last executing test programs: 8.85988644s ago: executing program 1 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '+f'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 8.647752831s ago: executing program 1 (id=452): unshare(0x62040200) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, 0x0}, 0x138) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x0, 0x10000}) preadv(r2, &(0x7f0000000200), 0x1, 0x2, 0x9) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)=""/136, 0x88}], 0x2e}, 0xffffffff}], 0x1, 0x32, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x3b, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x4, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) r9 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x5, 0x11, r9, 0x487d0000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 6.70741099s ago: executing program 2 (id=456): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x2c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 6.629025635s ago: executing program 2 (id=457): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0], 0x20) 6.465700501s ago: executing program 2 (id=458): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x68, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}]}, 0x68}}, 0x40c4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r2, 0x60b}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x101) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x30, r9, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48184}, 0x20000800) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a99d88dc857cd7eba38772c4bc12d03a53df2b9db041c1197faaebc8deebfb524c39fa77e2154478f831bee46b172c77e1f5d5cd8aa425bbfbd52b4cff320c71e1120bed9fbfc24f2d2a6e7100acc29064f0da919a28d3c7268ec2c31931c464dd0f1770bd03f3a9449a436c10cf82a9a839da6f3fcab11e5f006"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000150ae1a8605c01020000000000000000831876491378140000001008f702400000000a00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 5.872973789s ago: executing program 1 (id=459): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000"], 0xffe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) close(0x3) socket$kcm(0x29, 0x5, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x2e}}) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0xb00) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipmr_newroute={0x2c, 0x18, 0x300, 0x70bd29, 0x25dfdbfb, {0x80, 0x20, 0x14, 0x2, 0x0, 0x3, 0xc8, 0x6, 0x2200}, [@RTA_IIF={0x8}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 5.507362975s ago: executing program 2 (id=460): unshare(0x42000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00', @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000"], 0xc4}}, 0x20050800) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 5.106898718s ago: executing program 3 (id=463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x23c000, 0x0, 0x7}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x8, r4}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000003140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="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", 0xfa}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000400)='z', 0x1}, {&(0x7f0000000500)="28db140451caa6a9d66105abca783a5dddfe71ed8380092447a126437fed57d7db8906ce1fa8b9d484ca2fc19ca0cb2d4bf566b7c71d93de597b30f49ccc8c5df7286f6abc6b70f20ffa159229eb9fda0b0e5f342f8e82e4cccc546a5a6823c121634a74caf6f7be2ec04c9e13141772d519c103f4d19dbeac5512a7e3a3aee5bef7aab9fd56f7e9ae491b67f81cda2dcb20fd0d955e3570364bab6adbb62a5bf762649d8f808389a7738d85472430f99a0942cddb14d29907e4e53551382037de1d38705b0a", 0xc6}, {&(0x7f0000000700)="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", 0xfe}], 0x3}}], 0x2, 0x0) shutdown(r5, 0x1) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0xce21, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000500)=""/247, 0xf7}], 0x2}}], 0x48}, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000040)="e2", 0x1, 0x50, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0x15}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000001c0), 0x8) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4010, r1}, 0x18) ioctl$BTRFS_IOC_SYNC(r9, 0x9408, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRESHEX=r8], 0x20) r10 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x114, 0x10, 0x0, 0x3) 5.098567917s ago: executing program 0 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 4.97468148s ago: executing program 0 (id=465): r0 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x10, 0x0, 0x45, 0x7, 0x8fc1, 0x1, 0x20000, 0x0, 0xf}}) 4.467362395s ago: executing program 0 (id=467): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) close(r3) 3.67170191s ago: executing program 3 (id=470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x68, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}]}, 0x68}}, 0x40c4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r2, 0x60b}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x101) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x30, r9, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48184}, 0x20000800) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a99d88dc857cd7eba38772c4bc12d03a53df2b9db041c1197faaebc8deebfb524c39fa77e2154478f831bee46b172c77e1f5d5cd8aa425bbfbd52b4cff320c71e1120bed9fbfc24f2d2a6e7100acc29064f0da919a28d3c7268ec2c31931c464dd0f1770bd03f3a9449a436c10cf82a9a839da6f3fcab11e5f006"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000150ae1a8605c01020000000000000000831876491378140000001008f702400000000a00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 3.478809789s ago: executing program 4 (id=471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff3, 0x61a, 0xc8a1, 0x7, 0x7, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, &(0x7f0000000280)={0x2000, 0x7ff, 0x2000000000005, 0xb, 0x400000000000006, 0x7, 0x8, 0x60e0}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x2a}, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffffffffffff, 0x0, 0x80000001}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x4d3, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 3.405705809s ago: executing program 1 (id=472): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x40, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a3200000000140004800800024000000000080001400000"], 0xd8}}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x200, 0x2070bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xd, 0xe}, {0x3, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000011) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x0, r8, {0xfff1, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x50}}, 0x44050) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r6, &(0x7f0000000280)=@abs, 0x6e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 3.325683224s ago: executing program 3 (id=473): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES8=r6, @ANYBLOB="2f000000f806bbe0dfc17693ad74a559663f4b450c09a10309c9922fc755edcb1b260d297ad89793e3c3d4a3ea8874", @ANYRES32, @ANYBLOB="3d20ad32"], 0x20) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaa2f6f57a2aaeaaabbbbbbbbbbbbec598bb0f21e752b104700001c0000002010ece25f4d01907800000000e00000"], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @remote}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r8) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.207811748s ago: executing program 2 (id=474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000004c00", @ANYRES32=0x0, @ANYBLOB="210800000000000008001b"], 0x44}, 0x1, 0xffffa888, 0x0, 0x48000}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x81, 0x4000105, 0x9, 0x8001, 0x9]}, &(0x7f0000000400)=0x54) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) 2.096427058s ago: executing program 4 (id=475): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 1.866787903s ago: executing program 4 (id=476): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 1.62734251s ago: executing program 4 (id=477): r0 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x10, 0x0, 0x45, 0x7, 0x8fc1, 0x1, 0x20000, 0x0, 0xf}}) 1.434686947s ago: executing program 4 (id=478): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) sendmmsg(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f9a15787b475938205979b95a208be9811722dee7f06a10ddc6893cfabc1a1068c34a2a99b7586280fc5ba21c02c82901b007d44bd88d47fbbde2425d48cbf3edf6a70643a2075b5b24901f8387b2f08822b6d54c1c427d461d1e5673b1f06d36b47638020757d2d6f26bda8b851763a15bfe494f222898da1e3d10e44d693c9ac", 0x81}], 0x1}}], 0x1, 0x20000080) accept4$unix(r2, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="20003300d0000000080211000001080211000000505050505050004008"], 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 1.303613632s ago: executing program 0 (id=479): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x30, 0x0, 0x101, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}}, 0x24}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r6, 0x0, 0x23, &(0x7f0000004b00)=ANY=[], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.19410334s ago: executing program 3 (id=480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) 1.106133615s ago: executing program 1 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) 956.78264ms ago: executing program 0 (id=482): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008001500"], 0x34}}, 0x4040010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 944.467514ms ago: executing program 3 (id=483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x68, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}]}, 0x68}}, 0x40c4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r2, 0x60b}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x101) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x30, r9, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48184}, 0x20000800) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a99d88dc857cd7eba38772c4bc12d03a53df2b9db041c1197faaebc8deebfb524c39fa77e2154478f831bee46b172c77e1f5d5cd8aa425bbfbd52b4cff320c71e1120bed9fbfc24f2d2a6e7100acc29064f0da919a28d3c7268ec2c31931c464dd0f1770bd03f3a9449a436c10cf82a9a839da6f3fcab11e5f006"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000150ae1a8605c01020000000000000000831876491378140000001008f702400000000a00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 850.595172ms ago: executing program 1 (id=484): unshare(0x42000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00', @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000"], 0xc4}}, 0x20050800) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 340.676µs ago: executing program 0 (id=485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000004c00", @ANYRES32=0x0, @ANYBLOB="210800000000000008001b"], 0x44}, 0x1, 0xffffa888, 0x0, 0x48000}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x4081, 0x7, 0x480, 0x7]}, &(0x7f0000000240)=0xfffffffffffffd5c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001480)=@newtfilter={0xa0, 0x2c, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xf, 0x9}, {0xfff2, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0xa6d}, @TCA_CHAIN={0x8, 0xb, 0xab4}, @filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x83f7}, @TCA_FLOW_POLICE={0x24, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0xd332}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_RATE={0x6, 0x5, {0xd, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44045}, 0x0) 175.14µs ago: executing program 2 (id=486): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 62.662µs ago: executing program 3 (id=487): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)="27050200590200000600002fb96d", 0xe}], 0x1}, 0x0) 0s ago: executing program 4 (id=488): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x10, 0x0, 0x45, 0x7, 0x8fc1, 0x1, 0x20000, 0x0, 0xf}}) kernel console output (not intermixed with test programs): v_slave_0 (retrying later): interface not active [ 72.424863][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.431889][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.457858][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.480746][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.507086][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.514060][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.540056][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.578477][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.585620][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.612705][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.640926][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.648108][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.674261][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.687395][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.694368][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.720424][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.735917][ T5841] team0: Port device team_slave_0 added [ 72.762159][ T5829] hsr_slave_0: entered promiscuous mode [ 72.768312][ T5838] Bluetooth: hci0: command tx timeout [ 72.774468][ T5829] hsr_slave_1: entered promiscuous mode [ 72.775560][ T5838] Bluetooth: hci1: command tx timeout [ 72.788000][ T5841] team0: Port device team_slave_1 added [ 72.822902][ T5836] hsr_slave_0: entered promiscuous mode [ 72.829910][ T5836] hsr_slave_1: entered promiscuous mode [ 72.836464][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.844251][ T5836] Cannot create hsr debugfs directory [ 72.849811][ T5847] Bluetooth: hci2: command tx timeout [ 72.855775][ T5847] Bluetooth: hci3: command tx timeout [ 72.861537][ T5838] Bluetooth: hci4: command tx timeout [ 72.888346][ T5842] hsr_slave_0: entered promiscuous mode [ 72.894430][ T5842] hsr_slave_1: entered promiscuous mode [ 72.900833][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.908709][ T5842] Cannot create hsr debugfs directory [ 72.935695][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.942668][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.969004][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.981576][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.988919][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.014948][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.092026][ T5831] hsr_slave_0: entered promiscuous mode [ 73.098733][ T5831] hsr_slave_1: entered promiscuous mode [ 73.104679][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.112677][ T5831] Cannot create hsr debugfs directory [ 73.209999][ T5841] hsr_slave_0: entered promiscuous mode [ 73.216432][ T5841] hsr_slave_1: entered promiscuous mode [ 73.222372][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.230038][ T5841] Cannot create hsr debugfs directory [ 73.460131][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.490388][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.505767][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.516836][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.547643][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.563410][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.582022][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.602680][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.633420][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.648666][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.663624][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.676029][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.768630][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.778801][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.807676][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.837802][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.886849][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.913875][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.926632][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.952119][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.959687][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.985885][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.008066][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.064895][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.076907][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.085883][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.113938][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.121232][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.132419][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.139697][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.149827][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.156942][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.166149][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.173262][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.185626][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.192717][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.236153][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.243270][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.323696][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.399115][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.460168][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.489133][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.550960][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.567284][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.574369][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.607772][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.614887][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.638432][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.645603][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.703830][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.718863][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.747395][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.754634][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.776553][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.846584][ T5838] Bluetooth: hci1: command tx timeout [ 74.852078][ T5838] Bluetooth: hci0: command tx timeout [ 74.884972][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.925579][ T5838] Bluetooth: hci4: command tx timeout [ 74.931127][ T5838] Bluetooth: hci3: command tx timeout [ 74.938400][ T5847] Bluetooth: hci2: command tx timeout [ 74.939261][ T5842] veth0_vlan: entered promiscuous mode [ 74.961038][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.008432][ T5842] veth1_vlan: entered promiscuous mode [ 75.113902][ T5836] veth0_vlan: entered promiscuous mode [ 75.124160][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.143163][ T5842] veth0_macvtap: entered promiscuous mode [ 75.189358][ T5836] veth1_vlan: entered promiscuous mode [ 75.202404][ T5842] veth1_macvtap: entered promiscuous mode [ 75.300268][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.313520][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.340150][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.371382][ T5836] veth0_macvtap: entered promiscuous mode [ 75.380953][ T5831] veth0_vlan: entered promiscuous mode [ 75.391246][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.402722][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.411813][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.420631][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.440913][ T5829] veth0_vlan: entered promiscuous mode [ 75.449113][ T5836] veth1_macvtap: entered promiscuous mode [ 75.464654][ T5831] veth1_vlan: entered promiscuous mode [ 75.502887][ T5829] veth1_vlan: entered promiscuous mode [ 75.544393][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.559943][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.572528][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.597068][ T5841] veth0_vlan: entered promiscuous mode [ 75.611102][ T5841] veth1_vlan: entered promiscuous mode [ 75.624765][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.635755][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.648265][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.679374][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.689457][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.699230][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.708036][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.719393][ T5831] veth0_macvtap: entered promiscuous mode [ 75.730439][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.743661][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.744836][ T5829] veth0_macvtap: entered promiscuous mode [ 75.784847][ T5829] veth1_macvtap: entered promiscuous mode [ 75.793879][ T5831] veth1_macvtap: entered promiscuous mode [ 75.833342][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.839280][ T5841] veth0_macvtap: entered promiscuous mode [ 75.850005][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.873982][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.896443][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.907640][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.918374][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.930490][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.948463][ T5841] veth1_macvtap: entered promiscuous mode [ 75.968112][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.986939][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.997666][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.008214][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.018674][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.029380][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.041297][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.061904][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.062476][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.072664][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.098573][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.109210][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.119115][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.130206][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.140737][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.151508][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.162913][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.181549][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.192327][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.202629][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.214042][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.226361][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.239061][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.251344][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.261659][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.272256][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.282261][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.293700][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.304849][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.346649][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.358673][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.370792][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.382152][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.394510][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.404877][ T5915] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.411126][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.417242][ T5915] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 76.432990][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.443503][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.458469][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.473652][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.483625][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.484599][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.499953][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.508872][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.517622][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.539106][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.548086][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.557513][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.566715][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.599829][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.609725][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.619264][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.628081][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.678301][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.690934][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.921484][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 76.934028][ T5920] tipc: Started in network mode [ 76.937037][ T5847] Bluetooth: hci1: command tx timeout [ 76.944535][ T5838] Bluetooth: hci0: command tx timeout [ 76.944905][ T5920] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 76.968666][ T5920] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 76.979424][ T5920] tipc: Enabled bearer , priority 10 [ 77.005403][ T5847] Bluetooth: hci2: command tx timeout [ 77.006473][ T5840] Bluetooth: hci4: command tx timeout [ 77.011013][ T5838] Bluetooth: hci3: command tx timeout [ 77.231039][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.272609][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.327953][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.350130][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.387919][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.405902][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.477284][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.500768][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.746541][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.759504][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.867443][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.897798][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.017922][ T51] tipc: Node number set to 1 [ 78.216858][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 78.449763][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 78.522170][ T5958] netlink: 37 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.882887][ T5964] Bluetooth: MGMT ver 1.23 [ 79.006220][ T5838] Bluetooth: hci0: command tx timeout [ 79.006595][ T5840] Bluetooth: hci1: command tx timeout [ 79.088135][ T5840] Bluetooth: hci4: command tx timeout [ 79.096194][ T5840] Bluetooth: hci3: command tx timeout [ 79.096393][ T5838] Bluetooth: hci2: command tx timeout [ 79.427778][ T5975] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 79.563245][ T5977] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 79.593433][ T5977] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10'. [ 79.631668][ T5978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10'. [ 80.531930][ T5962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9'. [ 80.583221][ T5975] team0: Device veth1_macvtap failed to register rx_handler [ 80.675870][ T5980] netlink: 'syz.1.11': attribute type 29 has an invalid length. [ 80.698322][ T5989] IPv6: sit1: Disabled Multicast RS [ 80.704403][ T5989] sit1: entered allmulticast mode [ 80.789032][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 80.910349][ T5995] batman_adv: batadv0: Adding interface: dummy0 [ 80.925431][ T5995] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.990098][ T5995] batman_adv: batadv0: Interface activated: dummy0 [ 81.091240][ T5997] batadv0: mtu less than device minimum [ 81.102940][ T5997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.115686][ T5997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.128009][ T5997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.140483][ T5997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.152886][ T5997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.165620][ T5997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.177998][ T5997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.190624][ T5997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.203096][ T5997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.357890][ T6003] ip6tnl1: entered allmulticast mode [ 81.446708][ T6001] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 81.474822][ T6001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14'. [ 81.757701][ T6007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.820781][ T6001] veth0_vlan: entered allmulticast mode [ 81.827933][ T6001] bridge0: port 3(veth0_vlan) entered blocking state [ 81.835423][ T6001] bridge0: port 3(veth0_vlan) entered disabled state [ 81.927420][ T6007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.257205][ T6007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.535614][ T6013] sch_fq: defrate 511 ignored. [ 82.556295][ T6022] Zero length message leads to an empty skb [ 82.616127][ T6022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.447897][ T6007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.633380][ T6015] syzkaller0: entered promiscuous mode [ 83.651398][ T6015] syzkaller0: entered allmulticast mode [ 84.026726][ T6037] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET) [ 84.035453][ T6038] syz.2.19 uses old SIOCAX25GETINFO [ 84.494244][ T5932] IPVS: starting estimator thread 0... [ 84.610456][ T6051] IPVS: using max 26 ests per chain, 62400 per kthread [ 86.669656][ T6007] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.721279][ T6007] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.863820][ T6065] warning: `syz.1.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.924467][ T6007] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.972930][ T25] cfg80211: failed to load regulatory.db [ 87.193519][ T6007] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.303969][ T6074] syzkaller1: entered promiscuous mode [ 87.342358][ T6074] syzkaller1: entered allmulticast mode [ 87.619585][ T6091] syzkaller0: entered promiscuous mode [ 87.635315][ T6091] syzkaller0: entered allmulticast mode [ 87.878805][ T6083] sch_fq: defrate 511 ignored. [ 87.956929][ T6098] netlink: 124 bytes leftover after parsing attributes in process `syz.4.29'. [ 88.154477][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 88.337617][ T6089] netlink: 'syz.1.28': attribute type 2 has an invalid length. [ 88.360697][ T6089] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.28'. [ 89.663005][ T6099] veth0_to_bond: entered promiscuous mode [ 89.778150][ T6102] bond0: (slave bond_slave_0): Releasing backup interface [ 90.085734][ T6122] ªªªªª: renamed from bridge0 (while UP) [ 90.095234][ T6122] ªªªªª: port 2(bridge_slave_1) entered disabled state [ 90.103542][ T6122] ªªªªª: port 1(bridge_slave_0) entered disabled state [ 90.114487][ T6122] ªªªªª: entered promiscuous mode [ 90.133932][ T6122] ªªªªª: entered allmulticast mode [ 90.410371][ T6122] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 90.501269][ T6131] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 90.503686][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 90.555641][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 90.593327][ T6135] netlink: 44 bytes leftover after parsing attributes in process `syz.2.32'. [ 90.598512][ T6133] nbd: socks must be embedded in a SOCK_ITEM attr [ 91.134256][ T6159] netlink: 248 bytes leftover after parsing attributes in process `syz.1.34'. [ 91.229000][ T6137] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.33'. [ 91.481812][ T6174] netlink: 'syz.3.36': attribute type 4 has an invalid length. [ 91.546961][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 91.663492][ T6174] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 91.726826][ T6174] netlink: 224 bytes leftover after parsing attributes in process `syz.3.36'. [ 92.445087][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 92.850945][ T6211] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 92.898579][ T6211] CPU: 0 UID: 0 PID: 6211 Comm: syz.1.43 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 92.898611][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.898637][ T6211] Call Trace: [ 92.898648][ T6211] [ 92.898658][ T6211] dump_stack_lvl+0x241/0x360 [ 92.898698][ T6211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.898723][ T6211] ? __pfx__printk+0x10/0x10 [ 92.898749][ T6211] ? __kmalloc_cache_noprof+0x243/0x390 [ 92.898779][ T6211] ? sysfs_warn_dup+0x51/0xa0 [ 92.898809][ T6211] sysfs_warn_dup+0x8e/0xa0 [ 92.898835][ T6211] sysfs_do_create_link_sd+0xbe/0x110 [ 92.898864][ T6211] device_add_class_symlinks+0x1c5/0x250 [ 92.898900][ T6211] device_add+0x553/0xbf0 [ 92.898939][ T6211] wiphy_register+0x1922/0x2650 [ 92.898975][ T6211] ? __pfx_wiphy_register+0x10/0x10 [ 92.898994][ T6211] ? minstrel_ht_alloc+0x84b/0x940 [ 92.899025][ T6211] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 92.899056][ T6211] ieee80211_register_hw+0x35d9/0x42e0 [ 92.899099][ T6211] ? ieee80211_register_hw+0x15f1/0x42e0 [ 92.899134][ T6211] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 