [ 242.110925][T12160] ? __sock_sendmsg+0x221/0x270 [ 242.115804][T12160] ? ____sys_sendmsg+0x525/0x7d0 [ 242.120788][T12160] ? __sys_sendmsg+0x2b0/0x3a0 [ 242.125578][T12160] ? do_syscall_64+0xf3/0x230 [ 242.130286][T12160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.136459][T12160] netlink_rcv_skb+0x1e3/0x430 [ 242.141259][T12160] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 242.146768][T12160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.152375][T12160] ? apparmor_capable+0x13b/0x1b0 [ 242.157432][T12160] ? bpf_lsm_capable+0x9/0x10 [ 242.162281][T12160] ? security_capable+0x90/0xb0 [ 242.167278][T12160] nfnetlink_rcv+0x297/0x2ad0 [ 242.172002][T12160] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 242.177753][T12160] ? __dev_queue_xmit+0x2da/0x3e90 [ 242.182890][T12160] ? __dev_queue_xmit+0x1763/0x3e90 [ 242.188363][T12160] ? kasan_save_track+0x51/0x80 [ 242.193254][T12160] ? do_syscall_64+0xf3/0x230 [ 242.197957][T12160] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 242.203072][T12160] ? __dev_queue_xmit+0x2da/0x3e90 [ 242.208299][T12160] ? __pfx___dev_queue_xmit+0x10/0x10 [ 242.213817][T12160] ? ref_tracker_free+0x643/0x7e0 [ 242.218871][T12160] ? __asan_memcpy+0x40/0x70 [ 242.223508][T12160] ? __pfx_ref_tracker_free+0x10/0x10 [ 242.228930][T12160] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.234274][T12160] ? skb_clone+0x240/0x390 [ 242.238735][T12160] ? __pfx_lock_release+0x10/0x10 [ 242.243780][T12160] ? __netlink_deliver_tap+0x77e/0x7c0 [ 242.249319][T12160] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.254558][T12160] netlink_unicast+0x7f6/0x990 [ 242.259367][T12160] ? __pfx_netlink_unicast+0x10/0x10 [ 242.264653][T12160] ? __virt_addr_valid+0x183/0x530 [ 242.269915][T12160] ? __check_object_size+0x49c/0x900 [ 242.275327][T12160] ? bpf_lsm_netlink_send+0x9/0x10 [ 242.280499][T12160] netlink_sendmsg+0x8e4/0xcb0 [ 242.285292][T12160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.290599][T12160] ? __import_iovec+0x536/0x820 [ 242.295503][T12160] ? aa_sock_msg_perm+0x91/0x160 [ 242.300462][T12160] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 242.305758][T12160] ? security_socket_sendmsg+0x87/0xb0 [ 242.311237][T12160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.316665][T12160] __sock_sendmsg+0x221/0x270 [ 242.321455][T12160] ____sys_sendmsg+0x525/0x7d0 [ 242.326242][T12160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.331565][T12160] __sys_sendmsg+0x2b0/0x3a0 [ 242.336179][T12160] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.341297][T12160] ? vfs_write+0x7c4/0xc90 [ 242.345771][T12160] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.352136][T12160] ? do_syscall_64+0x100/0x230 [ 242.356922][T12160] ? do_syscall_64+0xb6/0x230 [ 242.361634][T12160] do_syscall_64+0xf3/0x230 [ 242.366185][T12160] ? clear_bhb_loop+0x35/0x90 [ 242.370905][T12160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.376905][T12160] RIP: 0033:0x7f130df7def9 [ 242.381440][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.401051][T12160] RSP: 002b:00007f130edda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.409564][T12160] RAX: ffffffffffffffda RBX: 00007f130e135f80 RCX: 00007f130df7def9 [ 242.417555][T12160] RDX: 0000000000004000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 242.425697][T12160] RBP: 00007f130edda090 R08: 0000000000000000 R09: 0000000000000000 [ 242.433675][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.441664][T12160] R13: 0000000000000000 R14: 00007f130e135f80 R15: 00007ffdad147d88 [ 242.450015][T12160] [ 242.638481][T12168] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2627'. [ 242.838898][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.869205][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.909226][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.675241][T12214] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2642'. [ 245.752471][T12217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.777409][T12218] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.2644'. [ 245.812767][T12221] netlink: 'syz.1.2645': attribute type 3 has an invalid length. [ 245.838260][T12218] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.849556][T12221] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2645'. [ 245.935166][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2648'. [ 245.949167][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.959657][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2648'. [ 246.002643][T12232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2648'. [ 246.055147][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2649'. [ 246.227391][T12242] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 246.251360][T12245] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2654'. [ 246.308871][T12245] 0ͺXΉ¦Dφ»: renamed from gretap0 (while UP) [ 246.342133][T12245] 0ͺXΉ¦Dφ»: entered allmulticast mode [ 246.366275][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2655'. [ 246.565969][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2658'. [ 246.886446][T12269] netlink: 'syz.0.2665': attribute type 15 has an invalid length. [ 246.989231][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 247.178372][T12282] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 247.191894][T12287] vlan0: entered promiscuous mode [ 247.224533][T12291] atomic_op ffff88807599c198 conn xmit_atomic 0000000000000000 [ 247.446953][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 247.453495][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 247.460128][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 247.466799][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 247.473418][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 247.480027][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.488261][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.496171][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.504250][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.512151][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.520228][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.528070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.536072][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.544745][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.552853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.560755][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.568718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.576659][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.584660][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.592567][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.600915][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 247.608759][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 247.664275][T12293] vcan0 (unregistering): left allmulticast mode [ 247.863201][T12303] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 248.029241][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.252165][T12321] vcan0: Master is either lo or non-ether device [ 248.569585][T12339] netlink: 'syz.4.2692': attribute type 1 has an invalid length. [ 248.603219][T12338] bond0: option resend_igmp: invalid value (7540) [ 248.619580][T12338] bond0: option resend_igmp: allowed values 0 - 255 [ 249.058039][T12366] vcan0: Master is either lo or non-ether device [ 249.069467][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.482289][T12386] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 249.484296][T12388] Cannot find set identified by id 0 to match [ 249.544102][T12386] bridge0: entered allmulticast mode [ 249.593136][T12392] vcan0: Master is either lo or non-ether device [ 250.109147][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 250.879496][T12452] netlink: 'syz.1.2740': attribute type 11 has an invalid length. [ 250.944845][T12457] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 251.142992][T12464] __nla_validate_parse: 11 callbacks suppressed [ 251.143023][T12464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2742'. [ 251.149620][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.269346][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 251.467628][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.478679][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.491440][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.501983][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.510252][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 251.522267][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.620593][T12481] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2748'. [ 251.681768][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2751'. [ 251.823796][T12488] delete_channel: no stack [ 251.878704][T12488] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 252.096984][T12493] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 252.189218][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.258060][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 253.226664][ T64] team0: Port device bond0 removed [ 253.232323][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.243766][ T64] bond0 (unregistering): Released all slaves [ 253.263131][ T64] bond1 (unregistering): Released all slaves [ 253.314675][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 253.373108][T12517] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 253.461561][T12474] chnl_net:caif_netlink_parms(): no params data found [ 253.582162][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2764'. [ 253.629301][ T5238] Bluetooth: hci4: command tx timeout [ 253.728454][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2767'. [ 253.843085][T12474] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.877027][T12474] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.892464][T12474] bridge_slave_0: entered allmulticast mode [ 253.919478][T12474] bridge_slave_0: entered promiscuous mode [ 253.951823][T12474] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.975467][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.990469][T12474] bridge_slave_1: entered allmulticast mode [ 254.008336][T12474] bridge_slave_1: entered promiscuous mode [ 254.175786][T12552] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2773'. [ 254.188421][T12474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.242588][T12474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.269185][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.421083][T12474] team0: Port device team_slave_0 added [ 254.441356][T12560] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 254.470820][T12474] team0: Port device team_slave_1 added [ 254.635587][T12474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.659354][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.757663][T12474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.830334][T12585] xt_l2tp: invalid flags combination: 4 [ 254.838511][T12474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.851417][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.907751][T12474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.309176][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.334452][T12610] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2786'. [ 255.354004][T12601] batadv0: entered promiscuous mode [ 255.422770][T12474] hsr_slave_0: entered promiscuous mode [ 255.444630][T12474] hsr_slave_1: entered promiscuous mode [ 255.466379][T12474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.494559][T12474] Cannot create hsr debugfs directory [ 255.514402][ T64] tipc: Disabling bearer [ 255.528500][ T64] tipc: Left network mode [ 255.710806][ T5238] Bluetooth: hci4: command tx timeout [ 256.027287][T12644] sock: sock_set_timeout: `syz.4.2796' (pid 12644) tries to set negative timeout [ 256.115092][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.349149][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.389285][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.799164][ T5238] Bluetooth: hci4: command tx timeout [ 258.431194][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.669520][T12657] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2800'. [ 258.722392][T12668] tap0: tun_chr_ioctl cmd 2147767521 [ 258.868057][T12677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.077244][ T64] hsr_slave_0: left promiscuous mode [ 259.115328][ T64] hsr_slave_1: left promiscuous mode [ 259.134542][ T64] dummy0: left promiscuous mode [ 259.361370][T12696] xt_TCPMSS: Only works on TCP SYN packets [ 259.469257][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.695983][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'. [ 