92.899173][ T6211] ? __asan_memset+0x23/0x50 [ 92.899194][ T6211] ? __hrtimer_init+0x170/0x250 [ 92.899222][ T6211] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 92.899280][ T6211] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 92.899309][ T6211] ? trace_kmalloc+0x1f/0xd0 [ 92.899335][ T6211] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 92.899365][ T6211] ? kstrndup+0xbb/0x150 [ 92.899408][ T6211] hwsim_new_radio_nl+0xece/0x2290 [ 92.899447][ T6211] ? __pfx___nla_validate_parse+0x10/0x10 [ 92.899474][ T6211] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 92.899535][ T6211] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 92.899578][ T6211] genl_rcv_msg+0xb1f/0xec0 [ 92.899629][ T6211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.899693][ T6211] ? __pfx_lock_acquire+0x10/0x10 [ 92.899724][ T6211] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 92.899750][ T6211] ? __pfx___might_resched+0x10/0x10 [ 92.899789][ T6211] netlink_rcv_skb+0x206/0x480 [ 92.899816][ T6211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.899849][ T6211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.899908][ T6211] genl_rcv+0x28/0x40 [ 92.899936][ T6211] netlink_unicast+0x7f6/0x990 [ 92.899968][ T6211] ? __pfx_netlink_unicast+0x10/0x10 [ 92.899987][ T6211] ? __virt_addr_valid+0x45f/0x530 [ 92.900009][ T6211] ? __phys_addr_symbol+0x2f/0x70 [ 92.900042][ T6211] ? __check_object_size+0x47a/0x730 [ 92.900075][ T6211] netlink_sendmsg+0x8de/0xcb0 [ 92.900114][ T6211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.900145][ T6211] ? aa_sock_msg_perm+0x91/0x160 [ 92.900183][ T6211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.900206][ T6211] __sock_sendmsg+0x221/0x270 [ 92.900236][ T6211] ____sys_sendmsg+0x53a/0x860 [ 92.900279][ T6211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.900310][ T6211] ? __fget_files+0x2a/0x410 [ 92.900344][ T6211] ? __fget_files+0x2a/0x410 [ 92.900385][ T6211] __sys_sendmsg+0x269/0x350 [ 92.900417][ T6211] ? __pfx_futex_wake+0x10/0x10 [ 92.900452][ T6211] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.900534][ T6211] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.900569][ T6211] ? do_syscall_64+0x100/0x230 [ 92.900604][ T6211] ? do_syscall_64+0xb6/0x230 [ 92.900645][ T6211] do_syscall_64+0xf3/0x230 [ 92.900677][ T6211] ? clear_bhb_loop+0x35/0x90 [ 92.900713][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.900742][ T6211] RIP: 0033:0x7fb71ff8d169 [ 92.900767][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.900784][ T6211] RSP: 002b:00007fb720deb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.900808][ T6211] RAX: ffffffffffffffda RBX: 00007fb7201a6080 RCX: 00007fb71ff8d169 [ 92.900823][ T6211] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 92.900837][ T6211] RBP: 00007fb72000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.900850][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.900863][ T6211] R13: 0000000000000000 R14: 00007fb7201a6080 R15: 00007ffce05211a8 [ 92.900896][ T6211] [ 93.350570][ T6220] syzkaller1: entered promiscuous mode [ 93.356153][ T6220] syzkaller1: entered allmulticast mode [ 93.374494][ T6222] netlink: 'syz.4.42': attribute type 11 has an invalid length. [ 93.894601][ T6231] lo speed is unknown, defaulting to 1000 [ 93.963877][ T6231] lo speed is unknown, defaulting to 1000 [ 94.050370][ T6231] lo speed is unknown, defaulting to 1000 [ 94.169580][ T6231] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.294807][ T6250] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 94.332410][ T6231] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 94.402537][ T6231] lo speed is unknown, defaulting to 1000 [ 94.418535][ T6250] lo speed is unknown, defaulting to 1000 [ 94.471507][ T6259] __nla_validate_parse: 3 callbacks suppressed [ 94.471524][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 94.495642][ T6231] lo speed is unknown, defaulting to 1000 [ 94.513203][ T6231] lo speed is unknown, defaulting to 1000 [ 94.615297][ T6231] lo speed is unknown, defaulting to 1000 [ 94.632936][ T6231] lo speed is unknown, defaulting to 1000 [ 94.687805][ T6264] syzkaller0: entered promiscuous mode [ 94.693344][ T6264] syzkaller0: entered allmulticast mode [ 94.697587][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 94.708805][ T6231] lo speed is unknown, defaulting to 1000 [ 94.777144][ T6269] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.878354][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 94.896946][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'. [ 95.167069][ T6269] lo speed is unknown, defaulting to 1000 [ 95.786106][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.51'. [ 96.980380][ T6278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.001336][ T6269] lo speed is unknown, defaulting to 1000 [ 97.038568][ T6269] lo speed is unknown, defaulting to 1000 [ 97.121710][ T6278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.264849][ T6278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.359997][ T6269] infiniband syz0: set active [ 97.366255][ T5883] lo speed is unknown, defaulting to 1000 [ 97.385102][ T6269] infiniband syz0: added lo [ 97.404454][ T6269] syz0: rxe_create_cq: returned err = -12 [ 97.418019][ T6269] infiniband syz0: Couldn't create ib_mad CQ [ 97.424623][ T6269] infiniband syz0: Couldn't open port 1 [ 97.521821][ T6269] RDS/IB: syz0: added [ 97.605912][ T6269] smc: adding ib device syz0 with port count 1 [ 97.619965][ T6269] smc: ib device syz0 port 1 has pnetid [ 97.650708][ T6278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.200936][ T6309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.236633][ T5932] lo speed is unknown, defaulting to 1000 [ 98.243690][ T6269] lo speed is unknown, defaulting to 1000 [ 98.302083][ T6278] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.305777][ T6313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.334699][ T6278] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.453635][ T6309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.478545][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 98.592581][ T6278] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.642626][ T6278] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.686768][ T6269] lo speed is unknown, defaulting to 1000 [ 98.747661][ T6322] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 98.832461][ T6309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.874270][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 98.970888][ T6309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.016396][ T6322] lo speed is unknown, defaulting to 1000 [ 99.022191][ T6269] lo speed is unknown, defaulting to 1000 [ 99.059085][ T6329] lo speed is unknown, defaulting to 1000 [ 99.132943][ T6309] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.177807][ T6309] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.222493][ T6309] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.241634][ T6309] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.283097][ T6335] netlink: 'syz.2.61': attribute type 11 has an invalid length. [ 99.323059][ T6269] lo speed is unknown, defaulting to 1000 [ 99.512119][ T6322] lo speed is unknown, defaulting to 1000 [ 99.565373][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.566398][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 99.592120][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 99.626250][ T6337] nbd: socks must be embedded in a SOCK_ITEM attr [ 99.626960][ T6338] netlink: 44 bytes leftover after parsing attributes in process `syz.3.62'. [ 99.761089][ T6329] lo speed is unknown, defaulting to 1000 [ 99.919917][ T6269] lo speed is unknown, defaulting to 1000 [ 100.224908][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.232508][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.471043][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.488656][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.627606][ T6343] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.642918][ T6343] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.652208][ T6343] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.669150][ T6343] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.677627][ T6351] netlink: 'syz.0.64': attribute type 10 has an invalid length. [ 100.688755][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.64'. [ 100.882298][ T6345] bridge0: port 3(gretap0) entered blocking state [ 100.890318][ T6345] bridge0: port 3(gretap0) entered disabled state [ 100.898555][ T6345] gretap0: entered allmulticast mode [ 100.906402][ T6345] gretap0: entered promiscuous mode [ 100.923635][ T6348] ip6tnl1: entered allmulticast mode [ 100.933431][ T6353] veth1_macvtap: left promiscuous mode [ 100.967338][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 101.044147][ T6351] veth0_vlan: entered allmulticast mode [ 101.075980][ T6351] ªªªªª: port 3(veth0_vlan) entered blocking state [ 101.083121][ T6351] ªªªªª: port 3(veth0_vlan) entered disabled state [ 101.103526][ T6351] net_ratelimit: 11 callbacks suppressed [ 101.103546][ T6351] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 101.135188][ T6347] gretap0: left allmulticast mode [ 101.140825][ T6347] gretap0: left promiscuous mode [ 101.153054][ T6347] bridge0: port 3(gretap0) entered disabled state [ 101.206469][ T6355] lo speed is unknown, defaulting to 1000 [ 101.310315][ T6355] lo speed is unknown, defaulting to 1000 [ 101.728695][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 102.036348][ T6369] lo speed is unknown, defaulting to 1000 [ 102.123711][ T6369] lo speed is unknown, defaulting to 1000 [ 102.235509][ T6377] lo speed is unknown, defaulting to 1000 [ 102.571350][ T6385] netlink: 68 bytes leftover after parsing attributes in process `syz.2.71'. [ 102.690662][ T6389] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 102.721197][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.72'. [ 102.769988][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 102.779329][ T6389] netlink: 112 bytes leftover after parsing attributes in process `syz.2.71'. [ 102.972317][ T6377] lo speed is unknown, defaulting to 1000 [ 103.061682][ T6401] netlink: 'syz.4.73': attribute type 11 has an invalid length. [ 103.403666][ T6412] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 103.619280][ T6367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.673030][ T5883] lo speed is unknown, defaulting to 1000 [ 103.740136][ T6412] lo speed is unknown, defaulting to 1000 [ 103.835325][ T6418] netlink: 'syz.4.77': attribute type 10 has an invalid length. [ 103.899165][ T6412] lo speed is unknown, defaulting to 1000 [ 103.900362][ T6418] team0: entered promiscuous mode [ 103.935019][ T6418] team_slave_0: entered promiscuous mode [ 103.941042][ T6418] team_slave_1: entered promiscuous mode [ 103.975554][ T6418] bridge0: port 3(team0) entered blocking state [ 103.981964][ T6418] bridge0: port 3(team0) entered disabled state [ 104.015360][ T6418] team0: entered allmulticast mode [ 104.021312][ T6418] team_slave_0: entered allmulticast mode [ 104.045481][ T6418] team_slave_1: entered allmulticast mode [ 104.053612][ T6418] bridge0: port 3(team0) entered blocking state [ 104.060000][ T6418] bridge0: port 3(team0) entered forwarding state [ 104.706540][ T6426] __nla_validate_parse: 4 callbacks suppressed [ 104.706558][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 105.028663][ T6433] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 105.071975][ T6434] bridge0: port 3(team0) entered disabled state [ 105.078447][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.085904][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.133286][ T6434] batman_adv: batadv0: Interface deactivated: dummy0 [ 105.164168][ T6431] Bluetooth: MGMT ver 1.23 [ 105.273849][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.316771][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.394346][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 105.440634][ T6434] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.449539][ T6434] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.460151][ T6434] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.469293][ T6434] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.510275][ T6433] lo speed is unknown, defaulting to 1000 [ 105.521520][ T6433] lo speed is unknown, defaulting to 1000 [ 105.622027][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 105.631060][ T6451] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 105.660025][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.677158][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.684890][ T6429] batman_adv: batadv0: Interface activated: dummy0 [ 105.715159][ T6429] batadv0: mtu less than device minimum [ 105.723123][ T6429] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.735629][ T6429] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.748158][ T6429] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.760517][ T6429] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.773273][ T6429] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.785581][ T6429] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.846224][ T6430] lo speed is unknown, defaulting to 1000 [ 105.917206][ T6430] lo speed is unknown, defaulting to 1000 [ 106.150803][ T6458] net_ratelimit: 14 callbacks suppressed [ 106.150823][ T6458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.185842][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 106.196729][ T6451] rdma_rxe: rxe_newlink: failed to add lo [ 106.196849][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 106.420724][ T6460] can: request_module (can-proto-3) failed. [ 106.523913][ T6471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.88'. [ 106.628650][ T6475] netlink: 152 bytes leftover after parsing attributes in process `syz.3.89'. [ 106.804355][ T6475] pimreg: entered allmulticast mode [ 107.317729][ T6468] pimreg: left allmulticast mode [ 107.425537][ T6480] netlink: 'syz.2.90': attribute type 10 has an invalid length. [ 107.438314][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 107.440688][ T6480] netlink: 2 bytes leftover after parsing attributes in process `syz.2.90'. [ 107.465347][ T6480] team0: entered promiscuous mode [ 107.495095][ T6480] team_slave_0: entered promiscuous mode [ 107.533113][ T6480] team_slave_1: entered promiscuous mode [ 107.567192][ T6480] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.574212][ T6480] bridge0: port 3(team0) entered blocking state [ 107.605284][ T6480] bridge0: port 3(team0) entered disabled state [ 107.611741][ T6480] team0: entered allmulticast mode [ 107.666889][ T6480] team_slave_0: entered allmulticast mode [ 107.686715][ T6480] team_slave_1: entered allmulticast mode [ 107.837853][ T6485] tipc: Started in network mode [ 107.842942][ T6485] tipc: Node identity 6, cluster identity 4711 [ 107.883105][ T6485] tipc: Node number set to 6 [ 108.089196][ T6498] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.208076][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 108.229643][ T6498] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.344307][ T6503] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 108.394917][ T6498] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.475946][ T6503] lo speed is unknown, defaulting to 1000 [ 108.505696][ T6503] lo speed is unknown, defaulting to 1000 [ 108.553008][ T6498] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.790929][ T6509] netlink: 'syz.1.98': attribute type 5 has an invalid length. [ 108.849093][ T6511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.099598][ T6498] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.207583][ T6498] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.324280][ T6498] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.375417][ T6498] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.396735][ T6499] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 109.402847][ T6519] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 109.403936][ T6499] tipc: Enabled bearer , priority 10 [ 109.535431][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 109.573479][ T6524] lo speed is unknown, defaulting to 1000 [ 109.591038][ T6524] lo speed is unknown, defaulting to 1000 [ 109.805117][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 109.838303][ T6528] __nla_validate_parse: 8 callbacks suppressed [ 109.838323][ T6528] netlink: 256 bytes leftover after parsing attributes in process `syz.2.104'. [ 109.863353][ T6528] unsupported nlmsg_type 40 [ 110.233956][ T6530] lo speed is unknown, defaulting to 1000 [ 110.335123][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 110.398845][ T6530] lo speed is unknown, defaulting to 1000 [ 110.443176][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.105'. [ 111.096534][ T6552] netlink: 'syz.3.107': attribute type 11 has an invalid length. [ 111.405114][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 111.543450][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 111.602805][ T6560] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 111.609445][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.776121][ T6556] bridge_slave_1 (unregistering): left allmulticast mode [ 111.805325][ T6556] bridge_slave_1 (unregistering): left promiscuous mode [ 111.812402][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.886295][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.893621][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 112.001638][ T6558] lo speed is unknown, defaulting to 1000 [ 112.157275][ T6560] lo speed is unknown, defaulting to 1000 [ 112.160131][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 112.169103][ T6558] lo speed is unknown, defaulting to 1000 [ 112.446295][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 112.643740][ T6560] lo speed is unknown, defaulting to 1000 [ 113.387335][ T6589] netlink: 'syz.4.118': attribute type 10 has an invalid length. [ 113.454437][ T6589] bridge0: port 3(team0) entered disabled state [ 113.480405][ T6589] team0: left allmulticast mode [ 113.485273][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 113.488730][ T6591] netlink: 'syz.4.118': attribute type 10 has an invalid length. [ 113.547224][ T6591] netlink: 2 bytes leftover after parsing attributes in process `syz.4.118'. [ 113.579006][ T6589] team_slave_0: left allmulticast mode [ 113.626960][ T6589] team_slave_1: left allmulticast mode [ 113.654716][ T6589] team0: left promiscuous mode [ 113.673605][ T6589] team_slave_0: left promiscuous mode [ 113.722048][ T6589] team_slave_1: left promiscuous mode [ 113.734530][ T6598] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.118'. [ 113.752805][ T6589] bridge0: port 3(team0) entered disabled state [ 113.776477][ T6589] batman_adv: batadv0: Adding interface: team0 [ 113.782705][ T6589] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.855532][ T6589] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 113.910277][ T6591] team0: entered promiscuous mode [ 113.945967][ T6591] team_slave_0: entered promiscuous mode [ 113.952604][ T6591] team_slave_1: entered promiscuous mode [ 113.976480][ T6591] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.008862][ T6591] batman_adv: batadv0: Interface activated: team0 [ 114.027554][ T6591] batadv0: mtu less than device minimum [ 114.046713][ T6591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.059340][ T6591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.071766][ T6591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.084337][ T6591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.096868][ T6591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.109422][ T6591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.163597][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.179292][ T6603] netlink: 'syz.1.121': attribute type 39 has an invalid length. [ 114.195179][ T6591] batman_adv: batadv0: Interface deactivated: team0 [ 114.254085][ T6591] batman_adv: batadv0: Removing interface: team0 [ 114.271326][ T6591] bridge0: port 3(team0) entered blocking state [ 114.279153][ T6591] bridge0: port 3(team0) entered disabled state [ 114.290412][ T6591] team0: entered allmulticast mode [ 114.295882][ T6591] team_slave_0: entered allmulticast mode [ 114.301633][ T6591] team_slave_1: entered allmulticast mode [ 114.334779][ T6604] lo speed is unknown, defaulting to 1000 [ 114.363151][ T6604] lo speed is unknown, defaulting to 1000 [ 114.383954][ T6607] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 114.455122][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.3.122 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 114.455168][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.455181][ T6607] Call Trace: [ 114.455188][ T6607] [ 114.455213][ T6607] dump_stack_lvl+0x241/0x360 [ 114.455244][ T6607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.455276][ T6607] ? __pfx__printk+0x10/0x10 [ 114.455299][ T6607] ? __kmalloc_cache_noprof+0x243/0x390 [ 114.455324][ T6607] ? sysfs_warn_dup+0x51/0xa0 [ 114.455351][ T6607] sysfs_warn_dup+0x8e/0xa0 [ 114.455373][ T6607] sysfs_do_create_link_sd+0xbe/0x110 [ 114.455398][ T6607] device_add_class_symlinks+0x1c5/0x250 [ 114.455429][ T6607] device_add+0x553/0xbf0 [ 114.455461][ T6607] wiphy_register+0x1922/0x2650 [ 114.455493][ T6607] ? __pfx_wiphy_register+0x10/0x10 [ 114.455517][ T6607] ? minstrel_ht_alloc+0x84b/0x940 [ 114.455544][ T6607] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 114.455570][ T6607] ieee80211_register_hw+0x35d9/0x42e0 [ 114.455606][ T6607] ? ieee80211_register_hw+0x15f1/0x42e0 [ 114.455636][ T6607] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 114.455670][ T6607] ? __asan_memset+0x23/0x50 [ 114.455687][ T6607] ? __hrtimer_init+0x170/0x250 [ 114.455728][ T6607] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 114.455781][ T6607] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 114.455803][ T6607] ? trace_kmalloc+0x1f/0xd0 [ 114.455826][ T6607] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 114.455854][ T6607] ? kstrndup+0xbb/0x150 [ 114.455893][ T6607] hwsim_new_radio_nl+0xece/0x2290 [ 114.455928][ T6607] ? __pfx___nla_validate_parse+0x10/0x10 [ 114.455953][ T6607] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 114.456008][ T6607] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 114.456047][ T6607] genl_rcv_msg+0xb1f/0xec0 [ 114.456084][ T6607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.456141][ T6607] ? __pfx_lock_acquire+0x10/0x10 [ 114.456170][ T6607] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 114.456193][ T6607] ? __pfx___might_resched+0x10/0x10 [ 114.456226][ T6607] netlink_rcv_skb+0x206/0x480 [ 114.456246][ T6607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.456272][ T6607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.456323][ T6607] genl_rcv+0x28/0x40 [ 114.456349][ T6607] netlink_unicast+0x7f6/0x990 [ 114.456378][ T6607] ? __pfx_netlink_unicast+0x10/0x10 [ 114.456397][ T6607] ? __virt_addr_valid+0x45f/0x530 [ 114.456417][ T6607] ? __phys_addr_symbol+0x2f/0x70 [ 114.456446][ T6607] ? __check_object_size+0x47a/0x730 [ 114.456493][ T6607] netlink_sendmsg+0x8de/0xcb0 [ 114.456538][ T6607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.456567][ T6607] ? aa_sock_msg_perm+0x91/0x160 [ 114.456605][ T6607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.456628][ T6607] __sock_sendmsg+0x221/0x270 [ 114.456656][ T6607] ____sys_sendmsg+0x53a/0x860 [ 114.456696][ T6607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.456726][ T6607] ? __fget_files+0x2a/0x410 [ 114.456759][ T6607] ? __fget_files+0x2a/0x410 [ 114.456796][ T6607] __sys_sendmsg+0x269/0x350 [ 114.456834][ T6607] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.456913][ T6607] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.456945][ T6607] ? do_syscall_64+0x100/0x230 [ 114.456980][ T6607] ? do_syscall_64+0xb6/0x230 [ 114.457014][ T6607] do_syscall_64+0xf3/0x230 [ 114.457043][ T6607] ? clear_bhb_loop+0x35/0x90 [ 114.457074][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.457100][ T6607] RIP: 0033:0x7fca2a78d169 [ 114.457117][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.457133][ T6607] RSP: 002b:00007fca2b63f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.457154][ T6607] RAX: ffffffffffffffda RBX: 00007fca2a9a6160 RCX: 00007fca2a78d169 [ 114.457169][ T6607] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 114.457181][ T6607] RBP: 00007fca2a80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.457193][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.457205][ T6607] R13: 0000000000000000 R14: 00007fca2a9a6160 R15: 00007ffe00dbb2f8 [ 114.457236][ T6607] [ 114.458716][ T6605] syzkaller1: entered promiscuous mode [ 114.871912][ T6605] syzkaller1: entered allmulticast mode [ 115.106128][ T6625] Bluetooth: MGMT ver 1.23 [ 115.224875][ T6627] lo speed is unknown, defaulting to 1000 [ 115.381500][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 115.401678][ T6641] xt_l2tp: v2 doesn't support IP mode [ 115.471755][ T6644] netlink: 68 bytes leftover after parsing attributes in process `syz.3.132'. [ 115.483504][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 115.522463][ T6644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 115.607438][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 115.625177][ T6644] netlink: 112 bytes leftover after parsing attributes in process `syz.3.132'. [ 115.656919][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 115.803711][ T6653] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 115.943920][ T6658] netlink: 'syz.3.135': attribute type 11 has an invalid length. [ 115.980024][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 116.283997][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 116.382138][ T6669] lo speed is unknown, defaulting to 1000 [ 116.452618][ T6673] netlink: 'syz.4.140': attribute type 5 has an invalid length. [ 116.605047][ C0] net_ratelimit: 36 callbacks suppressed [ 116.605065][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 116.850916][ T6677] ip6gretap0: entered promiscuous mode [ 116.866124][ T6677] batadv_slave_0: entered promiscuous mode [ 116.983311][ T6682] lo speed is unknown, defaulting to 1000 [ 117.145161][ T6688] xt_NFQUEUE: number of total queues is 0 [ 117.510842][ T6693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.144'. [ 117.666321][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 117.754143][ T6698] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 117.886997][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 118.410454][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.526226][ T6668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.666812][ T6712] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.685105][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 118.737365][ T6710] IPVS: Scheduler module ip_vs_sip not found [ 118.755381][ T6716] IPVS: length: 24 != 3221225496 [ 118.882762][ T6712] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.187174][ T6712] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.204877][ T6727] syz.1.154: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 119.284858][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.1.154 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 119.284889][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.284902][ T6727] Call Trace: [ 119.284909][ T6727] [ 119.284917][ T6727] dump_stack_lvl+0x241/0x360 [ 119.284953][ T6727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.284974][ T6727] ? __pfx__printk+0x10/0x10 [ 119.284998][ T6727] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 119.285024][ T6727] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 119.285051][ T6727] warn_alloc+0x278/0x410 [ 119.285093][ T6727] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 119.285146][ T6727] ? __pfx_warn_alloc+0x10/0x10 [ 119.285168][ T6727] ? kasan_save_track+0x3f/0x80 [ 119.285188][ T6727] ? __kasan_kmalloc+0x98/0xb0 [ 119.285212][ T6727] ? xsk_setsockopt+0x4aa/0x810 [ 119.285234][ T6727] ? do_sock_setsockopt+0x3af/0x720 [ 119.285264][ T6727] ? __x64_sys_setsockopt+0x1ee/0x280 [ 119.285293][ T6727] ? do_syscall_64+0xf3/0x230 [ 119.285322][ T6727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.285371][ T6727] __vmalloc_node_range_noprof+0x126/0x1380 [ 119.285436][ T6727] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.285476][ T6727] ? __kasan_kmalloc+0x98/0xb0 [ 119.285505][ T6727] vmalloc_user_noprof+0x74/0x80 [ 119.285526][ T6727] ? xskq_create+0xb6/0x170 [ 119.285550][ T6727] xskq_create+0xb6/0x170 [ 119.285578][ T6727] xsk_init_queue+0xa1/0x100 [ 119.285606][ T6727] xsk_setsockopt+0x4aa/0x810 [ 119.285633][ T6727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.285656][ T6727] ? __pfx_aa_sk_perm+0x10/0x10 [ 119.285689][ T6727] ? aa_sock_opt_perm+0x79/0x120 [ 119.285725][ T6727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.285748][ T6727] do_sock_setsockopt+0x3af/0x720 [ 119.285787][ T6727] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 119.285823][ T6727] ? __fget_files+0x395/0x410 [ 119.285852][ T6727] ? __fget_files+0x2a/0x410 [ 119.285891][ T6727] __x64_sys_setsockopt+0x1ee/0x280 [ 119.285930][ T6727] do_syscall_64+0xf3/0x230 [ 119.285962][ T6727] ? clear_bhb_loop+0x35/0x90 [ 119.285995][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.286024][ T6727] RIP: 0033:0x7fb71ff8d169 [ 119.286044][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.286062][ T6727] RSP: 002b:00007fb720e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.286085][ T6727] RAX: ffffffffffffffda RBX: 00007fb7201a5fa0 RCX: 00007fb71ff8d169 [ 119.286101][ T6727] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 119.286113][ T6727] RBP: 00007fb72000e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 119.286126][ T6727] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.286140][ T6727] R13: 0000000000000000 R14: 00007fb7201a5fa0 R15: 00007ffce05211a8 [ 119.286171][ T6727] [ 119.645213][ T6727] Mem-Info: [ 119.648469][ T6727] active_anon:6999 inactive_anon:0 isolated_anon:0 [ 119.648469][ T6727] active_file:1345 inactive_file:38310 isolated_file:0 [ 119.648469][ T6727] unevictable:771 dirty:487 writeback:0 [ 119.648469][ T6727] slab_reclaimable:10521 slab_unreclaimable:99375 [ 119.648469][ T6727] mapped:31912 shmem:3786 pagetables:790 [ 119.648469][ T6727] sec_pagetables:0 bounce:0 [ 119.648469][ T6727] kernel_misc_reclaimable:0 [ 119.648469][ T6727] free:1338683 free_pcp:1350 free_cma:0 [ 119.725135][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 119.796051][ T6727] Node 0 active_anon:28696kB inactive_anon:0kB active_file:5380kB inactive_file:153168kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:128448kB dirty:1944kB writeback:0kB shmem:14408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10852kB pagetables:3160kB sec_pagetables:0kB all_unreclaimable? no [ 119.917744][ T6712] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.943751][ T6727] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 120.143112][ T6727] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.207575][ T6727] lowmem_reserve[]: 0 2490 2490 0 0 [ 120.263554][ T6712] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.294446][ T6727] Node 0 DMA32 free:1430320kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:35476kB inactive_anon:0kB active_file:5380kB inactive_file:152840kB unevictable:1536kB writepending:1956kB present:3129332kB managed:2549820kB mlocked:0kB bounce:0kB free_pcp:2696kB local_pcp:1588kB free_cma:0kB [ 120.364285][ T6727] lowmem_reserve[]: 0 0 0 0 0 [ 120.381196][ T6727] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.433255][ T6712] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.444299][ T6727] lowmem_reserve[]: 0 0 0 0 0 [ 120.454516][ T6727] Node 1 Normal free:3901684kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.505276][ T6727] lowmem_reserve[]: 0 0 0 0 0 [ 120.510103][ T6727] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.538350][ T6712] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.567510][ T6727] Node 0 DMA32: 3*4kB (UE) 6*8kB (UE) 14*16kB (UME) 151*32kB (UME) 868*64kB (UME) 257*128kB (UME) 84*256kB (UME) 37*512kB (UM) 25*1024kB (UM) 12*2048kB (UME) 304*4096kB (UM) = 1429372kB [ 120.623403][ T6727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 120.641455][ T6727] Node 1 Normal: 201*4kB (UME) 52*8kB (UME) 38*16kB (UME) 188*32kB (UME) 94*64kB (UME) 36*128kB (UME) 13*256kB (UME) 8*512kB (UM) 3*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3901732kB [ 120.675464][ T6727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.734301][ T6727] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.760498][ T6727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.765182][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 120.811980][ T6712] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.831523][ T6727] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.873209][ T6757] __nla_validate_parse: 2 callbacks suppressed [ 120.873230][ T6757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.156'. [ 120.912254][ T6727] 