259.718268][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'. [ 259.739722][ T64] macvlan0 (unregistering): left allmulticast mode [ 259.879764][ T5238] Bluetooth: hci4: command tx timeout [ 260.516395][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.686320][T12725] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2819'. [ 260.744319][T12726] ipt_rpfilter: unknown options [ 260.805987][T12727] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 261.278527][T12725] Κό: entered promiscuous mode [ 261.319709][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2819'. [ 261.358760][T12738] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 261.416050][T12741] sock: sock_set_timeout: `syz.4.2824' (pid 12741) tries to set negative timeout [ 261.549138][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.870231][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 262.007614][T12766] netlink: 'syz.2.2831': attribute type 11 has an invalid length. [ 262.328807][T12778] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 262.589132][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.826334][T12786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2836'. [ 262.944683][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'. [ 263.194927][T12796] xt_CT: No such helper "syz1" [ 263.501384][T12474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.540533][T12474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.575695][T12474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.629241][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.654591][T12474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.790366][ T3950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.798035][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2849'. [ 263.852110][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 263.989799][T12845] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2851'. [ 264.197403][T12851] netlink: 'syz.2.2852': attribute type 10 has an invalid length. [ 264.221866][T12851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.242161][T12853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.249791][T12851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.266419][T12851] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 264.277598][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2853'. [ 264.362113][T12474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.429525][ T8208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.437717][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.489878][T12474] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.546462][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.553706][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.599189][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.606401][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.688297][T12863] tipc: Enabled bearer , priority 0 [ 264.710649][T12867] ͺͺͺͺͺͺ: renamed from syzkaller0 [ 264.750908][T12867] tipc: Disabling bearer [ 264.912502][T12885] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2860'. [ 265.087960][T12896] geneve2: entered promiscuous mode [ 265.110446][T12896] geneve2: entered allmulticast mode [ 265.495201][T12910] can: request_module (can-proto-0) failed. [ 265.503106][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2864'. [ 265.511167][T12474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.618841][T12474] veth0_vlan: entered promiscuous mode [ 265.636987][T12474] veth1_vlan: entered promiscuous mode [ 265.709295][ C0] net_ratelimit: 2 callbacks suppressed [ 265.709318][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.921651][T12474] veth0_macvtap: entered promiscuous mode [ 266.006744][T12474] veth1_macvtap: entered promiscuous mode [ 266.036143][T12938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.084686][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.130763][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.151088][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.180443][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.199934][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.221605][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.250904][T12474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.263673][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.303060][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.324438][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.347735][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.358534][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.378128][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.414993][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.442903][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.462387][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.476576][T12474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.510728][T12474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.533113][T12474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.569133][T12474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.577893][T12474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.711538][T12953] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2873'. [ 266.749319][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.870158][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.914959][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.001664][T12961] netlink: 'syz.2.2875': attribute type 64 has an invalid length. [ 267.027416][T12961] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2875'. [ 267.077586][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'. [ 267.112026][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.161789][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.221291][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 267.289131][T12983] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 267.336452][T12965] netlink: 'syz.1.2876': attribute type 4 has an invalid length. [ 267.413031][T12975] netlink: 'syz.1.2876': attribute type 4 has an invalid length. [ 267.481846][T12965] tc_dump_action: action bad kind [ 267.789307][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.053052][T13022] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20001 [ 268.282409][ T3950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.292819][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.306684][T13029] x_tables: duplicate underflow at hook 2 [ 268.354257][T13035] netlink: 'syz.1.2894': attribute type 1 has an invalid length. [ 268.409659][T13029] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 268.829368][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.987115][T13060] __nla_validate_parse: 8 callbacks suppressed [ 268.987134][T13060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2903'. [ 269.023759][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2902'. [ 269.075543][T13061] netlink: 'syz.0.2902': attribute type 3 has an invalid length. [ 269.091732][T13060] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.095683][T13061] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2902'. [ 269.101512][T13060] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.120179][T13060] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.129108][T13060] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.170283][T13060] vxlan0: entered promiscuous mode [ 269.199783][T13060] vxlan0: entered allmulticast mode [ 269.256037][T13060] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.265756][T13060] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.275112][T13060] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.285760][T13060] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.370251][T13076] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2906'. [ 269.414846][T13061] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 269.429406][T13073] batadv_slave_1: default FDB implementation only supports local addresses [ 269.449192][T13061] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 269.567955][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2905'. [ 269.689585][T13083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2908'. [ 269.733039][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2908'. [ 269.756657][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2908'. [ 269.786507][T13089] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2908'. [ 269.974154][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2911'. [ 270.595858][T13118] netlink: 'syz.3.2921': attribute type 3 has an invalid length. [ 270.787179][T13129] FAULT_INJECTION: forcing a failure. [ 270.787179][T13129] name failslab, interval 1, probability 0, space 0, times 0 [ 270.802749][T13129] CPU: 1 UID: 0 PID: 13129 Comm: syz.1.2924 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 270.813594][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 270.823660][T13129] Call Trace: [ 270.826936][T13129] [ 270.829876][T13129] dump_stack_lvl+0x241/0x360 [ 270.834559][T13129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.839750][T13129] ? __pfx__printk+0x10/0x10 [ 270.844513][T13129] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 270.850054][T13129] ? __pfx___might_resched+0x10/0x10 [ 270.855530][T13129] should_fail_ex+0x3b0/0x4e0 [ 270.860336][T13129] should_failslab+0xac/0x100 [ 270.865041][T13129] ? xfrm_policy_alloc+0x77/0x2b0 [ 270.870091][T13129] __kmalloc_cache_noprof+0x6c/0x2c0 [ 270.875394][T13129] xfrm_policy_alloc+0x77/0x2b0 [ 270.880248][T13129] xfrm_policy_construct+0x31/0x10c0 [ 270.885530][T13129] ? aa_get_newest_label+0xff/0x6f0 [ 270.890723][T13129] ? verify_newpolicy_info+0x340/0x4b0 [ 270.896178][T13129] xfrm_add_policy+0x270/0x980 [ 270.900955][T13129] ? __pfx_xfrm_add_policy+0x10/0x10 [ 270.906355][T13129] ? __nla_parse+0x40/0x60 [ 270.909250][ C0] net_ratelimit: 4 callbacks suppressed [ 270.909266][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 270.910762][T13129] xfrm_user_rcv_msg+0x75b/0xa80 [ 270.928181][T13129] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 270.933681][T13129] ? __mutex_trylock_common+0x183/0x2e0 [ 270.939221][T13129] ? __pfx___might_resched+0x10/0x10 [ 270.944513][T13129] netlink_rcv_skb+0x1e3/0x430 [ 270.949274][T13129] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 270.954728][T13129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.960034][T13129] xfrm_netlink_rcv+0x79/0x90 [ 270.964721][T13129] netlink_unicast+0x7f6/0x990 [ 270.969492][T13129] ? __pfx_netlink_unicast+0x10/0x10 [ 270.974770][T13129] ? __virt_addr_valid+0x183/0x530 [ 270.979874][T13129] ? __check_object_size+0x49c/0x900 [ 270.985153][T13129] ? bpf_lsm_netlink_send+0x9/0x10 [ 270.990263][T13129] netlink_sendmsg+0x8e4/0xcb0 [ 270.995027][T13129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.000416][T13129] ? __import_iovec+0x536/0x820 [ 271.005354][T13129] ? aa_sock_msg_perm+0x91/0x160 [ 271.010286][T13129] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.015566][T13129] ? security_socket_sendmsg+0x87/0xb0 [ 271.021296][T13129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.026576][T13129] __sock_sendmsg+0x221/0x270 [ 271.031275][T13129] ____sys_sendmsg+0x525/0x7d0 [ 271.036063][T13129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.041367][T13129] __sys_sendmsg+0x2b0/0x3a0 [ 271.045967][T13129] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.051244][T13129] ? vfs_write+0x7c4/0xc90 [ 271.055682][T13129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.062007][T13129] ? do_syscall_64+0x100/0x230 [ 271.066764][T13129] ? do_syscall_64+0xb6/0x230 [ 271.071438][T13129] do_syscall_64+0xf3/0x230 [ 271.075965][T13129] ? clear_bhb_loop+0x35/0x90 [ 271.080746][T13129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.086643][T13129] RIP: 0033:0x7feacf77def9 [ 271.091058][T13129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.110931][T13129] RSP: 002b:00007fead0617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.119366][T13129] RAX: ffffffffffffffda RBX: 00007feacf935f80 RCX: 00007feacf77def9 [ 271.127367][T13129] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 271.135354][T13129] RBP: 00007fead0617090 R08: 0000000000000000 R09: 0000000000000000 [ 271.143399][T13129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.151650][T13129] R13: 0000000000000000 R14: 00007feacf935f80 R15: 00007ffd6ed0d608 [ 271.159940][T13129] [ 271.477087][ T3950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.495973][T13121] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 