43957 total pagecache pages [ 120.917059][ T6727] 0 pages in swap cache [ 120.993725][ T6727] Free swap = 124996kB [ 121.014859][ T6727] Total swap = 124996kB [ 121.035132][ T6727] 2097051 pages RAM [ 121.065021][ T6727] 0 pages HighMem/MovableOnly [ 121.069770][ T6727] 427874 pages reserved [ 121.165276][ T6727] 0 pages cma reserved [ 121.195681][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 121.276264][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 121.608177][ T6775] ieee802154 phy0 wpan0: encryption failed: -126 [ 121.805051][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 121.965239][ T6673] Set syz1 is full, maxelem 65536 reached [ 122.045952][ T6777] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.070427][ T6779] lo speed is unknown, defaulting to 1000 [ 122.183349][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 122.311976][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.163'. [ 122.673657][ T6795] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 122.683592][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.4.168'. [ 122.845290][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.864308][ T6795] team0: Device bridge0 is already an upper device of the team interface [ 122.978411][ T6801] syzkaller0: entered promiscuous mode [ 122.983960][ T6801] syzkaller0: entered allmulticast mode [ 123.045414][ T6801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.169'. [ 123.738762][ T29] audit: type=1800 audit(1741050603.072:2): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="memory.events" dev="tmpfs" ino=158 res=0 errno=0 [ 123.825442][ T29] audit: type=1804 audit(1741050603.162:3): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.181" name="/newroot/26/memory.events" dev="tmpfs" ino=158 res=1 errno=0 [ 123.888322][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 124.312093][ T6826] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 124.927917][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 125.967227][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 126.222975][ T6815] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 126.227937][ T6827] lo speed is unknown, defaulting to 1000 [ 126.289536][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 126.368793][ T6839] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 126.378917][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 126.512414][ T6826] lo speed is unknown, defaulting to 1000 [ 127.005201][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 127.067206][ T6847] lo speed is unknown, defaulting to 1000 [ 127.735552][ T6856] batadv0: entered promiscuous mode [ 127.761631][ T6856] syzkaller1: entered promiscuous mode [ 127.767239][ T6856] syzkaller1: entered allmulticast mode [ 128.045068][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.138989][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 128.176949][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 129.000897][ T6886] ipt_REJECT: TCP_RESET invalid for non-tcp [ 129.085112][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.121903][ T6888] lo speed is unknown, defaulting to 1000 [ 129.198357][ T6886] lo: entered allmulticast mode [ 129.224640][ T6886] lo: left allmulticast mode [ 129.380240][ T6898] sctp: [Deprecated]: syz.1.193 (pid 6898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.380240][ T6898] Use struct sctp_sack_info instead [ 129.486828][ T6896] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.923664][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 130.125085][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 130.259089][ T6888] lo speed is unknown, defaulting to 1000 [ 130.449622][ T6929] lo: entered promiscuous mode [ 130.455513][ T6929] tunl0: entered promiscuous mode [ 130.461529][ T6929] gre0: entered promiscuous mode [ 130.474040][ T6929] gretap0: entered promiscuous mode [ 130.480283][ T6929] erspan0: entered promiscuous mode [ 130.486919][ T6929] ip_vti0: entered promiscuous mode [ 130.493077][ T6929] ip6_vti0: entered promiscuous mode [ 130.500019][ T6929] sit0: entered promiscuous mode [ 130.506497][ T6929] ip6tnl0: entered promiscuous mode [ 130.512745][ T6929] ip6gre0: entered promiscuous mode [ 130.520153][ T6929] syz_tun: entered promiscuous mode [ 130.526400][ T6929] ip6gretap0: entered promiscuous mode [ 130.532701][ T6929] bridge0: entered promiscuous mode [ 130.539318][ T6929] vcan0: entered promiscuous mode [ 130.545056][ T6929] bond0: entered promiscuous mode [ 130.550247][ T6929] bond_slave_0: entered promiscuous mode [ 130.556403][ T6929] bond_slave_1: entered promiscuous mode [ 130.565290][ T6929] team0: entered promiscuous mode [ 130.570467][ T6929] team_slave_0: entered promiscuous mode [ 130.576533][ T6929] team_slave_1: entered promiscuous mode [ 130.583724][ T6929] dummy0: entered promiscuous mode [ 130.590135][ T6929] nlmon0: entered promiscuous mode [ 130.619971][ T6929] caif0: entered promiscuous mode [ 130.625870][ T6929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.884215][ T6934] netlink: 148 bytes leftover after parsing attributes in process `syz.2.202'. [ 130.905147][ T6934] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 130.985748][ T6934] netlink: 'syz.2.202': attribute type 2 has an invalid length. [ 131.165143][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.416357][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 131.477434][ T6948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.204'. [ 131.500683][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 131.529880][ T6948] nr0: entered promiscuous mode [ 131.908402][ T6955] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 131.932900][ T6957] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.971893][ T6955] lo speed is unknown, defaulting to 1000 [ 132.207925][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.323165][ T6972] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 132.374883][ T6972] lo speed is unknown, defaulting to 1000 [ 132.677529][ T6962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.212'. [ 132.768125][ T6976] lo speed is unknown, defaulting to 1000 [ 133.025595][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.245054][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 133.501027][ T6980] lo speed is unknown, defaulting to 1000 [ 133.646528][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 133.679000][ T6994] xt_TCPMSS: Only works on TCP SYN packets [ 133.807115][ T7002] netlink: 'syz.1.222': attribute type 11 has an invalid length. [ 133.895141][ T6999] bridge0: port 4(gretap0) entered blocking state [ 133.902422][ T6999] bridge0: port 4(gretap0) entered disabled state [ 133.924390][ T6999] gretap0: entered allmulticast mode [ 133.931010][ T6999] gretap0: entered promiscuous mode [ 133.938247][ T7004] gretap0: left allmulticast mode [ 133.947090][ T7004] gretap0: left promiscuous mode [ 133.952241][ T7004] bridge0: port 4(gretap0) entered disabled state [ 134.240185][ T7013] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 134.285924][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.524666][ T7013] lo speed is unknown, defaulting to 1000 [ 135.245129][ T5840] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 135.255674][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.325133][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 135.831789][ T7034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.232'. [ 135.862858][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 135.883238][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 136.014881][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 136.062802][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 136.220677][ T7041] lo speed is unknown, defaulting to 1000 [ 136.365033][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 136.908610][ T7066] netlink: 'syz.3.237': attribute type 11 has an invalid length. [ 137.405036][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.486738][ T7047] lo speed is unknown, defaulting to 1000 [ 137.692404][ T7046] lo speed is unknown, defaulting to 1000 [ 138.445046][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 138.687358][ T7080] __nla_validate_parse: 4 callbacks suppressed [ 138.687375][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 138.798178][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 138.809952][ T7082] nbd: device at index 64 is going down [ 139.175810][ T7090] batadv_slave_1: entered promiscuous mode [ 139.243324][ T7093] lo speed is unknown, defaulting to 1000 [ 139.485042][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.702278][ T7089] batadv_slave_1: left promiscuous mode [ 139.855605][ T7102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.936943][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 139.972167][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 140.059488][ T7107] netlink: 'syz.1.249': attribute type 11 has an invalid length. [ 140.273031][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 140.302741][ T7115] lo: left promiscuous mode [ 140.318702][ T7113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.251'. [ 140.353379][ T7115] tunl0: left promiscuous mode [ 140.373015][ T7115] gre0: left promiscuous mode [ 140.396510][ T7117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.252'. [ 140.447323][ T7115] gretap0: left promiscuous mode [ 140.480505][ T7115] erspan0: left promiscuous mode [ 140.516378][ T7115] ip_vti0: left promiscuous mode [ 140.525095][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.543000][ T7119] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 140.633039][ T7115] ip6_vti0: left promiscuous mode [ 140.677738][ T7115] sit0: left promiscuous mode [ 140.697408][ T7115] ip6tnl0: left promiscuous mode [ 140.797162][ T7115] ip6gre0: left promiscuous mode [ 140.834111][ T7125] netlink: 3 bytes leftover after parsing attributes in process `syz.0.253'. [ 140.915678][ T7115] syz_tun: left promiscuous mode [ 140.972535][ T7115] ip6gretap0: left promiscuous mode [ 141.018766][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.026318][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.062251][ T7132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.253'. [ 141.111954][ T7115] bridge0: left promiscuous mode [ 141.197226][ T7115] vcan0: left promiscuous mode [ 141.239429][ T7115] bond0: left promiscuous mode [ 141.244267][ T7115] bond_slave_0: left promiscuous mode [ 141.315307][ T7115] bond_slave_1: left promiscuous mode [ 141.331653][ T7115] team0: left promiscuous mode [ 141.373562][ T7115] team_slave_0: left promiscuous mode [ 141.402236][ T7115] team_slave_1: left promiscuous mode [ 141.432114][ T7115] dummy0: left promiscuous mode [ 141.486462][ T7115] nlmon0: left promiscuous mode [ 141.493457][ T7115] caif0: left promiscuous mode [ 141.565113][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.611079][ T7148] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 141.637079][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.686092][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.785547][ T7115] veth0_vlan: left allmulticast mode [ 141.877187][ T7115] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.905288][ T7115] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.913876][ T7115] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.935118][ T7115] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.997741][ T7115] ip6tnl1: left allmulticast mode [ 142.008321][ T7119] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 142.021354][ T7125] batadv1: entered promiscuous mode [ 142.045213][ T7125] batadv1: entered allmulticast mode [ 142.218398][ T7145] lo speed is unknown, defaulting to 1000 [ 142.401577][ T7164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.465415][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 142.605247][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.935649][ T7178] tc_dump_action: action bad kind [ 142.958978][ T7183] xt_TCPMSS: Only works on TCP SYN packets [ 143.015207][ T7185] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 143.029109][ T7183] lo speed is unknown, defaulting to 1000 [ 143.247849][ T7182] lo speed is unknown, defaulting to 1000 [ 143.645159][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.746602][ T7202] lo speed is unknown, defaulting to 1000 [ 144.182892][ T7210] __nla_validate_parse: 5 callbacks suppressed [ 144.182936][ T7210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'. [ 144.393315][ T7218] Cannot find del_set index 286 as target [ 144.685041][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.729963][ T7229] batadv_slave_1: entered promiscuous mode [ 144.834368][ T7231] dvmrp0: entered allmulticast mode [ 144.841937][ T7228] netlink: 152 bytes leftover after parsing attributes in process `syz.4.272'. [ 145.029901][ T7232] pimreg: entered allmulticast mode [ 145.115766][ T7227] batadv_slave_1: left promiscuous mode [ 145.388232][ T7237] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 145.397207][ T7237] netlink: 224 bytes leftover after parsing attributes in process `syz.2.275'. [ 145.493861][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'. [ 145.494789][ T7223] pimreg: left allmulticast mode [ 145.609273][ T7199] ªªªªª: port 2(bridge_slave_1) entered blocking state [ 145.616465][ T7199] ªªªªª: port 2(bridge_slave_1) entered forwarding state [ 145.623943][ T7199] ªªªªª: port 1(bridge_slave_0) entered blocking state [ 145.631030][ T7199] ªªªªª: port 1(bridge_slave_0) entered forwarding state [ 145.725088][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 145.741111][ T7199] ªªªªª: left promiscuous mode [ 145.833600][ T7199] ªªªªª: left allmulticast mode [ 145.866939][ T7199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.885577][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.277'. [ 145.897451][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 145.906690][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 145.973082][ T7250] lo speed is unknown, defaulting to 1000 [ 146.067561][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 146.153622][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 146.408684][ T7259] can: request_module (can-proto-3) failed. [ 146.437782][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 146.705993][ T7270] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 146.764900][ T7274] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 146.765242][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.221989][ T7248] netlink: 'syz.4.278': attribute type 13 has an invalid length. [ 147.384079][ T7270] batman_adv: batadv0: Adding interface: team0 [ 147.391384][ T7270] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.487371][ T7270] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 147.573625][ T7274] team0: entered promiscuous mode [ 147.579255][ T7274] team_slave_0: entered promiscuous mode [ 147.587403][ T7274] team_slave_1: entered promiscuous mode [ 147.621000][ T7274] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.635399][ T7274] batman_adv: batadv0: Interface activated: team0 [ 147.655244][ T7274] batman_adv: batadv0: Interface deactivated: team0 [ 147.661933][ T7274] batman_adv: batadv0: Removing interface: team0 [ 147.677501][ T7274] ªªªªª: port 3(team0) entered blocking state [ 147.683957][ T7274] ªªªªª: port 3(team0) entered disabled state [ 147.690769][ T7274] team0: entered allmulticast mode [ 147.696757][ T7274] team_slave_0: entered allmulticast mode [ 147.705099][ T7274] team_slave_1: entered allmulticast mode [ 147.727773][ T7274] ªªªªª: port 3(team0) entered blocking state [ 147.734211][ T7274] ªªªªª: port 3(team0) entered forwarding state [ 147.805046][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.857698][ T7275] lo speed is unknown, defaulting to 1000 [ 148.065747][ T7288] xt_CT: No such helper "snmp" [ 148.091473][ T7291] batadv_slave_1: entered promiscuous mode [ 148.258951][ T7290] batadv_slave_1: left promiscuous mode [ 148.834459][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.845044][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.194838][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.248437][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.445454][ T7297] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.464639][ T7297] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.504992][ T7297] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.524135][ T7297] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.585887][ T5923] lo speed is unknown, defaulting to 1000 [ 