271.507902][T13118] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 271.538085][T13118] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 271.984503][T13158] Bluetooth: hci3: unsupported parameter 65535 [ 272.007622][T13158] Bluetooth: hci3: unsupported parameter 65535 [ 272.144811][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 272.182508][T13164] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 272.422570][T13175] netlink: 'syz.1.2943': attribute type 1 has an invalid length. [ 272.864374][T13195] netlink: 'syz.4.2952': attribute type 1 has an invalid length. [ 272.964223][T13197] syz.1.2951: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 272.997864][T13197] CPU: 1 UID: 0 PID: 13197 Comm: syz.1.2951 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 273.008698][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 273.018783][T13197] Call Trace: [ 273.022083][T13197] [ 273.025032][T13197] dump_stack_lvl+0x241/0x360 [ 273.029740][T13197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.034999][T13197] ? __pfx__printk+0x10/0x10 [ 273.039624][T13197] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 273.046070][T13197] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 273.052614][T13197] warn_alloc+0x278/0x410 [ 273.056994][T13197] ? __pfx_warn_alloc+0x10/0x10 [ 273.062088][T13197] ? xskq_create+0xb6/0x170 [ 273.066632][T13197] ? __get_vm_area_node+0x23d/0x270 [ 273.071877][T13197] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 273.077948][T13197] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.084324][T13197] ? __kasan_kmalloc+0x98/0xb0 [ 273.089122][T13197] ? xskq_create+0x54/0x170 [ 273.093664][T13197] vmalloc_user_noprof+0x74/0x80 [ 273.098719][T13197] ? xskq_create+0xb6/0x170 [ 273.103245][T13197] xskq_create+0xb6/0x170 [ 273.107697][T13197] xsk_init_queue+0xa1/0x100 [ 273.112417][T13197] xsk_setsockopt+0x4ea/0x950 [ 273.117491][T13197] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.122829][T13197] ? __pfx_lock_acquire+0x10/0x10 [ 273.127955][T13197] ? aa_sock_opt_perm+0x79/0x120 [ 273.132953][T13197] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 273.138801][T13197] ? security_socket_setsockopt+0x87/0xb0 [ 273.144659][T13197] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.149314][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 273.150524][T13197] do_sock_setsockopt+0x3af/0x720 [ 273.150565][T13197] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 273.168559][T13197] ? __fget_files+0x29/0x470 [ 273.173197][T13197] ? __fget_files+0x3f6/0x470 [ 273.177922][T13197] __sys_setsockopt+0x1ae/0x250 [ 273.182813][T13197] __x64_sys_setsockopt+0xb5/0xd0 [ 273.187871][T13197] do_syscall_64+0xf3/0x230 [ 273.192402][T13197] ? clear_bhb_loop+0x35/0x90 [ 273.197150][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.203107][T13197] RIP: 0033:0x7feacf77def9 [ 273.207637][T13197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.227271][T13197] RSP: 002b:00007fead05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 273.235907][T13197] RAX: ffffffffffffffda RBX: 00007feacf936058 RCX: 00007feacf77def9 [ 273.243995][T13197] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000004 [ 273.252166][T13197] RBP: 00007feacf7f0b76 R08: 000000000000002c R09: 0000000000000000 [ 273.260256][T13197] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 273.268245][T13197] R13: 0000000000000000 R14: 00007feacf936058 R15: 00007ffd6ed0d608 [ 273.276346][T13197] [ 273.309366][T13197] Mem-Info: [ 273.312764][T13197] active_anon:4639 inactive_anon:0 isolated_anon:0 [ 273.312764][T13197] active_file:1788 inactive_file:38272 isolated_file:0 [ 273.312764][T13197] unevictable:768 dirty:172 writeback:0 [ 273.312764][T13197] slab_reclaimable:9062 slab_unreclaimable:100449 [ 273.312764][T13197] mapped:22334 shmem:1225 pagetables:776 [ 273.312764][T13197] sec_pagetables:0 bounce:0 [ 273.312764][T13197] kernel_misc_reclaimable:0 [ 273.312764][T13197] free:1353187 free_pcp:838 free_cma:0 [ 273.419327][T13197] Node 0 active_anon:18544kB inactive_anon:0kB active_file:7152kB inactive_file:153024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:93528kB dirty:688kB writeback:0kB shmem:3364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11108kB pagetables:2988kB sec_pagetables:0kB all_unreclaimable? no [ 273.519388][T13197] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 273.618920][T13214] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 273.625551][T13197] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.719230][T13197] lowmem_reserve[]: 0 2467 2468 0 0 [ 273.729092][T13197] Node 0 DMA32 free:1435768kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:18404kB inactive_anon:0kB active_file:7152kB inactive_file:152208kB unevictable:1536kB writepending:688kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:16332kB local_pcp:2132kB free_cma:0kB [ 273.798399][T13197] lowmem_reserve[]: 0 0 0 0 0 [ 273.820389][T13197] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 273.879954][T13197] lowmem_reserve[]: 0 0 0 0 0 [ 273.885172][T13197] Node 1 Normal free:3947080kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.932690][T13197] lowmem_reserve[]: 0 0 0 0 0 [ 273.934884][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.937752][T13197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.959176][T13197] Node 0 DMA32: 334*4kB (UE) 70*8kB (UME) 79*16kB (UME) 140*32kB (UME) 83*64kB (UME) 63*128kB (UME) 26*256kB (UME) 8*512kB (UME) 12*1024kB (U) 3*2048kB (UE) 343*4096kB (M) = 1455128kB [ 273.982302][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.009853][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.022363][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.025649][T13197] Node 0 [ 274.030916][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.043090][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.052100][T13197] Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 274.064480][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.072023][T13197] Node 1 Normal: 2*4kB (UM) [ 274.072338][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.086068][T13197] 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 6*64kB (U) 3*128kB (U) 2*256kB (UM) 2*512kB (UM) 4*1024kB (U) 4*2048kB (U) 960*4096kB (M) = 3947080kB [ 274.110024][T13197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.125092][T13197] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.135645][T13197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.145878][T13197] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.155573][T13197] 41287 total pagecache pages [ 274.160527][T13197] 0 pages in swap cache [ 274.164793][T13197] Free swap = 124996kB [ 274.168943][T13197] Total swap = 124996kB [ 274.173185][T13197] 2097051 pages RAM [ 274.177027][T13197] 0 pages HighMem/MovableOnly [ 274.181943][T13197] 426967 pages reserved [ 274.186111][T13197] 0 pages cma reserved [ 274.190363][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 274.315818][T13234] __nla_validate_parse: 11 callbacks suppressed [ 274.315839][T13234] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2963'. [ 274.742996][ T8208] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.781073][T13251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.788392][T13251] IPv6: NLM_F_CREATE should be set when creating new route [ 274.795840][T13251] IPv6: NLM_F_CREATE should be set when creating new route [ 274.807480][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2970'. [ 274.871299][ T8208] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.928531][T13253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2968'. [ 275.015674][ T8208] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.083457][T13255] syzkaller1: entered promiscuous mode [ 275.099480][T13255] syzkaller1: entered allmulticast mode [ 275.229201][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 275.261337][ T8208] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.294180][T13273] bridge0: port 2(bridge_slave_1) entered listening state [ 275.324814][T13273] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.874033][T13226] chnl_net:caif_netlink_parms(): no params data found [ 275.929846][ T8208] dummy0: left allmulticast mode [ 275.939543][ T8208] dummy0: left promiscuous mode [ 275.954428][ T8208] bridge0: port 3(dummy0) entered disabled state [ 275.980210][ T8208] bridge_slave_1: left allmulticast mode [ 275.998527][ T8208] bridge_slave_1: left promiscuous mode [ 276.016192][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.094548][ T8208] bridge_slave_0: left allmulticast mode [ 276.107007][ T8208] bridge_slave_0: left promiscuous mode [ 276.120161][ T5231] Bluetooth: hci2: command tx timeout [ 276.135063][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.237882][T13302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2979'. [ 276.260067][T13303] tls_set_device_offload: netdev not found [ 276.269166][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 276.710905][T13320] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2983'. [ 277.244712][ T8208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.256684][ T8208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.277182][ T8208] bond0 (unregistering): Released all slaves [ 277.292120][ T8208] bond1 (unregistering): Released all slaves [ 277.309149][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.530101][T13335] netlink: 'syz.1.2986': attribute type 2 has an invalid length. [ 277.576562][ T8208] tipc: Left network mode [ 277.609398][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 277.682879][T13341] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2989'. [ 277.735090][T13339] netlink: 'syz.2.2988': attribute type 11 has an invalid length. [ 278.012949][T13226] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.033906][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.053262][T13226] bridge_slave_0: entered allmulticast mode [ 278.070536][T13226] bridge_slave_0: entered promiscuous mode [ 278.184349][T13226] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.192822][ T5231] Bluetooth: hci2: command tx timeout [ 278.213830][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.221572][T13226] bridge_slave_1: entered allmulticast mode [ 278.230033][T13226] bridge_slave_1: entered promiscuous mode [ 278.349141][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.525962][T13226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.736155][ T8208] hsr_slave_0: left promiscuous mode [ 278.769414][ T8208] hsr_slave_1: left promiscuous mode [ 278.777241][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.793618][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.809493][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.831882][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.879510][ T8208] veth1_vlan: left promiscuous mode [ 278.892206][ T8208] veth0_vlan: left promiscuous mode [ 279.394685][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.683447][ T8208] team0 (unregistering): Port device team_slave_1 removed [ 279.715177][T13418] netlink: 'syz.0.3005': attribute type 1 has an invalid length. [ 279.726245][T13418] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3005'. [ 279.748787][ T8208] team0 (unregistering): Port device team_slave_0 removed [ 280.216937][ T8208] lo (unregistering): left allmulticast mode [ 280.231853][T13226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.254846][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 280.269590][ T5231] Bluetooth: hci2: command tx timeout [ 280.271391][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 280.429916][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.753953][T13226] team0: Port device team_slave_0 added [ 280.788892][T13226] team0: Port device team_slave_1 added [ 280.795913][T13446] netlink: 'syz.1.3013': attribute type 1 has an invalid length. [ 280.857251][T13446] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3013'. [ 280.951161][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 280.984393][T13453] netlink: 'syz.2.3014': attribute type 3 has an invalid length. [ 281.009372][T13453] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3014'. [ 281.035930][T13460] xt_connbytes: Forcing CT accounting to be enabled [ 281.189638][T13226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.203626][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.249591][T13226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.263561][T13226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.282582][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.314811][T13226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.431768][T13470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3020'. [ 