149.719120][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.741901][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.789310][ T7299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.847244][ T5923] lo speed is unknown, defaulting to 1000 [ 149.885030][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.892747][ T51] lo speed is unknown, defaulting to 1000 [ 150.020483][ T7307] dvmrp0: entered allmulticast mode [ 150.900420][ T7316] lo speed is unknown, defaulting to 1000 [ 150.925066][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.949952][ T7316] lo speed is unknown, defaulting to 1000 [ 150.976538][ T7316] lo speed is unknown, defaulting to 1000 [ 151.058957][ T7323] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 151.072035][ T7316] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.161529][ T7316] lo speed is unknown, defaulting to 1000 [ 151.180951][ T7316] lo speed is unknown, defaulting to 1000 [ 151.193960][ T7325] lo speed is unknown, defaulting to 1000 [ 151.206524][ T7316] lo speed is unknown, defaulting to 1000 [ 151.225233][ T7316] lo speed is unknown, defaulting to 1000 [ 151.232179][ T7316] lo speed is unknown, defaulting to 1000 [ 151.256290][ T7316] lo speed is unknown, defaulting to 1000 [ 151.349390][ T7316] lo speed is unknown, defaulting to 1000 [ 151.582753][ T7323] lo speed is unknown, defaulting to 1000 [ 151.691992][ T7334] netlink: 'syz.1.296': attribute type 27 has an invalid length. [ 151.965093][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.433496][ T7338] netlink: 'syz.3.295': attribute type 30 has an invalid length. [ 152.442507][ T7338] __nla_validate_parse: 3 callbacks suppressed [ 152.442525][ T7338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 152.850508][ T7345] lo speed is unknown, defaulting to 1000 [ 153.005053][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 153.232806][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 153.417249][ T7355] batadv_slave_1: entered promiscuous mode [ 153.496940][ T7359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.303'. [ 153.691935][ T7345] lo speed is unknown, defaulting to 1000 [ 153.692013][ T7346] lo speed is unknown, defaulting to 1000 [ 153.875573][ T7354] batadv_slave_1: left promiscuous mode [ 154.032092][ T7346] lo speed is unknown, defaulting to 1000 [ 154.045096][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.336003][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'. [ 154.351805][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 154.406256][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 154.500845][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 154.510401][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.520003][ T7342] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.563548][ T7342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.565690][ T7385] smc: removing ib device syz0 [ 154.608670][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 154.619753][ T7387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 154.677931][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 154.806410][ T7344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.946426][ T7391] netlink: 'syz.3.310': attribute type 13 has an invalid length. [ 155.021114][ T7392] lo speed is unknown, defaulting to 1000 [ 155.085061][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.146432][ T5885] lo speed is unknown, defaulting to 1000 [ 155.238308][ T7391] gretap0: refused to change device tx_queue_len [ 155.259386][ T7391] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 155.288117][ T7347] lo speed is unknown, defaulting to 1000 [ 155.550693][ T7402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.125033][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.750086][ T7404] lo speed is unknown, defaulting to 1000 [ 157.165088][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.170100][ T7429] batadv_slave_1: entered promiscuous mode [ 157.448862][ T7434] No such timeout policy "syz0" [ 157.678915][ T7436] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.709677][ T7428] batadv_slave_1: left promiscuous mode [ 158.156409][ T7442] lo speed is unknown, defaulting to 1000 [ 158.205035][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.278098][ T7443] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 158.315260][ T7443] CPU: 0 UID: 0 PID: 7443 Comm: syz.3.321 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 158.315291][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.315304][ T7443] Call Trace: [ 158.315311][ T7443] [ 158.315320][ T7443] dump_stack_lvl+0x241/0x360 [ 158.315353][ T7443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.315377][ T7443] ? __pfx__printk+0x10/0x10 [ 158.315419][ T7443] ? __kmalloc_cache_noprof+0x243/0x390 [ 158.315447][ T7443] ? sysfs_warn_dup+0x51/0xa0 [ 158.315474][ T7443] sysfs_warn_dup+0x8e/0xa0 [ 158.315498][ T7443] sysfs_do_create_link_sd+0xbe/0x110 [ 158.315525][ T7443] device_add_class_symlinks+0x1c5/0x250 [ 158.315559][ T7443] device_add+0x553/0xbf0 [ 158.315595][ T7443] wiphy_register+0x1922/0x2650 [ 158.315629][ T7443] ? __pfx_wiphy_register+0x10/0x10 [ 158.315647][ T7443] ? minstrel_ht_alloc+0x84b/0x940 [ 158.315676][ T7443] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 158.315705][ T7443] ieee80211_register_hw+0x35d9/0x42e0 [ 158.315741][ T7443] ? ieee80211_register_hw+0x15f1/0x42e0 [ 158.315774][ T7443] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 158.315809][ T7443] ? __asan_memset+0x23/0x50 [ 158.315829][ T7443] ? __hrtimer_init+0x170/0x250 [ 158.315854][ T7443] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 158.315907][ T7443] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 158.315928][ T7443] ? trace_kmalloc+0x1f/0xd0 [ 158.315959][ T7443] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 158.315987][ T7443] ? kstrndup+0xbb/0x150 [ 158.316023][ T7443] hwsim_new_radio_nl+0xece/0x2290 [ 158.316059][ T7443] ? __pfx___nla_validate_parse+0x10/0x10 [ 158.316084][ T7443] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 158.316139][ T7443] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 158.316179][ T7443] genl_rcv_msg+0xb1f/0xec0 [ 158.316217][ T7443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.316276][ T7443] ? __pfx_lock_acquire+0x10/0x10 [ 158.316319][ T7443] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 158.316343][ T7443] ? __pfx___might_resched+0x10/0x10 [ 158.316381][ T7443] netlink_rcv_skb+0x206/0x480 [ 158.316405][ T7443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.316435][ T7443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.316507][ T7443] genl_rcv+0x28/0x40 [ 158.316535][ T7443] netlink_unicast+0x7f6/0x990 [ 158.316567][ T7443] ? __pfx_netlink_unicast+0x10/0x10 [ 158.316586][ T7443] ? __virt_addr_valid+0x45f/0x530 [ 158.316608][ T7443] ? __phys_addr_symbol+0x2f/0x70 [ 158.316640][ T7443] ? __check_object_size+0x47a/0x730 [ 158.316673][ T7443] netlink_sendmsg+0x8de/0xcb0 [ 158.316713][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.316743][ T7443] ? aa_sock_msg_perm+0x91/0x160 [ 158.316781][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.316805][ T7443] __sock_sendmsg+0x221/0x270 [ 158.316846][ T7443] ____sys_sendmsg+0x53a/0x860 [ 158.316900][ T7443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.316928][ T7443] ? __fget_files+0x2a/0x410 [ 158.316967][ T7443] ? __fget_files+0x2a/0x410 [ 158.317005][ T7443] __sys_sendmsg+0x269/0x350 [ 158.317035][ T7443] ? __pfx_futex_wake+0x10/0x10 [ 158.317067][ T7443] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.317143][ T7443] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.317174][ T7443] ? do_syscall_64+0x100/0x230 [ 158.317207][ T7443] ? do_syscall_64+0xb6/0x230 [ 158.317239][ T7443] do_syscall_64+0xf3/0x230 [ 158.317267][ T7443] ? clear_bhb_loop+0x35/0x90 [ 158.317299][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.317324][ T7443] RIP: 0033:0x7fca2a78d169 [ 158.317341][ T7443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.317374][ T7443] RSP: 002b:00007fca2b660038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.317396][ T7443] RAX: ffffffffffffffda RBX: 00007fca2a9a6080 RCX: 00007fca2a78d169 [ 158.317411][ T7443] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 158.317424][ T7443] RBP: 00007fca2a80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.317436][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.317448][ T7443] R13: 0000000000000000 R14: 00007fca2a9a6080 R15: 00007ffe00dbb2f8 [ 158.317482][ T7443] [ 158.812351][ T7449] syzkaller1: entered promiscuous mode [ 158.852451][ T7450] Cannot find del_set index 4 as target [ 158.861081][ T7449] syzkaller1: entered allmulticast mode [ 158.868822][ T7456] __nla_validate_parse: 1 callbacks suppressed [ 158.868838][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 159.245067][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.496034][ T7471] SET target dimension over the limit! [ 159.644391][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 159.830083][ T7483] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 159.848888][ T7483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.143026][ T7493] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 160.156055][ T7494] batadv_slave_1: entered promiscuous mode [ 160.243927][ T7493] lo speed is unknown, defaulting to 1000 [ 160.285163][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.483296][ T7499] batadv_slave_1: entered promiscuous mode [ 160.493763][ T7496] lo speed is unknown, defaulting to 1000 [ 160.671599][ T7489] batadv_slave_1: left promiscuous mode [ 160.793535][ T7495] batadv_slave_1: left promiscuous mode [ 160.940019][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 161.325012][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 161.383455][ T7520] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 161.471184][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 161.481328][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 161.721311][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.340'. [ 161.724433][ T7529] netlink: 'syz.4.337': attribute type 10 has an invalid length. [ 161.758688][ T7529] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.876223][ T7528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.895445][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.919145][ T7528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.251620][ T7547] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 162.272543][ T7548] lo speed is unknown, defaulting to 1000 [ 162.359383][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 162.368441][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.434160][ T7547] lo speed is unknown, defaulting to 1000 [ 162.526883][ T7551] lo speed is unknown, defaulting to 1000 [ 162.991585][ T7566] netlink: 'syz.4.345': attribute type 27 has an invalid length. [ 163.062653][ T7570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.347'. [ 163.066674][ T7571] netlink: 'syz.0.348': attribute type 10 has an invalid length. [ 163.251321][ T51] lo speed is unknown, defaulting to 1000 [ 163.405031][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.040539][ T7593] xt_l2tp: v2 doesn't support IP mode [ 164.092521][ T7597] SET target dimension over the limit! [ 164.280488][ T7598] lo speed is unknown, defaulting to 1000 [ 164.340863][ T7602] lo speed is unknown, defaulting to 1000 [ 164.354168][ T7605] trusted_key: syz.4.356 sent an empty control message without MSG_MORE. [ 164.445047][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.824320][ T7614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.899086][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 164.909054][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 165.043592][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 165.097817][ T7617] netlink: 'syz.2.358': attribute type 10 has an invalid length. [ 165.152454][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 165.184823][ T7617] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 165.280816][ T7625] team0: left allmulticast mode [ 165.286011][ T7625] team_slave_0: left allmulticast mode [ 165.298326][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.354'. [ 165.312107][ T7625] team_slave_1: left allmulticast mode [ 165.319196][ T7625] team0: left promiscuous mode [ 165.324091][ T7625] team_slave_0: left promiscuous mode [ 165.336597][ T7625] team_slave_1: left promiscuous mode [ 165.342477][ T7625] bridge0: port 3(team0) entered disabled state [ 165.383895][ T7625] bridge_slave_1: left allmulticast mode [ 165.394667][ T7625] bridge_slave_1: left promiscuous mode [ 165.401828][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.421363][ T7625] bridge_slave_0: left allmulticast mode [ 165.430617][ T7625] bridge_slave_0: left promiscuous mode [ 165.440947][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.485046][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.514762][ T7625] bond0: (slave bridge0): Releasing backup interface [ 165.597869][ T7623] lo speed is unknown, defaulting to 1000 [ 165.632391][ T7596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.701938][ T7628] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 165.721937][ T7628] netlink: 228 bytes leftover after parsing attributes in process `syz.4.359'. [ 165.755166][ T7626] lo speed is unknown, defaulting to 1000 [ 166.306450][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 166.315992][ T7640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.363'. [ 166.365417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.436714][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 166.525113][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.529427][ T7649] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 166.624037][ T7640] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 166.651457][ T7640] gretap1: entered promiscuous mode [ 166.708360][ T7647] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.833611][ T7645] bond0: (slave bond_slave_0): Releasing backup interface [ 166.882568][ T7649] macvlan0: entered allmulticast mode [ 166.888922][ T7649] veth1_vlan: entered allmulticast mode [ 166.912973][ T7649] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 166.994375][ T7647] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.067695][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 167.085688][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.177054][ T7647] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.246554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.332478][ T7647] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.405257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.665792][ T7647] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.725911][ T7647] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.734712][ T7667] tap0: tun_chr_ioctl cmd 1074025677 [ 167.753142][ T7667] tap0: linktype set to 804 [ 167.783328][ T7647] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.820814][ T7647] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.899431][ T7669] lo speed is unknown, defaulting to 1000 [ 168.078177][ T7670] smc: net device bond0 applied user defined pnetid SYZ2 [ 168.445198][ C1] net_ratelimit: 4 callbacks suppressed [ 168.445214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.605156][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.646891][ T7686] lo speed is unknown, defaulting to 1000 [ 169.165473][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.174881][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.185439][ T7708] netlink: 'syz.2.376': attribute type 5 has an invalid length. [ 169.241964][ T7708] ip6gretap0: entered promiscuous mode [ 169.277412][ T7708] batadv_slave_0: entered promiscuous mode [ 169.311955][ T7708] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 169.325171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.335848][ T7708] Cannot create hsr debugfs directory [ 169.485180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.645068][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.880545][ T7721] lo speed is unknown, defaulting to 1000 [ 169.958611][ T7721] lo speed is unknown, defaulting to 1000 [ 170.042807][ T7728] lo speed is unknown, defaulting to 1000 [ 170.044382][ T7721] lo speed is unknown, defaulting to 1000 [ 170.117008][ T7729] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 170.165046][ T7729] CPU: 1 UID: 0 PID: 7729 Comm: syz.3.381 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 170.165077][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.165088][ T7729] Call Trace: [ 170.165095][ T7729] [ 170.165104][ T7729] dump_stack_lvl+0x241/0x360 [ 170.165134][ T7729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.165173][ T7729] ? __pfx__printk+0x10/0x10 [ 170.165200][ T7729] ? __kmalloc_cache_noprof+0x243/0x390 [ 170.165230][ T7729] ? sysfs_warn_dup+0x51/0xa0 [ 170.165262][ T7729] sysfs_warn_dup+0x8e/0xa0 [ 170.165287][ T7729] sysfs_do_create_link_sd+0xbe/0x110 [ 170.165317][ T7729] device_add_class_symlinks+0x1c5/0x250 [ 170.165354][ T7729] device_add+0x553/0xbf0 [ 170.165396][ T7729] wiphy_register+0x1922/0x2650 [ 170.165434][ T7729] ? __pfx_wiphy_register+0x10/0x10 [ 170.165455][ T7729] ? minstrel_ht_alloc+0x84b/0x940 [ 170.165486][ T7729] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 170.165517][ T7729] ieee80211_register_hw+0x35d9/0x42e0 [ 170.165559][ T7729] ? ieee80211_register_hw+0x15f1/0x42e0 [ 170.165594][ T7729] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 170.165633][ T7729] ? __asan_memset+0x23/0x50 [ 170.165654][ T7729] ? __hrtimer_init+0x170/0x250 [ 170.165682][ T7729] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 170.165739][ T7729] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 170.165762][ T7729] ? trace_kmalloc+0x1f/0xd0 [ 170.165788][ T7729] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 170.165818][ T7729] ? kstrndup+0xbb/0x150 [ 170.165861][ T7729] hwsim_new_radio_nl+0xece/0x2290 [ 170.165907][ T7729] ? __pfx___nla_validate_parse+0x10/0x10 [ 170.165936][ T7729] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 170.166000][ T7729] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 170.166043][ T7729] genl_rcv_msg+0xb1f/0xec0 [ 170.166086][ T7729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.166147][ T7729] ? __pfx_lock_acquire+0x10/0x10 [ 170.166179][ T7729] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 170.166205][ T7729] ? __pfx___might_resched+0x10/0x10 [ 170.166256][ T7729] netlink_rcv_skb+0x206/0x480 [ 170.166300][ T7729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.166332][ T7729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.166393][ T7729] genl_rcv+0x28/0x40 [ 170.166436][ T7729] netlink_unicast+0x7f6/0x990 [ 170.166468][ T7729] ? __pfx_netlink_unicast+0x10/0x10 [ 170.166486][ T7729] ? __virt_addr_valid+0x45f/0x530 [ 170.166517][ T7729] ? __phys_addr_symbol+0x2f/0x70 [ 170.166561][ T7729] ? __check_object_size+0x47a/0x730 [ 170.166592][ T7729] netlink_sendmsg+0x8de/0xcb0 [ 170.166628][ T7729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.166655][ T7729] ? aa_sock_msg_perm+0x91/0x160 [ 170.166693][ T7729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.166714][ T7729] __sock_sendmsg+0x221/0x270 [ 170.166741][ T7729] ____sys_sendmsg+0x53a/0x860 [ 170.166781][ T7729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.166808][ T7729] ? __fget_files+0x2a/0x410 [ 170.166837][ T7729] ? __fget_files+0x2a/0x410 [ 170.166874][ T7729] __sys_sendmsg+0x269/0x350 [ 170.166917][ T7729] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.166993][ T7729] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.167024][ T7729] ? do_syscall_64+0x100/0x230 [ 170.167057][ T7729] ? do_syscall_64+0xb6/0x230 [ 170.167088][ T7729] do_syscall_64+0xf3/0x230 [ 170.167117][ T7729] ? clear_bhb_loop+0x35/0x90 [ 170.167147][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.167172][ T7729] RIP: 0033:0x7fca2a78d169 [ 170.167189][ T7729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.167205][ T7729] RSP: 002b:00007fca2b660038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.167224][ T7729] RAX: ffffffffffffffda RBX: 00007fca2a9a6080 RCX: 00007fca2a78d169 [ 170.167238][ T7729] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 170.167250][ T7729] RBP: 00007fca2a80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.167262][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.167274][ T7729] R13: 0000000000000000 R14: 00007fca2a9a6080 R15: 00007ffe00dbb2f8 [ 170.167305][ T7729] [ 170.365401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.577169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.615139][ T7149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.946810][ T7721] infiniband syz0: set down [ 170.951386][ T7721] infiniband syz0: added lo [ 170.994089][ T7721] syz0: rxe_create_cq: returned err = -12 [ 171.010269][ T7721] infiniband syz0: Couldn't create ib_mad CQ [ 171.021863][ T7721] infiniband syz0: Couldn't open port 1 [ 171.065696][ T7721] RDS/IB: syz0: added [ 171.080073][ T7721] smc: adding ib device syz0 with port count 1 [ 171.095093][ T7721] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 171.127810][ T7149] lo speed is unknown, defaulting to 1000 [ 171.134031][ T5885] lo speed is unknown, defaulting to 1000 [ 171.159290][ T7721] lo speed is unknown, defaulting to 1000 [ 171.162671][ T7747] lo speed is unknown, defaulting to 1000 [ 171.491732][ T7719] __nla_validate_parse: 2 callbacks suppressed [ 171.491753][ T7719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.379'. [ 171.625263][ T7721] lo speed is unknown, defaulting to 1000 [ 171.794653][ T7759] xt_nfacct: accounting object `syz1' does not exists [ 171.989358][ T7747] lo speed is unknown, defaulting to 1000 [ 172.239692][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 172.448738][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.528295][ T7743] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.575602][ T7775] netlink: 'syz.2.389': attribute type 11 has an invalid length. [ 172.720102][ T7721] lo speed is unknown, defaulting to 1000 [ 172.796030][ T7781] netlink: 40 bytes leftover after parsing attributes in process `syz.4.390'. [ 172.835177][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'. [ 172.902263][ T7778] batman_adv: batadv0: Interface deactivated: dummy0 [ 172.929855][ T7778] batadv0: left promiscuous mode [ 173.099105][ T7721] lo speed is unknown, defaulting to 1000 [ 173.377068][ T7793] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 173.386971][ T7791] netlink: 'syz.4.393': attribute type 10 has an invalid length. [ 173.395148][ T7791] team0: Device bridge0 is already an upper device of the team interface [ 173.503941][ T7721] lo speed is unknown, defaulting to 1000 [ 173.645306][ C1] net_ratelimit: 13 callbacks suppressed [ 173.645331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.681201][ T7721] lo speed is unknown, defaulting to 1000 [ 173.726151][ T7152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.805201][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.002026][ T7721] lo speed is unknown, defaulting to 1000 [ 174.305336][ T7721] lo speed is unknown, defaulting to 1000 [ 174.513482][ T7721] lo speed is unknown, defaulting to 1000 [ 174.685176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.731036][ T7793] lo speed is unknown, defaulting to 1000 [ 174.755404][ T7750] lo speed is unknown, defaulting to 1000 [ 174.765753][ T7152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.797944][ T7799] lo speed is unknown, defaulting to 1000 [ 174.845275][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.949191][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.394'. [ 175.014775][ T7806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.085498][ T7808] xt_l2tp: v2 sid > 0xffff: 262144 [ 175.110363][ T7798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.133561][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 175.156921][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 175.179488][ T7808] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 175.250506][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.379889][ T7800] lo speed is unknown, defaulting to 1000 [ 175.530040][ T7800] lo speed is unknown, defaulting to 1000 [ 175.725294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.947113][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.400'. [ 176.059922][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 176.249235][ T7834] netlink: 'syz.0.401': attribute type 27 has an invalid length. [ 176.964922][ T7845] netlink: 'syz.1.404': attribute type 11 has an invalid length. [ 177.304573][ T7854] lo speed is unknown, defaulting to 1000 [ 177.408390][ T7854] lo speed is unknown, defaulting to 1000 [ 177.637163][ T7861] lo speed is unknown, defaulting to 1000 [ 177.967741][ T7869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.409'. [ 178.146048][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 178.211438][ T7861] lo speed is unknown, defaulting to 1000 [ 178.579944][ T7885] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 178.705569][ T7885] lo speed is unknown, defaulting to 1000 [ 178.855227][ C1] net_ratelimit: 11 callbacks suppressed [ 178.855250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.858240][ T7885] lo speed is unknown, defaulting to 1000 [ 178.925956][ T7149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.992773][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 179.005213][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.022125][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 179.165290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.428809][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 179.485065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.533433][ T7897] lo speed is unknown, defaulting to 1000 [ 179.582541][ T7897] lo speed is unknown, defaulting to 1000 [ 179.721526][ T7910] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.416'. [ 179.775850][ T7910] openvswitch: netlink: Message has 8 unknown bytes. [ 179.811005][ T7149] IPVS: starting estimator thread 0... [ 179.905325][ T7913] IPVS: using max 19 ests per chain, 45600 per kthread [ 180.045157][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.131086][ T7909] ªªªªª: port 3(team0) entered disabled state [ 180.137567][ T7909] ªªªªª: port 2(bridge_slave_1) entered disabled state [ 180.144712][ T7909] ªªªªª: port 1(bridge_slave_0) entered disabled state [ 180.430202][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.453348][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.496167][ T7909] veth0_vlan: left allmulticast mode [ 180.610823][ T7909] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.620417][ T7909] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.633831][ T7909] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.643964][ T7909] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.674168][ T7909] ip6tnl1: left allmulticast mode [ 180.690510][ T7910] tipc: Started in network mode [ 180.698866][ T7910] tipc: Node identity ac14142f, cluster identity 4711 [ 180.709232][ T7910] tipc: New replicast peer: 0.0.0.0 [ 180.727829][ T7910] tipc: Enabled bearer , priority 10 [ 180.744586][ T7911] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 181.015663][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 181.085117][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.125285][ T7927] lo speed is unknown, defaulting to 1000 [ 181.175270][ T7929] lo speed is unknown, defaulting to 1000 [ 181.207145][ T7929] lo speed is unknown, defaulting to 1000 [ 181.257861][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.422'. [ 181.382854][ T7946] pim6reg: entered allmulticast mode [ 181.403589][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.419'. [ 181.416806][ T7946] pim6reg: left allmulticast mode [ 181.562817][ T7916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.573475][ T7916] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.597961][ T7916] batman_adv: batadv0: Interface activated: dummy0 [ 181.615225][ T7916] batadv0: mtu less than device minimum [ 181.623277][ T7916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.692982][ T7951] netlink: 830 bytes leftover after parsing attributes in process `syz.1.424'. [ 181.706564][ T5912] tipc: Node number set to 2886997039 [ 182.003739][ T7927] lo speed is unknown, defaulting to 1000 [ 182.110607][ T7926] lo speed is unknown, defaulting to 1000 [ 182.238589][ T7969] Cannot find del_set index 2416 as target [ 182.312408][ T7966] lo speed is unknown, defaulting to 1000 [ 182.667530][ T7926] lo speed is unknown, defaulting to 1000 [ 183.012687][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 183.081539][ T7966] lo speed is unknown, defaulting to 1000 [ 183.638088][ T7989] lo speed is unknown, defaulting to 1000 [ 183.764024][ T7996] team0: left allmulticast mode [ 183.769298][ T7996] team_slave_0: left allmulticast mode [ 183.774851][ T7996] team_slave_1: left allmulticast mode [ 183.804408][ T7996] team0: left promiscuous mode [ 183.813569][ T7996] team_slave_0: left promiscuous mode [ 183.826271][ T7996] team_slave_1: left promiscuous mode [ 183.832003][ T7996] ªªªªª: port 3(team0) entered disabled state [ 183.895246][ T7997] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 183.955676][ T7996] bridge_slave_0: left allmulticast mode [ 183.965039][ T7996] bridge_slave_0: left promiscuous mode [ 183.986886][ T7996] ªªªªª: port 1(bridge_slave_0) entered disabled state [ 184.007627][ T7996] bridge_slave_1: left allmulticast mode [ 184.013342][ T7996] bridge_slave_1: left promiscuous mode [ 184.035397][ T7996] ªªªªª: port 2(bridge_slave_1) entered disabled state [ 184.052757][ T7996] bond0: (slave bond_slave_0): Releasing backup interface [ 184.063451][ T7996] bond0: (slave bond_slave_1): Releasing backup interface [ 184.093683][ T7996] team0: Port device team_slave_0 removed [ 184.112600][ T7996] team0: Port device team_slave_1 removed [ 184.130167][ T7996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.145746][ T7996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.169092][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 184.194850][ T7989] lo speed is unknown, defaulting to 1000 [ 184.205253][ C0] net_ratelimit: 21 callbacks suppressed [ 184.205273][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.246424][ T7997] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.272722][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 185.002188][ T8014] netlink: 'syz.4.434': attribute type 21 has an invalid length. [ 185.025931][ T8015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.435'. [ 185.041379][ T8014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.434'. [ 185.245057][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.270150][ T8032] team0 (unregistering): Port device team_slave_0 removed [ 186.283502][ T8032] team0 (unregistering): Port device team_slave_1 removed [ 186.285333][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.383626][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.433'. [ 186.642755][ T8056] lo speed is unknown, defaulting to 1000 [ 186.682265][ T8056] lo speed is unknown, defaulting to 1000 [ 186.883843][ T8064] lo speed is unknown, defaulting to 1000 [ 186.947641][ T8066] lo speed is unknown, defaulting to 1000 [ 186.955108][ T8070] veth1_vlan: left allmulticast mode [ 186.968329][ T8070] macvlan0: left allmulticast mode [ 186.999862][ T8070] gretap1: left promiscuous mode [ 187.025046][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.446'. [ 187.325081][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.514044][ T8064] lo speed is unknown, defaulting to 1000 [ 187.530463][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.445'. [ 187.584316][ T8089] netlink: 'syz.2.450': attribute type 27 has an invalid length. [ 187.742192][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.762298][ T8088] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.809680][ T8088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.971918][ T8091] lo speed is unknown, defaulting to 1000 [ 188.137950][ T8066] lo speed is unknown, defaulting to 1000 [ 188.240480][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.452'. [ 188.254464][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.440'. [ 188.365085][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.389736][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 188.621247][ T8072] lo speed is unknown, defaulting to 1000 [ 188.688125][ T8052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.808368][ T8054] lo speed is unknown, defaulting to 1000 [ 189.014088][ T8091] lo speed is unknown, defaulting to 1000 [ 189.405037][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.446745][ T8072] lo speed is unknown, defaulting to 1000 [ 189.633217][ T8054] lo speed is unknown, defaulting to 1000 [ 189.859539][ T8124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.983715][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 190.015415][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 190.445041][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.818325][ T8128] lo speed is unknown, defaulting to 1000 [ 190.848082][ T8128] lo speed is unknown, defaulting to 1000 [ 190.875268][ T8131] lo speed is unknown, defaulting to 1000 [ 191.447873][ T8131] lo speed is unknown, defaulting to 1000 [ 191.485067][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.945595][ T8160] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 192.273160][ T8160] lo speed is unknown, defaulting to 1000 [ 192.416692][ T8160] lo speed is unknown, defaulting to 1000 [ 192.525046][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.729072][ T8174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.816225][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 192.826143][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 193.303102][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 193.461645][ T8179] lo speed is unknown, defaulting to 1000 [ 193.497855][ T8179] lo speed is unknown, defaulting to 1000 [ 193.565084][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.116048][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 194.238802][ T8193] Cannot find del_set index 286 as target [ 194.589225][ T8194] lo speed is unknown, defaulting to 1000 [ 194.605032][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.672431][ T8194] lo speed is unknown, defaulting to 1000 [ 195.182616][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 195.424794][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.474'. [ 195.440591][ T8218] netlink: 'syz.0.482': attribute type 21 has an invalid length. [ 195.467662][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 195.487232][ T8217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.545380][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 195.636678][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 195.645084][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.732381][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.774482][ T8191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.843618][ T8220] lo speed is unknown, defaulting to 1000 [ 195.863063][ T8220] lo speed is unknown, defaulting to 1000 [ 196.377015][ T8232] netlink: 'syz.2.486': attribute type 11 has an invalid length. [ 196.386504][ T8232] [ 196.388853][ T8232] ===================================== [ 196.394391][ T8232] WARNING: bad unlock balance detected! [ 196.399931][ T8232] 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 Not tainted [ 196.407034][ T8232] ------------------------------------- [ 196.412571][ T8232] syz.2.486/8232 is trying to release lock (rtnl_mutex) at: [ 196.419914][ T8232] [] __rtnl_unlock+0x6c/0xf0 [ 196.426110][ T8232] but there are no more locks to release! [ 196.431823][ T8232] [ 196.431823][ T8232] other info that might help us debug this: [ 196.439895][ T8232] no locks held by syz.2.486/8232. [ 196.445007][ T8232] [ 196.445007][ T8232] stack backtrace: [ 196.450921][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.2.486 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 196.450943][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.450953][ T8232] Call Trace: [ 196.450960][ T8232] [ 196.450968][ T8232] dump_stack_lvl+0x241/0x360 [ 196.450990][ T8232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.451007][ T8232] ? __pfx__printk+0x10/0x10 [ 196.451025][ T8232] ? __rtnl_unlock+0x6c/0xf0 [ 196.451047][ T8232] print_unlock_imbalance_bug+0x25b/0x2d0 [ 196.451064][ T8232] ? preempt_schedule+0xe1/0xf0 [ 196.451085][ T8232] ? preempt_schedule_common+0x84/0xd0 [ 196.451104][ T8232] ? __pfx_print_unlock_imbalance_bug+0x10/0x10 [ 196.451121][ T8232] ? preempt_schedule+0xe1/0xf0 [ 196.451157][ T8232] ? _printk+0xd5/0x120 [ 196.451173][ T8232] lock_release+0x47e/0xa30 [ 196.451196][ T8232] ? __lock_acquire+0x1397/0x2100 [ 196.451219][ T8232] ? __rtnl_unlock+0x6c/0xf0 [ 196.451239][ T8232] ? __pfx_lock_release+0x10/0x10 [ 196.451265][ T8232] ? __rtnl_unlock+0x6c/0xf0 [ 196.451286][ T8232] __mutex_unlock_slowpath+0xec/0x800 [ 196.451312][ T8232] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.451335][ T8232] ? __pfx_lock_release+0x10/0x10 [ 196.451357][ T8232] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.451412][ T8232] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 196.451436][ T8232] __rtnl_unlock+0x6c/0xf0 [ 196.451457][ T8232] lwtunnel_valid_encap_type+0x38a/0x5f0 [ 196.451480][ T8232] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 196.451521][ T8232] lwtunnel_valid_encap_type_attr+0x113/0x270 [ 196.451546][ T8232] rtm_to_fib_config+0x949/0x14e0 [ 196.451579][ T8232] inet_rtm_newroute+0xf6/0x2a0 [ 196.451603][ T8232] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 196.451635][ T8232] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 196.451659][ T8232] rtnetlink_rcv_msg+0x791/0xcf0 [ 196.451677][ T8232] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 196.451696][ T8232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.451717][ T8232] ? ref_tracker_free+0x643/0x7e0 [ 196.451745][ T8232] netlink_rcv_skb+0x206/0x480 [ 196.451764][ T8232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.451783][ T8232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.451810][ T8232] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.451828][ T8232] netlink_unicast+0x7f6/0x990 [ 196.451847][ T8232] ? __pfx_netlink_unicast+0x10/0x10 [ 196.451862][ T8232] ? __virt_addr_valid+0x45f/0x530 [ 196.451877][ T8232] ? __phys_addr_symbol+0x2f/0x70 [ 196.451902][ T8232] ? __check_object_size+0x47a/0x730 [ 196.451924][ T8232] netlink_sendmsg+0x8de/0xcb0 [ 196.451948][ T8232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.451968][ T8232] ? aa_sock_msg_perm+0x91/0x160 [ 196.451993][ T8232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.452011][ T8232] __sock_sendmsg+0x221/0x270 [ 196.452031][ T8232] ____sys_sendmsg+0x53a/0x860 [ 196.452058][ T8232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.452082][ T8232] ? __fget_files+0x2a/0x410 [ 196.452105][ T8232] ? __fget_files+0x2a/0x410 [ 196.452130][ T8232] __sys_sendmsg+0x269/0x350 [ 196.452154][ T8232] ? __pfx_futex_wake+0x10/0x10 [ 196.452179][ T8232] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.452219][ T8232] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.452243][ T8232] ? do_syscall_64+0x100/0x230 [ 196.452268][ T8232] ? do_syscall_64+0xb6/0x230 [ 196.452293][ T8232] do_syscall_64+0xf3/0x230 [ 196.452316][ T8232] ? clear_bhb_loop+0x35/0x90 [ 196.452341][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.452371][ T8232] RIP: 0033:0x7f945a18d169 [ 196.452392][ T8232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.452406][ T8232] RSP: 002b:00007f945af0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.452425][ T8232] RAX: ffffffffffffffda RBX: 00007f945a3a5fa0 RCX: 00007f945a18d169 [ 196.452437][ T8232] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 196.452448][ T8232] RBP: 00007f945a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.452459][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.452469][ T8232] R13: 0000000000000000 R14: 00007f945a3a5fa0 R15: 00007ffe6dd8c518 [ 196.452487][ T8232] [ 196.854788][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.880488][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 196.886658][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.892734][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 196.898822][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 196.970040][ T8239] lo speed is unknown, defaulting to 1000 [ 196.980486][ T8220] ------------[ cut here ]------------ [ 196.981221][ T8239] lo speed is unknown, defaulting to 1000 [ 196.986119][ T8220] RTNL: assertion failed at net/core/dev.c (10659) [ 197.024072][ T8220] WARNING: CPU: 1 PID: 8220 at net/core/dev.c:10659 __netdev_update_features+0x1638/0x1980 [ 197.034223][ T8220] Modules linked in: [ 197.038267][ T8220] CPU: 1 UID: 0 PID: 8220 Comm: syz.1.484 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 197.048974][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.059114][ T8220] RIP: 0010:__netdev_update_features+0x1638/0x1980 [ 197.065758][ T8220] Code: cc cc cc cc e8 a9 27 f5 f7 c6 05 f7 81 5a 06 01 90 48 c7 c7 00 4a 2e 8d 48 c7 c6 e0 49 2e 8d ba a3 29 00 00 e8 e9 e3 b4 f7 90 <0f> 0b 90 90 e9 a8 ea ff ff e8 7a 27 f5 f7 90 0f 0b 90 e9 7d f0 ff [ 197.085554][ T8220] RSP: 0018:ffffc9001dd87700 EFLAGS: 00010246 [ 197.091655][ T8220] RAX: 10c79f34a23c2300 RBX: 0000000000000000 RCX: 0000000000080000 [ 197.099704][ T8220] RDX: ffffc90004d63000 RSI: 000000000007ffff RDI: 0000000000080000 [ 197.107749][ T8220] RBP: ffffc9001dd87930 R08: ffffffff81817e32 R09: 1ffffffff2079ece [ 197.115829][ T8220] R10: dffffc0000000000 R11: fffffbfff2079ecf R12: ffff88803060a000 [ 197.123830][ T8220] R13: ffff88803060a000 R14: ffff88803060acc0 R15: dffffc0000000000 [ 197.131985][ T8220] FS: 00007fb720e0c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 197.140995][ T8220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.147631][ T8220] CR2: 0000001b30213ff8 CR3: 0000000029b70000 CR4: 00000000003526f0 [ 197.155653][ T8220] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.163644][ T8220] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.171682][ T8220] Call Trace: [ 197.175019][ T8220] [ 197.177967][ T8220] ? __warn+0x165/0x4d0 [ 197.182155][ T8220] ? __netdev_update_features+0x1638/0x1980 [ 197.188119][ T8220] ? report_bug+0x2b3/0x500 [ 197.192650][ T8220] ? __netdev_update_features+0x1638/0x1980 [ 197.198638][ T8220] ? handle_bug+0x60/0x90 [ 197.202997][ T8220] ? exc_invalid_op+0x1a/0x50 [ 197.207738][ T8220] ? asm_exc_invalid_op+0x1a/0x20 [ 197.212801][ T8220] ? __warn_printk+0x292/0x360 [ 197.217623][ T8220] ? __netdev_update_features+0x1638/0x1980 [ 197.223558][ T8220] ? __pfx___mutex_trylock_common+0x10/0x10 [ 197.229497][ T8220] ? __pfx_lock_release+0x10/0x10 [ 197.234564][ T8220] ? rcu_is_watching+0x15/0xb0 [ 197.239419][ T8220] ? __pfx___netdev_update_features+0x10/0x10 [ 197.245700][ T8220] ? __mutex_lock+0x397/0x1010 [ 197.250495][ T8220] ? __mutex_unlock_slowpath+0x227/0x800 [ 197.256183][ T8220] ? __mutex_unlock_slowpath+0x227/0x800 [ 197.261842][ T8220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.267870][ T8220] ? netdev_register_kobject+0x2b0/0x2f0 [ 197.273542][ T8220] register_netdevice+0x14e1/0x1b60 [ 197.278837][ T8220] ? __pfx_register_netdevice+0x10/0x10 [ 197.284418][ T8220] ? sized_strscpy+0x9a/0x2b0 [ 197.289145][ T8220] register_netdev+0x40/0x50 [ 197.293750][ T8220] vti6_init_net+0x23c/0x380 [ 197.298439][ T8220] ops_init+0x349/0x5b0 [ 197.302626][ T8220] setup_net+0x287/0x9e0 [ 197.306924][ T8220] ? __pfx_down_read_killable+0x10/0x10 [ 197.307500][ T8234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.485'. [ 197.312488][ T8220] ? __pfx_setup_net+0x10/0x10 [ 197.326216][ T8220] ? debug_mutex_init+0x38/0x70 [ 197.331097][ T8220] copy_net_ns+0x33f/0x570 [ 197.335593][ T8220] create_new_namespaces+0x425/0x7b0 [ 197.340920][ T8220] unshare_nsproxy_namespaces+0x124/0x180 [ 197.344377][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.346689][ T8220] ksys_unshare+0x57d/0xa70 [ 197.346730][ T8220] ? __pfx_ksys_unshare+0x10/0x10 [ 197.363277][ T8220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.369896][ T8220] ? exc_page_fault+0x590/0x8b0 [ 197.374789][ T8220] __x64_sys_unshare+0x38/0x40 [ 197.378861][ T8234] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.379982][ T8220] do_syscall_64+0xf3/0x230 [ 197.390704][ T8220] ? clear_bhb_loop+0x35/0x90 [ 197.395467][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.399082][ T8234] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 197.401382][ T8220] RIP: 0033:0x7fb71ff8d169 [ 197.401405][ T8220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.425891][ T8234] caif:caif_disconnect_client(): nothing to disconnect [ 197.434299][ T8220] RSP: 002b:00007fb720e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 197.449621][ T8220] RAX: ffffffffffffffda RBX: 00007fb7201a5fa0 RCX: 00007fb71ff8d169 [ 197.457649][ T8220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 197.465691][ T8220] RBP: 00007fb72000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.473685][ T8220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.481716][ T8220] R13: 0000000000000001 R14: 00007fb7201a5fa0 R15: 00007ffce05211a8 [ 197.489789][ T8220] [ 197.492845][ T8220] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 197.500143][ T8220] CPU: 1 UID: 0 PID: 8220 Comm: syz.1.484 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 197.510745][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.520849][ T8220] Call Trace: [ 197.524140][ T8220] [ 197.527094][ T8220] dump_stack_lvl+0x241/0x360 [ 197.531798][ T8220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.537005][ T8220] ? __pfx__printk+0x10/0x10 [ 197.541603][ T8220] ? _printk+0xd5/0x120 [ 197.545760][ T8220] ? __init_begin+0x41000/0x41000 [ 197.550825][ T8220] ? vscnprintf+0x5d/0x90 [ 197.555164][ T8220] panic+0x349/0x880 [ 197.559066][ T8220] ? __warn+0x174/0x4d0 [ 197.563238][ T8220] ? __pfx_panic+0x10/0x10 [ 197.567669][ T8220] __warn+0x344/0x4d0 [ 197.571668][ T8220] ? __netdev_update_features+0x1638/0x1980 [ 197.577576][ T8220] report_bug+0x2b3/0x500 [ 197.581908][ T8220] ? __netdev_update_features+0x1638/0x1980 [ 197.587814][ T8220] handle_bug+0x60/0x90 [ 197.591975][ T8220] exc_invalid_op+0x1a/0x50 [ 197.596491][ T8220] asm_exc_invalid_op+0x1a/0x20 [ 197.601436][ T8220] RIP: 0010:__netdev_update_features+0x1638/0x1980 [ 197.607968][ T8220] Code: cc cc cc cc e8 a9 27 f5 f7 c6 05 f7 81 5a 06 01 90 48 c7 c7 00 4a 2e 8d 48 c7 c6 e0 49 2e 8d ba a3 29 00 00 e8 e9 e3 b4 f7 90 <0f> 0b 90 90 e9 a8 ea ff ff e8 7a 27 f5 f7 90 0f 0b 90 e9 7d f0 ff [ 197.627578][ T8220] RSP: 0018:ffffc9001dd87700 EFLAGS: 00010246 [ 197.633652][ T8220] RAX: 10c79f34a23c2300 RBX: 0000000000000000 RCX: 0000000000080000 [ 197.641622][ T8220] RDX: ffffc90004d63000 RSI: 000000000007ffff RDI: 0000000000080000 [ 197.649588][ T8220] RBP: ffffc9001dd87930 R08: ffffffff81817e32 R09: 1ffffffff2079ece [ 197.657555][ T8220] R10: dffffc0000000000 R11: fffffbfff2079ecf R12: ffff88803060a000 [ 197.665524][ T8220] R13: ffff88803060a000 R14: ffff88803060acc0 R15: dffffc0000000000 [ 197.673499][ T8220] ? __warn_printk+0x292/0x360 [ 197.678302][ T8220] ? __pfx___mutex_trylock_common+0x10/0x10 [ 197.684204][ T8220] ? __pfx_lock_release+0x10/0x10 [ 197.689258][ T8220] ? rcu_is_watching+0x15/0xb0 [ 197.694025][ T8220] ? __pfx___netdev_update_features+0x10/0x10 [ 197.700098][ T8220] ? __mutex_lock+0x397/0x1010 [ 197.704866][ T8220] ? __mutex_unlock_slowpath+0x227/0x800 [ 197.710597][ T8220] ? __mutex_unlock_slowpath+0x227/0x800 [ 197.716240][ T8220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.722237][ T8220] ? netdev_register_kobject+0x2b0/0x2f0 [ 197.727883][ T8220] register_netdevice+0x14e1/0x1b60 [ 197.733103][ T8220] ? __pfx_register_netdevice+0x10/0x10 [ 197.738663][ T8220] ? sized_strscpy+0x9a/0x2b0 [ 197.743364][ T8220] register_netdev+0x40/0x50 [ 197.747974][ T8220] vti6_init_net+0x23c/0x380 [ 197.752564][ T8220] ops_init+0x349/0x5b0 [ 197.756743][ T8220] setup_net+0x287/0x9e0 [ 197.761002][ T8220] ? __pfx_down_read_killable+0x10/0x10 [ 197.766551][ T8220] ? __pfx_setup_net+0x10/0x10 [ 197.771320][ T8220] ? debug_mutex_init+0x38/0x70 [ 197.776181][ T8220] copy_net_ns+0x33f/0x570 [ 197.780599][ T8220] create_new_namespaces+0x425/0x7b0 [ 197.785895][ T8220] unshare_nsproxy_namespaces+0x124/0x180 [ 197.791623][ T8220] ksys_unshare+0x57d/0xa70 [ 197.796140][ T8220] ? __pfx_ksys_unshare+0x10/0x10 [ 197.801200][ T8220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.807556][ T8220] ? exc_page_fault+0x590/0x8b0 [ 197.812422][ T8220] __x64_sys_unshare+0x38/0x40 [ 197.817189][ T8220] do_syscall_64+0xf3/0x230 [ 197.821696][ T8220] ? clear_bhb_loop+0x35/0x90 [ 197.826381][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.832283][ T8220] RIP: 0033:0x7fb71ff8d169 [ 197.836697][ T8220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.856304][ T8220] RSP: 002b:00007fb720e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 197.864729][ T8220] RAX: ffffffffffffffda RBX: 00007fb7201a5fa0 RCX: 00007fb71ff8d169 [ 197.872722][ T8220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 197.880698][ T8220] RBP: 00007fb72000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.888671][ T8220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.896640][ T8220] R13: 0000000000000001 R14: 00007fb7201a5fa0 R15: 00007ffce05211a8 [ 197.904616][ T8220] [ 197.907952][ T8220] Kernel Offset: disabled [ 197.912303][ T8220] Rebooting in 86400 seconds..