281.469140][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 281.547132][T13476] netlink: 'syz.3.3022': attribute type 4 has an invalid length. [ 281.702950][T13226] hsr_slave_0: entered promiscuous mode [ 281.743902][T13226] hsr_slave_1: entered promiscuous mode [ 281.761736][T13226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.779472][T13226] Cannot create hsr debugfs directory [ 281.941588][ T8208] IPVS: stop unused estimator thread 0... [ 282.185323][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 282.211495][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 282.344246][T13513] sit0: entered promiscuous mode [ 282.352886][ T5231] Bluetooth: hci2: command tx timeout [ 282.389410][T13513] netlink: 'syz.1.3030': attribute type 1 has an invalid length. [ 282.415561][T13513] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3030'. [ 282.447603][T13518] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 282.509134][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 282.854617][T13533] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 283.549146][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.842476][T13226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.885878][T13226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.975080][T13226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.996023][T13226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.024246][T13596] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 284.426152][T13226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.501127][T13226] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.571293][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.578583][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.589149][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 284.701434][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.708709][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.904389][T13226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.936743][T13226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.126799][T13654] __nla_validate_parse: 1 callbacks suppressed [ 285.126820][T13654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3064'. [ 285.597100][T13226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.629249][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 285.743202][T13688] x_tables: duplicate underflow at hook 3 [ 285.773396][T13693] netlink: 'syz.3.3071': attribute type 1 has an invalid length. [ 285.813872][T13693] netlink: 'syz.3.3071': attribute type 2 has an invalid length. [ 285.841632][T13693] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3071'. [ 286.127732][T13712] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 286.386029][T13719] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 286.515570][T13726] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 286.583712][T13725] netlink: 'syz.2.3078': attribute type 64 has an invalid length. [ 286.669136][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.688208][T13226] veth0_vlan: entered promiscuous mode [ 286.759283][T13226] veth1_vlan: entered promiscuous mode [ 286.883987][T13226] veth0_macvtap: entered promiscuous mode [ 286.940192][T13756] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.947412][T13756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.993834][T13226] veth1_macvtap: entered promiscuous mode [ 287.709371][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 288.749185][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 289.789212][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 290.829164][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 291.869171][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.909156][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.231223][ T8206] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.949216][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 294.989202][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 296.029269][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.070736][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 298.109156][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.149117][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.189241][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 301.229130][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.269148][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 303.309138][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 304.349152][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 305.390463][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 305.495406][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.535798][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.593947][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.617251][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.637707][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.663831][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.714175][T13226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.753852][T13772] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3088'. [ 305.790507][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.849134][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.899117][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.979053][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.039044][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.089187][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.141373][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.199017][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.260847][T13226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.362060][T13226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.429161][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 306.449289][T13226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.458139][T13226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.559104][T13226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.683565][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.694354][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.703691][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.714015][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.741195][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 306.748686][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.858568][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.877340][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.886237][ T4624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.924295][ T4624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.944640][ T4624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 306.952274][ T4624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.159509][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.172073][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.188342][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.199627][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.220743][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.229927][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.231611][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.251451][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 307.258886][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.258935][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.280601][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.288362][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.364302][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.381869][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.469290][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 307.512142][ T8206] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.537175][ T8206] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.708785][ T8206] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.720475][ T8206] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.761237][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.775804][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.909670][ T8206] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.929535][ T8206] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.098438][ T8206] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.139331][ T8206] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.452085][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'. [ 308.509847][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 308.873062][T13835] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3096'. [ 308.887242][T13836] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3096'. [ 308.909321][ T4624] Bluetooth: hci6: command tx timeout [ 308.989991][ T4624] Bluetooth: hci3: command tx timeout [ 309.389623][ T4624] Bluetooth: hci4: command tx timeout [ 309.395886][ T4624] Bluetooth: hci1: command tx timeout [ 309.554551][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 309.648563][ T8206] team0: Port device bond0 removed [ 309.675588][ T8206] bond0 (unregistering): Released all slaves [ 309.694080][ T8206] bond1 (unregistering): Released all slaves [ 309.755142][T13783] chnl_net:caif_netlink_parms(): no params data found [ 310.017366][T13791] chnl_net:caif_netlink_parms(): no params data found [ 310.040876][T13789] chnl_net:caif_netlink_parms(): no params data found [ 310.148290][T13785] chnl_net:caif_netlink_parms(): no params data found [ 310.350399][T13871] nbd: socks must be embedded in a SOCK_ITEM attr [ 310.388070][T13872] netlink: 134716 bytes leftover after parsing attributes in process `syz.4.3101'. [ 310.406638][T13872] openvswitch: netlink: Message has 5 unknown bytes. [ 310.455094][T13783] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.470680][T13783] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.478369][T13783] bridge_slave_0: entered allmulticast mode [ 310.527694][T13783] bridge_slave_0: entered promiscuous mode [ 310.589135][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 310.644934][T13783] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.654141][T13783] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.662781][T13783] bridge_slave_1: entered allmulticast mode [ 310.670700][T13783] bridge_slave_1: entered promiscuous mode [ 310.897974][T13783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.918398][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.925874][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.934141][T13789] bridge_slave_0: entered allmulticast mode [ 310.943556][T13789] bridge_slave_0: entered promiscuous mode [ 310.996236][T13783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.005575][ T4624] Bluetooth: hci6: command tx timeout [ 311.053936][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.062246][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.069759][ T4624] Bluetooth: hci3: command tx timeout [ 311.076362][T13789] bridge_slave_1: entered allmulticast mode [ 311.083738][T13789] bridge_slave_1: entered promiscuous mode [ 311.096451][ T8206] hsr_slave_0: left promiscuous mode [ 311.103658][ T8206] hsr_slave_1: left promiscuous mode [ 311.123505][ T8206] veth1_macvtap: left promiscuous mode [ 311.130021][ T8206] veth0_macvtap: left promiscuous mode [ 311.135877][ T8206] veth1_vlan: left promiscuous mode [ 311.141646][ T8206] veth0_vlan: left promiscuous mode [ 311.474336][ T4624] Bluetooth: hci1: command tx timeout [ 311.479882][ T4624] Bluetooth: hci4: command tx timeout [ 311.629202][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 312.346858][T13791] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.354773][T13791] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.362354][T13791] bridge_slave_0: entered allmulticast mode [ 312.370276][T13791] bridge_slave_0: entered promiscuous mode [ 312.379292][T13791] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.386727][T13791] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.395804][T13791] bridge_slave_1: entered allmulticast mode [ 312.403577][T13791] bridge_slave_1: entered promiscuous mode [ 312.462693][T13783] team0: Port device team_slave_0 added [ 312.470113][T13785] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.477381][T13785] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.485230][T13785] bridge_slave_0: entered allmulticast mode [ 312.493682][T13785] bridge_slave_0: entered promiscuous mode [ 312.565383][T13791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.581947][T13783] team0: Port device team_slave_1 added [ 312.649597][T13785] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.656896][T13785] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.674122][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 312.679450][T13785] bridge_slave_1: entered allmulticast mode [ 312.688565][T13785] bridge_slave_1: entered promiscuous mode [ 312.717742][T13894] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3103'. [ 312.773494][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.801212][T13791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.832949][T13783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.840199][T13783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.866979][T13783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.902769][T13898] netlink: 'syz.4.3104': attribute type 3 has an invalid length. [ 312.914286][T13898] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3104'. [ 312.938700][T13785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.955466][T13785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.968356][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.021155][T13783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.028191][T13783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.055442][T13783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.070122][ T5231] Bluetooth: hci6: command tx timeout [ 313.150323][ T5231] Bluetooth: hci3: command tx timeout [ 313.271663][T13791] team0: Port device team_slave_0 added [ 313.317835][T13785] team0: Port device team_slave_0 added [ 313.324742][T13902] netlink: 'syz.4.3106': attribute type 10 has an invalid length. [ 313.356381][T13902] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 313.370094][T13789] team0: Port device team_slave_0 added [ 313.378404][T13791] team0: Port device team_slave_1 added [ 313.400245][T13783] hsr_slave_0: entered promiscuous mode [ 313.430238][T13783] hsr_slave_1: entered promiscuous mode [ 313.459187][T13783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.466802][T13783] Cannot create hsr debugfs directory [ 313.528076][T13785] team0: Port device team_slave_1 added [ 313.550060][ T5231] Bluetooth: hci4: command tx timeout [ 313.555550][ T5231] Bluetooth: hci1: command tx timeout [ 313.613565][T13789] team0: Port device team_slave_1 added [ 313.709250][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 313.852026][ T5283] IPVS: starting estimator thread 0... [ 313.911945][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.924340][T13923] dccp_invalid_packet: P.Data Offset(100) too large [ 313.930186][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.961452][T13920] IPVS: using max 22 ests per chain, 52800 per kthread [ 313.986157][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.041186][T13918] tipc: Started in network mode [ 314.049131][T13918] tipc: Node identity ac1414aa, cluster identity 4711 [ 314.056727][T13918] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.064341][T13918] tipc: Enabled bearer , priority 10 [ 314.073024][T13785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.080888][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.147661][T13785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.189665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.191333][T13785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.210231][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.246130][T13785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.262733][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.270407][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.299566][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3109'. [ 314.309841][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.329244][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.392038][T13791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.419140][T13791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.451344][T13791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.469198][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.513617][T13940] netlink: 'syz.4.3110': attribute type 9 has an invalid length. [ 314.521886][T13791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.528626][T13940] netlink: 'syz.4.3110': attribute type 6 has an invalid length. [ 314.537874][T13791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.564984][T13791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.609308][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.677058][T13789] hsr_slave_0: entered promiscuous mode [ 314.683972][T13789] hsr_slave_1: entered promiscuous mode [ 314.691879][T13789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.699851][T13789] Cannot create hsr debugfs directory [ 314.749196][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 314.759184][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.808826][T13791] hsr_slave_0: entered promiscuous mode [ 314.816125][T13791] hsr_slave_1: entered promiscuous mode [ 314.823508][T13791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.831481][T13791] Cannot create hsr debugfs directory [ 314.846468][T13785] hsr_slave_0: entered promiscuous mode [ 314.854541][T13785] hsr_slave_1: entered promiscuous mode [ 314.861431][T13785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.869186][T13785] Cannot create hsr debugfs directory [ 315.047958][T13944] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3111'. [ 315.073349][ T8206] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.149636][ T5231] Bluetooth: hci6: command tx timeout [ 315.179589][ T5283] tipc: Node number set to 2886997162 [ 315.229449][ T5231] Bluetooth: hci3: command tx timeout [ 315.300433][ T8206] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.442393][T13783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.555480][ T8206] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.588280][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3113'. [ 315.635915][ T5231] Bluetooth: hci1: command tx timeout [ 315.641601][ T4624] Bluetooth: hci4: command tx timeout [ 315.667085][T13783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.702952][T13958] bond0: (slave netdevsim0): Releasing backup interface [ 315.860372][ T8206] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.877382][T13968] netlink: 211388 bytes leftover after parsing attributes in process `syz.4.3114'. [ 315.941988][T13783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.981197][T13967] netlink: 'syz.4.3114': attribute type 2 has an invalid length. [ 316.102494][T13783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.352200][ T8206] bridge_slave_1: left allmulticast mode [ 316.357904][ T8206] bridge_slave_1: left promiscuous mode [ 316.374099][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.406262][ T8206] bridge_slave_0: left allmulticast mode [ 316.416132][ T8206] bridge_slave_0: left promiscuous mode [ 316.439530][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.472646][ T8206] bridge_slave_1: left allmulticast mode [ 316.478350][ T8206] bridge_slave_1: left promiscuous mode [ 316.501506][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.522679][ T8206] bridge_slave_0: left allmulticast mode [ 316.528388][ T8206] bridge_slave_0: left promiscuous mode [ 316.534609][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.555387][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.697758][ T8206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.708325][ T8206] bond0 (unregistering): Released all slaves [ 317.726713][ T8206] bond1 (unregistering): Released all slaves [ 317.741393][ T8206] bond2 (unregistering): Released all slaves [ 317.869667][ C0] net_ratelimit: 8 callbacks suppressed [ 317.869692][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 317.914368][ T8206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.926693][ T8206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.937724][ T8206] bond0 (unregistering): Released all slaves [ 318.123857][ T8206] Κό: left promiscuous mode [ 318.189256][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 318.253314][T13998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3118'. [ 318.323207][T13789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.355468][T13783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.367054][ T8206] tipc: Disabling bearer [ 318.380187][T13783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.387335][ T8206] tipc: Left network mode [ 318.423620][T13783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.545746][T13789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.569693][T13783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.682283][T13789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.831942][T13789] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.185095][T13783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.239249][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 319.421371][T13783] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.529721][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.537097][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.607579][ T8206] hsr_slave_0: left promiscuous mode [ 319.618257][ T8206] hsr_slave_1: left promiscuous mode [ 319.633135][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.641530][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.660459][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.668033][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.733481][ T8206] hsr_slave_0: left promiscuous mode [ 319.750305][ T8206] hsr_slave_1: left promiscuous mode [ 319.786749][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.808789][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.820721][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.838635][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.875917][ T8206] veth0_macvtap: left promiscuous mode [ 319.884691][ T8206] veth1_macvtap: left promiscuous mode [ 319.890840][ T8206] veth0_macvtap: left promiscuous mode [ 319.897128][ T8206] veth1_vlan: left promiscuous mode [ 319.903228][ T8206] veth0_vlan: left promiscuous mode [ 320.279213][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 320.522823][ T8206] team0 (unregistering): Port device team_slave_1 removed [ 320.582600][ T8206] team0 (unregistering): Port device team_slave_0 removed [ 321.309404][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 321.587756][ T8206] team0 (unregistering): Port device team_slave_1 removed [ 321.634338][ T8206] team0 (unregistering): Port device team_slave_0 removed [ 322.175902][T13789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.197811][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.205179][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.224505][T14037] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.233918][T14037] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.245985][T14037] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.255204][T14037] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.264672][T14037] geneve2: entered promiscuous mode [ 322.276337][T14037] geneve2: entered allmulticast mode [ 322.285029][T14037] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.295133][T14037] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.305021][T14037] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.316219][T14037] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.349480][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 322.380486][T13789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.399645][T13789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.509896][T13789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.982482][T14050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3131'. [ 322.983817][T13789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.146115][T13789] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.243708][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.250940][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.291098][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.298464][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.366465][T14059] sctp: [Deprecated]: syz.4.3132 (pid 14059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.366465][T14059] Use struct sctp_sack_info instead [ 323.389173][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 323.397098][T13783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.621449][T13791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.656747][T13791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.713637][T13791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.737753][T13791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.102287][ T8206] IPVS: stop unused estimator thread 0... [ 324.301433][T13783] veth0_vlan: entered promiscuous mode [ 324.414515][T13783] veth1_vlan: entered promiscuous mode [ 324.429435][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 324.569545][T14078] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3135'. [ 324.684745][T13783] veth0_macvtap: entered promiscuous mode [ 324.716880][T13785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.731741][T13785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.770396][T13783] veth1_macvtap: entered promiscuous mode [ 324.793708][T13789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.816421][T13791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.832084][T13785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.850059][T13785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.905221][T13791] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.001877][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.009093][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.018707][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.025928][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.037992][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.050863][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.062994][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.074255][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.087261][T13783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.098773][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.111583][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.126271][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.137301][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.150084][T13783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.161042][T13783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.172426][T13783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.216827][T13783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.230885][T13783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.239848][T13783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.264182][T13783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.337418][T13789] veth0_vlan: entered promiscuous mode [ 325.432377][T13789] veth1_vlan: entered promiscuous mode [ 325.479271][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.644794][T13789] veth0_macvtap: entered promiscuous mode [ 325.701906][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.727585][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.748333][T13789] veth1_macvtap: entered promiscuous mode [ 325.801234][T13785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.913139][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.952811][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.966060][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.980683][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.003530][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.016516][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.026625][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.039465][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.051396][T13789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.091846][T13785] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.114615][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.126118][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.150580][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.166266][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.178009][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.202789][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.217117][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.230468][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.242695][T13789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.300952][T13789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.310760][T13789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.349442][T13789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.364727][T13789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.392089][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.399339][ T8206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.413127][T13791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.432198][T14122] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3142'. [ 326.509346][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.521743][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.528935][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.915402][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'. [ 326.934169][T14137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3145'. [ 326.969798][ T8208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.977756][ T8208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.040326][T14143] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 327.145121][T13791] veth0_vlan: entered promiscuous mode [ 327.163547][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.209696][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.238260][T13791] veth1_vlan: entered promiscuous mode [ 327.417145][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 327.427312][T13791] veth0_macvtap: entered promiscuous mode [ 327.465726][T13791] veth1_macvtap: entered promiscuous mode [ 327.471749][T14158] FAULT_INJECTION: forcing a failure. [ 327.471749][T14158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.521192][T14158] CPU: 0 UID: 0 PID: 14158 Comm: syz.2.3091 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 327.524814][T14154] netlink: 'syz.0.3149': attribute type 1 has an invalid length. [ 327.532000][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.532037][T14158] Call Trace: [ 327.532048][T14158] [ 327.532057][T14158] dump_stack_lvl+0x241/0x360 [ 327.532087][T14158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.532104][T14158] ? __pfx__printk+0x10/0x10 [ 327.532126][T14158] ? __pfx_lock_release+0x10/0x10 [ 327.532157][T14158] should_fail_ex+0x3b0/0x4e0 [ 327.532189][T14158] _copy_from_user+0x2f/0xe0 [ 327.532213][T14158] copy_msghdr_from_user+0xae/0x680 [ 327.532241][T14158] ? _parse_integer_limit+0x1b5/0x200 [ 327.532269][T14158] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 327.532306][T14158] __sys_sendmmsg+0x374/0x740 [ 327.532337][T14158] ? __pfx___sys_sendmmsg+0x10/0x10 [ 327.532397][T14158] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 327.532424][T14158] ? ksys_write+0x23e/0x2c0 [ 327.532446][T14158] ? __pfx_lock_release+0x10/0x10 [ 327.532482][T14158] ? vfs_write+0x7c4/0xc90 [ 327.532507][T14158] ? __mutex_unlock_slowpath+0x21d/0x750 [ 327.532534][T14158] ? __pfx_vfs_write+0x10/0x10 [ 327.532574][T14158] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.532599][T14158] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.532624][T14158] ? do_syscall_64+0x100/0x230 [ 327.532648][T14158] __x64_sys_sendmmsg+0xa0/0xb0 [ 327.532674][T14158] do_syscall_64+0xf3/0x230 [ 327.532694][T14158] ? clear_bhb_loop+0x35/0x90 [ 327.532721][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.532749][T14158] RIP: 0033:0x7fbcf817def9 [ 327.532769][T14158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.532785][T14158] RSP: 002b:00007fbcf8ed8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.532809][T14158] RAX: ffffffffffffffda RBX: 00007fbcf8335f80 RCX: 00007fbcf817def9 [ 327.532824][T14158] RDX: 0000000000000002 RSI: 0000000020001500 RDI: 0000000000000005 [ 327.532837][T14158] RBP: 00007fbcf8ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 327.532849][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.579327][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 327.580996][T14158] R13: 0000000000000000 R14: 00007fbcf8335f80 R15: 00007ffd825c8588 [ 327.759429][T14158] [ 327.849824][T14154] netlink: 'syz.0.3149': attribute type 2 has an invalid length. [ 327.967944][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.049087][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.069144][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.099183][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.119418][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.147859][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.163920][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.176756][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.205943][T13791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.296508][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.309674][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.322709][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.333831][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.347968][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.363881][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.374858][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.385948][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.403113][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.414416][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.434215][T14187] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 328.434631][T13791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.487812][T14184] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3154'. [ 328.525416][T14191] x_tables: duplicate underflow at hook 4 [ 328.527036][T13791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.554394][T13791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.578298][T13791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.589126][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 328.599218][T13791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.647048][T13785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.865480][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 328.906115][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 328.922613][T13785] veth0_vlan: entered promiscuous mode [ 328.970331][T13785] veth1_vlan: entered promiscuous mode [ 329.080003][ T8206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.088251][ T8206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.129573][T14212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3162'. [ 329.167959][T14212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3162'. [ 329.187209][T13785] veth0_macvtap: entered promiscuous mode [ 329.219160][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.223791][T13785] veth1_macvtap: entered promiscuous mode [ 329.234696][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.343476][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.399548][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.420197][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.431512][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.456177][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.482760][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.500489][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.514338][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.552783][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.594253][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.608465][T13785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.629321][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 329.751536][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.782238][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.810287][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.841781][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.867370][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.894675][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.929974][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.951982][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.966593][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.991825][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.023766][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.047108][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.073301][T13785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.094364][T14237] netlink: 'syz.4.3167': attribute type 1 has an invalid length. [ 330.105647][T14237] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 330.114676][T14238] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 330.177804][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3167'. [ 330.360106][T13785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.395604][T13785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.408836][T13785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.424697][T13785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.669464][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 330.905193][ T8208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.942777][ T8208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.997094][T14293] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 331.091153][T14291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3175'. [ 331.112667][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.131541][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.429799][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3179'. [ 331.480662][T14311] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 331.553103][T14309] batman_adv: batadv1: Adding interface: netdevsim0 [ 331.600453][T14309] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.651574][T14309] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 331.709205][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.723458][T14326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3184'. [ 331.949747][ T5231] Bluetooth: hci4: command tx timeout [ 332.193338][T14349] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3190'. [ 332.223868][T14349] netem: invalid attributes len -24 [ 332.253661][T14349] netem: change failed [ 332.321207][T14362] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3191'. [ 332.376503][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3191'. [ 332.421002][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3194'. [ 332.470298][T14366] netlink: 'syz.0.3195': attribute type 29 has an invalid length. [ 332.550400][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3191'. [ 332.651542][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'. [ 332.749186][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 332.860168][T14388] FAULT_INJECTION: forcing a failure. [ 332.860168][T14388] name failslab, interval 1, probability 0, space 0, times 0 [ 332.921757][T14388] CPU: 0 UID: 0 PID: 14388 Comm: syz.4.3199 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 332.932583][T14388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 332.942781][T14388] Call Trace: [ 332.946176][T14388] [ 332.949218][T14388] dump_stack_lvl+0x241/0x360 [ 332.954645][T14388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.960059][T14388] ? __pfx__printk+0x10/0x10 [ 332.964860][T14388] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 332.971069][T14388] ? __pfx___might_resched+0x10/0x10 [ 332.976586][T14388] should_fail_ex+0x3b0/0x4e0 [ 332.981314][T14388] should_failslab+0xac/0x100 [ 332.986347][T14388] ? __alloc_skb+0x1c3/0x440 [ 332.991860][T14388] kmem_cache_alloc_node_noprof+0x71/0x320 [ 332.997908][T14388] __alloc_skb+0x1c3/0x440 [ 333.002404][T14388] ? __local_bh_enable_ip+0x168/0x200 [ 333.007813][T14388] ? __pfx___alloc_skb+0x10/0x10 [ 333.012868][T14388] kcm_sendmsg+0x24ea/0x29a0 [ 333.017568][T14388] ? __pfx___might_resched+0x10/0x10 [ 333.022955][T14388] ? aa_sk_perm+0x96d/0xab0 [ 333.027488][T14388] ? __pfx_kcm_sendmsg+0x10/0x10 [ 333.032444][T14388] ? aa_sock_msg_perm+0x91/0x160 [ 333.037421][T14388] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 333.042723][T14388] ? security_socket_sendmsg+0x87/0xb0 [ 333.048207][T14388] ? __pfx_kcm_sendmsg+0x10/0x10 [ 333.053247][T14388] __sock_sendmsg+0x221/0x270 [ 333.057979][T14388] ____sys_sendmsg+0x525/0x7d0 [ 333.062764][T14388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.068065][T14388] __sys_sendmmsg+0x3b2/0x740 [ 333.072748][T14388] ? __pfx___sys_sendmmsg+0x10/0x10 [ 333.077981][T14388] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 333.084377][T14388] ? ksys_write+0x23e/0x2c0 [ 333.088976][T14388] ? __pfx_lock_release+0x10/0x10 [ 333.094092][T14388] ? vfs_write+0x7c4/0xc90 [ 333.098504][T14388] ? __mutex_unlock_slowpath+0x21d/0x750 [ 333.104129][T14388] ? __pfx_vfs_write+0x10/0x10 [ 333.108903][T14388] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.114979][T14388] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.121308][T14388] ? do_syscall_64+0x100/0x230 [ 333.126066][T14388] __x64_sys_sendmmsg+0xa0/0xb0 [ 333.130945][T14388] do_syscall_64+0xf3/0x230 [ 333.135469][T14388] ? clear_bhb_loop+0x35/0x90 [ 333.140144][T14388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.146038][T14388] RIP: 0033:0x7f7a63d7def9 [ 333.150461][T14388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.170075][T14388] RSP: 002b:00007f7a64c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.178755][T14388] RAX: ffffffffffffffda RBX: 00007f7a63f36058 RCX: 00007f7a63d7def9 [ 333.186933][T14388] RDX: 0000000000000002 RSI: 0000000020001500 RDI: 0000000000000005 [ 333.195084][T14388] RBP: 00007f7a64c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 333.203052][T14388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.211123][T14388] R13: 0000000000000000 R14: 00007f7a63f36058 R15: 00007ffde3d50828 [ 333.219118][T14388] [ 333.422895][ T6158] IPVS: starting estimator thread 0... [ 333.521391][T14411] IPVS: using max 24 ests per chain, 57600 per kthread [ 333.796471][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 333.965483][T14433] netlink: 'syz.0.3211': attribute type 4 has an invalid length. [ 334.110148][T14441] netlink: 'syz.2.3214': attribute type 3 has an invalid length. [ 334.134254][T14441] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 334.166267][T14441] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 334.334069][T14458] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 334.354203][T14459] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 334.762485][T14477] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 334.830007][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 335.186427][T14499] __nla_validate_parse: 6 callbacks suppressed [ 335.186447][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3227'. [ 335.204663][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 335.247020][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 335.869168][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.031559][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3234'. [ 336.080829][T14532] netlink: 'syz.1.3234': attribute type 3 has an invalid length. [ 336.149194][T14532] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3234'. [ 336.284024][T14532] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 336.306277][T14532] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 336.371904][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 336.909141][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 337.020583][T14581] veth0_to_bond: mtu greater than device maximum [ 337.062956][T14581] veth0_to_bond: mtu greater than device maximum [ 337.278195][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3251'. [ 337.743107][T14624] netlink: 'syz.2.3259': attribute type 6 has an invalid length. [ 337.949164][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 338.147483][T14651] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 338.383014][T14662] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3270'. [ 338.575834][T14668] netlink: 'syz.0.3274': attribute type 8 has an invalid length. [ 338.595297][T14668] netlink: 'syz.0.3274': attribute type 7 has an invalid length. [ 338.623313][T14668] netlink: 187184 bytes leftover after parsing attributes in process `syz.0.3274'. [ 338.963080][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3280'. [ 338.999152][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 339.056827][ T6162] IPVS: starting estimator thread 0... [ 339.071674][T14686] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 339.097104][T14692] netlink: 'syz.0.3282': attribute type 3 has an invalid length. [ 339.127712][T14692] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 339.153840][T14692] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 339.169255][T14693] IPVS: using max 20 ests per chain, 48000 per kthread [ 339.200572][T14696] batman_adv: batadv1: Removing interface: netdevsim0 [ 340.029128][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 340.218540][T14738] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 340.279867][T14738] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.287614][T14738] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.310356][T14738] bridge0: entered allmulticast mode [ 340.797231][T14762] veth1: entered promiscuous mode [ 340.830484][T14762] veth1: left promiscuous mode [ 340.948818][T14764] __nla_validate_parse: 4 callbacks suppressed [ 340.948839][T14764] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3308'. [ 340.985189][T14764] openvswitch: netlink: Key type 29 is not supported [ 341.069212][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 341.261654][T14783] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 341.867154][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3322'. [ 341.908368][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3322'. [ 341.956581][T14806] x_tables: duplicate underflow at hook 2 [ 342.105853][T14818] netlink: 'syz.3.3324': attribute type 13 has an invalid length. [ 342.114352][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 342.138032][T14818] netlink: 'syz.3.3324': attribute type 58 has an invalid length. [ 342.156465][T14818] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3324'. [ 342.164471][T14826] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3325'. [ 342.314641][T14831] netlink: 'syz.2.3328': attribute type 1 has an invalid length. [ 342.347553][T14832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3329'. [ 342.395870][T14832] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3329'. [ 342.419272][T14832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3329'. [ 342.430816][T14832] vlan0: entered allmulticast mode [ 342.442998][T14832] veth0_vlan: entered allmulticast mode [ 342.468088][T14831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.543427][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 342.567694][T14844] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3332'. [ 342.586767][T14844] netlink: 'syz.4.3332': attribute type 2 has an invalid length. [ 342.807267][T14841] Unsupported ieee802154 address type: 0 [ 342.867193][T14837] bond1 (unregistering): Released all slaves [ 343.152031][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.404465][T14878] netlink: 'syz.3.3345': attribute type 1 has an invalid length. [ 343.788893][T14896] pimreg: entered allmulticast mode [ 343.836520][T14896] pimreg: left allmulticast mode [ 344.092011][T14902] tc_dump_action: action bad kind [ 344.189636][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 344.700362][T14924] sch_fq: defrate 0 ignored. [ 345.158533][T14950] xt_TPROXY: Can be used only with -p tcp or -p udp [ 345.229260][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 345.507414][T14958] netlink: 'syz.2.3373': attribute type 26 has an invalid length. [ 345.964345][T14983] __nla_validate_parse: 9 callbacks suppressed [ 345.964365][T14983] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3382'. [ 346.234493][T15001] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 346.264686][T15003] netlink: 'syz.2.3387': attribute type 10 has an invalid length. [ 346.273454][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.315034][T15004] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 346.323619][T15004] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 346.336554][T15007] Cannot find add_set index 0 as target [ 346.374338][T15003] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 346.412803][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'. [ 346.502078][T15007] xt_CT: No such helper "netbios-ns" [ 346.623760][T15015] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 346.645660][T15016] netlink: 'syz.1.3389': attribute type 1 has an invalid length. [ 346.663485][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 346.918256][T15020] ------------[ cut here ]------------ [ 346.924317][T15020] WARNING: CPU: 1 PID: 15020 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 346.933971][T15020] Modules linked in: [ 346.937872][T15020] CPU: 1 UID: 0 PID: 15020 Comm: syz.0.3392 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 346.948623][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 346.958671][T15020] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 346.964836][T15020] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 346.984640][T15020] RSP: 0018:ffffc9000a3def40 EFLAGS: 00010046 [ 346.990707][T15020] RAX: 0000000000000000 RBX: 1ffff9200147bdec RCX: ffffc9000a3def03 [ 346.999327][T15020] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff8987822a [ 347.007298][T15020] RBP: ffffc9000a3deff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 347.015276][T15020] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 347.023254][T15020] R13: 1ffff1100d8a0a20 R14: ffffc9000a3def80 R15: 0000000000000200 [ 347.031237][T15020] FS: 00007f9fa4eb36c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 347.040171][T15020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.046756][T15020] CR2: 00007fbcf8e656c0 CR3: 0000000059858000 CR4: 00000000003506f0 [ 347.054875][T15020] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 347.063036][T15020] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 347.071101][T15020] Call Trace: [ 347.074376][T15020] [ 347.077302][T15020] ? __warn+0x163/0x4e0 [ 347.081475][T15020] ? __local_bh_enable_ip+0x1be/0x200 [ 347.086847][T15020] ? report_bug+0x2b3/0x500 [ 347.091373][T15020] ? __local_bh_enable_ip+0x1be/0x200 [ 347.096749][T15020] ? handle_bug+0x3e/0x70 [ 347.101083][T15020] ? exc_invalid_op+0x1a/0x50 [ 347.105780][T15020] ? asm_exc_invalid_op+0x1a/0x20 [ 347.110819][T15020] ? __dev_queue_xmit+0x2da/0x3e90 [ 347.115930][T15020] ? __local_bh_enable_ip+0x1be/0x200 [ 347.121306][T15020] ? dev_hard_start_xmit+0x773/0x7e0 [ 347.126615][T15020] ? __dev_queue_xmit+0x2da/0x3e90 [ 347.131749][T15020] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 347.137527][T15020] ? __dev_queue_xmit+0x2da/0x3e90 [ 347.143115][T15020] __dev_queue_xmit+0x1763/0x3e90 [ 347.148297][T15020] ? kasan_save_track+0x51/0x80 [ 347.153281][T15020] ? ieee80211_do_stop+0x13d9/0x1f40 [ 347.158924][T15020] ? cfg80211_change_iface+0x782/0xf30 [ 347.164392][T15020] ? wext_ioctl_dispatch+0x58e/0x640 [ 347.171272][T15020] ? __dev_queue_xmit+0x2da/0x3e90 [ 347.176405][T15020] ? __se_sys_ioctl+0xfc/0x170 [ 347.181316][T15020] ? do_syscall_64+0xf3/0x230 [ 347.186052][T15020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.192141][T15020] ? __pfx___dev_queue_xmit+0x10/0x10 [ 347.197554][T15020] ? __copy_skb_header+0x437/0x5b0 [ 347.203418][T15020] ? __asan_memcpy+0x40/0x70 [ 347.208072][T15020] ? __copy_skb_header+0x437/0x5b0 [ 347.213373][T15020] ? __skb_clone+0x454/0x6c0 [ 347.217978][T15020] ? skb_clone+0x240/0x390 [ 347.222424][T15020] __netlink_deliver_tap+0x54d/0x7c0 [ 347.227739][T15020] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.232960][T15020] netlink_deliver_tap+0x19d/0x1b0 [ 347.238080][T15020] netlink_broadcast_filtered+0xe60/0x12a0 [ 347.243910][T15020] genlmsg_multicast_netns+0x93/0xd0 [ 347.249230][T15020] nl80211_frame_tx_status+0x8fa/0xda0 [ 347.254824][T15020] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 347.260829][T15020] ? do_raw_spin_unlock+0x13c/0x8b0 [ 347.266133][T15020] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 347.272057][T15020] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.278402][T15020] ? ieee80211_report_used_skb+0x1621/0x2470 [ 347.284976][T15020] ieee80211_report_used_skb+0x19eb/0x2470 [ 347.290830][T15020] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 347.297036][T15020] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 347.302538][T15020] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 347.308450][T15020] ieee80211_free_txskb+0x24/0x40 [ 347.313502][T15020] ieee80211_do_stop+0x13d9/0x1f40 [ 347.318650][T15020] ? __ieee80211_stop_queue+0x1fe/0x460 [ 347.324225][T15020] ? _find_next_bit+0xec/0x120 [ 347.329182][T15020] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 347.334644][T15020] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 347.340456][T15020] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 347.346605][T15020] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 347.353108][T15020] ieee80211_if_change_type+0x4cd/0xad0 [ 347.358664][T15020] ieee80211_change_iface+0xd2/0x4f0 [ 347.364081][T15020] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 347.370680][T15020] cfg80211_change_iface+0x782/0xf30 [ 347.376055][T15020] cfg80211_wext_siwmode+0x1bb/0x290 [ 347.381337][T15020] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 347.387139][T15020] ? __pfx___mutex_lock+0x10/0x10 [ 347.392164][T15020] ? full_name_hash+0x93/0xe0 [ 347.396847][T15020] ioctl_standard_call+0xe3/0x290 [ 347.401865][T15020] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 347.407841][T15020] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 347.413659][T15020] wext_ioctl_dispatch+0x58e/0x640 [ 347.418776][T15020] ? __pfx_ioctl_standard_call+0x10/0x10 [ 347.424579][T15020] ? __pfx_ioctl_private_call+0x10/0x10 [ 347.430131][T15020] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 347.435767][T15020] ? __might_fault+0xc6/0x120 [ 347.440535][T15020] wext_handle_ioctl+0x15f/0x270 [ 347.445646][T15020] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 347.451293][T15020] sock_ioctl+0x17f/0x8e0 [ 347.455625][T15020] ? __pfx_sock_ioctl+0x10/0x10 [ 347.460474][T15020] ? __fget_files+0x29/0x470 [ 347.465064][T15020] ? __fget_files+0x3f6/0x470 [ 347.469734][T15020] ? __fget_files+0x29/0x470 [ 347.474334][T15020] ? bpf_lsm_file_ioctl+0x9/0x10 [ 347.479290][T15020] ? security_file_ioctl+0x87/0xb0 [ 347.484490][T15020] ? __pfx_sock_ioctl+0x10/0x10 [ 347.489981][T15020] __se_sys_ioctl+0xfc/0x170 [ 347.494940][T15020] do_syscall_64+0xf3/0x230 [ 347.499564][T15020] ? clear_bhb_loop+0x35/0x90 [ 347.504350][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.510247][T15020] RIP: 0033:0x7f9fa417def9 [ 347.514680][T15020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.534301][T15020] RSP: 002b:00007f9fa4eb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.542723][T15020] RAX: ffffffffffffffda RBX: 00007f9fa4335f80 RCX: 00007f9fa417def9 [ 347.550719][T15020] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 347.558704][T15020] RBP: 00007f9fa41f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 347.566678][T15020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.574646][T15020] R13: 0000000000000000 R14: 00007f9fa4335f80 R15: 00007fffb0abf568 [ 347.582807][T15020] [ 347.585826][T15020] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 347.593095][T15020] CPU: 1 UID: 0 PID: 15020 Comm: syz.0.3392 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 347.603846][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 347.613902][T15020] Call Trace: [ 347.617177][T15020] [ 347.620107][T15020] dump_stack_lvl+0x241/0x360 [ 347.624788][T15020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.629988][T15020] ? __pfx__printk+0x10/0x10 [ 347.634588][T15020] ? vscnprintf+0x5d/0x90 [ 347.638912][T15020] panic+0x349/0x860 [ 347.642813][T15020] ? __warn+0x172/0x4e0 [ 347.646995][T15020] ? __pfx_panic+0x10/0x10 [ 347.652000][T15020] __warn+0x346/0x4e0 [ 347.656249][T15020] ? __local_bh_enable_ip+0x1be/0x200 [ 347.661739][T15020] report_bug+0x2b3/0x500 [ 347.666068][T15020] ? __local_bh_enable_ip+0x1be/0x200 [ 347.671549][T15020] handle_bug+0x3e/0x70 [ 347.675723][T15020] exc_invalid_op+0x1a/0x50 [ 347.680234][T15020] asm_exc_invalid_op+0x1a/0x20 [ 347.685090][T15020] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 347.691082][T15020] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 347.710862][T15020] RSP: 0018:ffffc9000a3def40 EFLAGS: 00010046 [ 347.716936][T15020] RAX: 0000000000000000 RBX: 1ffff9200147bdec RCX: ffffc9000a3def03 [ 347.724928][T15020] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff8987822a [ 347.732897][T15020] RBP: ffffc9000a3deff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 347.740958][T15020] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 347.748921][T15020] R13: 1ffff1100d8a0a20 R14: ffffc9000a3def80 R15: 0000000000000200 [ 347.756989][T15020] ? __dev_queue_xmit+0x2da/0x3e90 [ 347.762142][T15020] ? dev_hard_start_xmit+0x773/0x7e0 [ 347.767424][T15020] ? __dev_queue_xmit+0x2da/0x3e90 [ 347.772540][T15020] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 347.778388][T15020] ? __dev_queue_xmit+0x2da/0x3e90 [ 347.783518][T15020] __dev_queue_xmit+0x1763/0x3e90 [ 347.788562][T15020] ? kasan_save_track+0x51/0x80 [ 347.793720][T15020] ? ieee80211_do_stop+0x13d9/0x1f40 [ 347.799223][T15020] ? cfg80211_change_iface+0x782/0xf30 [ 347.805332][T15020] ? wext_ioctl_dispatch+0x58e/0x640 [ 347.810903][T15020] ? __dev_queue_xmit+0x2da/0x3e90 [ 347.816220][T15020] ? __se_sys_ioctl+0xfc/0x170 [ 347.821203][T15020] ? do_syscall_64+0xf3/0x230 [ 347.825936][T15020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.832009][T15020] ? __pfx___dev_queue_xmit+0x10/0x10 [ 347.837500][T15020] ? __copy_skb_header+0x437/0x5b0 [ 347.842858][T15020] ? __asan_memcpy+0x40/0x70 [ 347.849847][T15020] ? __copy_skb_header+0x437/0x5b0 [ 347.855373][T15020] ? __skb_clone+0x454/0x6c0 [ 347.860390][T15020] ? skb_clone+0x240/0x390 [ 347.864945][T15020] __netlink_deliver_tap+0x54d/0x7c0 [ 347.870286][T15020] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.875693][T15020] netlink_deliver_tap+0x19d/0x1b0 [ 347.880824][T15020] netlink_broadcast_filtered+0xe60/0x12a0 [ 347.886775][T15020] genlmsg_multicast_netns+0x93/0xd0 [ 347.892326][T15020] nl80211_frame_tx_status+0x8fa/0xda0 [ 347.897802][T15020] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 347.903796][T15020] ? do_raw_spin_unlock+0x13c/0x8b0 [ 347.909014][T15020] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 347.914915][T15020] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.921266][T15020] ? ieee80211_report_used_skb+0x1621/0x2470 [ 347.927279][T15020] ieee80211_report_used_skb+0x19eb/0x2470 [ 347.933712][T15020] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 347.940052][T15020] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 347.945549][T15020] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 347.952012][T15020] ieee80211_free_txskb+0x24/0x40 [ 347.957089][T15020] ieee80211_do_stop+0x13d9/0x1f40 [ 347.962242][T15020] ? __ieee80211_stop_queue+0x1fe/0x460 [ 347.967794][T15020] ? _find_next_bit+0xec/0x120 [ 347.972678][T15020] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 347.978247][T15020] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 347.984084][T15020] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 347.990282][T15020] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 347.996739][T15020] ieee80211_if_change_type+0x4cd/0xad0 [ 348.002865][T15020] ieee80211_change_iface+0xd2/0x4f0 [ 348.008240][T15020] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 348.015900][T15020] cfg80211_change_iface+0x782/0xf30 [ 348.021226][T15020] cfg80211_wext_siwmode+0x1bb/0x290 [ 348.026529][T15020] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 348.032880][T15020] ? __pfx___mutex_lock+0x10/0x10 [ 348.037909][T15020] ? full_name_hash+0x93/0xe0 [ 348.042611][T15020] ioctl_standard_call+0xe3/0x290 [ 348.048178][T15020] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 348.054216][T15020] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 348.060132][T15020] wext_ioctl_dispatch+0x58e/0x640 [ 348.065886][T15020] ? __pfx_ioctl_standard_call+0x10/0x10 [ 348.071879][T15020] ? __pfx_ioctl_private_call+0x10/0x10 [ 348.077639][T15020] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 348.083849][T15020] ? __might_fault+0xc6/0x120 [ 348.088810][T15020] wext_handle_ioctl+0x15f/0x270 [ 348.093880][T15020] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 348.099397][T15020] sock_ioctl+0x17f/0x8e0 [ 348.103920][T15020] ? __pfx_sock_ioctl+0x10/0x10 [ 348.108862][T15020] ? __fget_files+0x29/0x470 [ 348.113451][T15020] ? __fget_files+0x3f6/0x470 [ 348.118122][T15020] ? __fget_files+0x29/0x470 [ 348.122737][T15020] ? bpf_lsm_file_ioctl+0x9/0x10 [ 348.127678][T15020] ? security_file_ioctl+0x87/0xb0 [ 348.132826][T15020] ? __pfx_sock_ioctl+0x10/0x10 [ 348.137807][T15020] __se_sys_ioctl+0xfc/0x170 [ 348.142613][T15020] do_syscall_64+0xf3/0x230 [ 348.147137][T15020] ? clear_bhb_loop+0x35/0x90 [ 348.151822][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.157803][T15020] RIP: 0033:0x7f9fa417def9 [ 348.162218][T15020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.182462][T15020] RSP: 002b:00007f9fa4eb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.190930][T15020] RAX: ffffffffffffffda RBX: 00007f9fa4335f80 RCX: 00007f9fa417def9 [ 348.198941][T15020] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 348.206934][T15020] RBP: 00007f9fa41f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 348.214904][T15020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.222872][T15020] R13: 0000000000000000 R14: 00007f9fa4335f80 R15: 00007fffb0abf568 [ 348.230868][T15020] [ 348.234000][T15020] Kernel Offset: disabled [ 348.238447][T15020] Rebooting in 86400 seconds..