last executing test programs: 1m29.678845552s ago: executing program 3 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000000ffffffffffff0802110000005050505050500040040400008800760604051900030000000600cd00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000100)={0x1d, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x41, 0x4, 0x1, 0x0, 0x104, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x89, 0xe, "ec7d3e3ee0b512c4c55e9c43"}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@loopback, 0x9}, {@private=0xa010100, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9d3}, {@private=0xa010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0x4, [{@multicast2, 0x991}, {@multicast1, 0x4}, {@broadcast, 0x308}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8000}, {@multicast2, 0x10}]}, @lsrr={0x83, 0x1b, 0x3f, [@private=0xa010102, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0xf, 0xb6, [@rand_addr=0x64010102, @multicast2, @multicast2]}, @generic={0x86, 0xa, "c12f7fbbd7ef9167"}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0x7, "7aa03cd044"}, {0x5, 0xe, "6a9fd990e14ac7c4c561488b"}, {0x2, 0x8, "26335d07f20d"}, {0x7, 0xd, "7ad1cb097df2f1d59731da"}, {0x6, 0x8, "e10490959d30"}, {0x6, 0x2}, {0xc7560b093dbdb3c6, 0x7, "dd57654c1a"}, {0x2, 0xb, "a4e017caa119b03502"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0x40, 0x8, {{0x17, 0x4, 0x3, 0x17, 0x5c, 0x68, 0x0, 0x8d, 0x4, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x13, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, @rand_addr=0x64010102]}, @ssrr={0x89, 0x27, 0x99, [@multicast2, @multicast2, @rand_addr=0x64010101, @rand_addr, @multicast2, @empty, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x7, [{@rand_addr=0x64010102}]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x17, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x7}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3}}, {0x4}}]}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x89, 0x184b, 0x14, @local, @private1, 0x8000, 0x8000, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x7, 0x6, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0xde1, 0x1}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000005f1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000d40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="e0010000", @ANYBLOB="1b5b01b7b59e96fbfc051ea45de38b7300201ea6004b21af13def503db5c3284d888c4376a8e40c2a34d33f7b7e03ef5682f3b00974db57514e5c5cf2ce3233671e81d2cd8e86ea440898f0fd5a9fafdd4fd9f232c6dbe8dade26b4000", @ANYBLOB="c10c28bd7000ffdbdf2509000000900001801400020076657468305f746f5f626f6e640000001400020076657468315f746f5f626174616476001400020070696d367265673000000000000000001400020069703667726574617030000000000000140002007465616d5f736c6176655f300000000014000200766574683000000000000000000000001400020064766d727030000000000000000000000c00018008000300020000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000200726f7365300000000000000000000000080001003f0d88057c330700000000000000963b0d7e0ae8e38a720db9f16a5a8b574217d7d39a89dd67f5e071bd6dba43ef5de8b97a2bc076beb968b78e50c598a9cf3d46962bdcac0b5c7ddcdccbc5a1323fc60085bf1afbf6dce7f651af7acbae4ba1fab0796e33349e857a4b1a37e2619deef79bf8d67af2cd9ea29d35dd679cfa673a84f6abde8f2fe5622ec66fe9", @ANYRES32=r6, @ANYBLOB="90007087", @ANYRES32=r7, @ANYRES8=r8, @ANYRES32=r9, @ANYBLOB="1400020069703665727370616e300000000000001400020073797a5f74756e000000000000000000140002007767310000000000000000000000000008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32, @ANYBLOB="140002006d6163766c616e31000000000000000050000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES8, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020067726530000000000000000000010000000022e9b1696dbaaafc86a27e335dcfb9e2c8229dd2cf45a8bdf68fbda8afafecb3a550d74efa26781c8803fd626b5dda9e6514f909bf3bff046a7cbde8b7950465ef", @ANYRES32=r14, @ANYBLOB="080003000000000008000300020000002000018008000300000000001400020076657468315f6d616376746170000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x44084}, 0x150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$rose(r17, 0x104, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 1m19.292004893s ago: executing program 3 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000000ffffffffffff0802110000005050505050500040040400008800760604051900030000000600cd00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000100)={0x1d, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x41, 0x4, 0x1, 0x0, 0x104, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x89, 0xe, "ec7d3e3ee0b512c4c55e9c43"}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@loopback, 0x9}, {@private=0xa010100, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9d3}, {@private=0xa010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0x4, [{@multicast2, 0x991}, {@multicast1, 0x4}, {@broadcast, 0x308}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8000}, {@multicast2, 0x10}]}, @lsrr={0x83, 0x1b, 0x3f, [@private=0xa010102, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0xf, 0xb6, [@rand_addr=0x64010102, @multicast2, @multicast2]}, @generic={0x86, 0xa, "c12f7fbbd7ef9167"}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0x7, "7aa03cd044"}, {0x5, 0xe, "6a9fd990e14ac7c4c561488b"}, {0x2, 0x8, "26335d07f20d"}, {0x7, 0xd, "7ad1cb097df2f1d59731da"}, {0x6, 0x8, "e10490959d30"}, {0x6, 0x2}, {0xc7560b093dbdb3c6, 0x7, "dd57654c1a"}, {0x2, 0xb, "a4e017caa119b03502"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0x40, 0x8, {{0x17, 0x4, 0x3, 0x17, 0x5c, 0x68, 0x0, 0x8d, 0x4, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x13, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, @rand_addr=0x64010102]}, @ssrr={0x89, 0x27, 0x99, [@multicast2, @multicast2, @rand_addr=0x64010101, @rand_addr, @multicast2, @empty, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x7, [{@rand_addr=0x64010102}]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x17, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x7}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3}}, {0x4}}]}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x89, 0x184b, 0x14, @local, @private1, 0x8000, 0x8000, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x7, 0x6, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0xde1, 0x1}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000005f1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000d40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="e0010000", @ANYBLOB="1b5b01b7b59e96fbfc051ea45de38b7300201ea6004b21af13def503db5c3284d888c4376a8e40c2a34d33f7b7e03ef5682f3b00974db57514e5c5cf2ce3233671e81d2cd8e86ea440898f0fd5a9fafdd4fd9f232c6dbe8dade26b4000", @ANYBLOB="c10c28bd7000ffdbdf2509000000900001801400020076657468305f746f5f626f6e640000001400020076657468315f746f5f626174616476001400020070696d367265673000000000000000001400020069703667726574617030000000000000140002007465616d5f736c6176655f300000000014000200766574683000000000000000000000001400020064766d727030000000000000000000000c00018008000300020000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000200726f7365300000000000000000000000080001003f0d88057c330700000000000000963b0d7e0ae8e38a720db9f16a5a8b574217d7d39a89dd67f5e071bd6dba43ef5de8b97a2bc076beb968b78e50c598a9cf3d46962bdcac0b5c7ddcdccbc5a1323fc60085bf1afbf6dce7f651af7acbae4ba1fab0796e33349e857a4b1a37e2619deef79bf8d67af2cd9ea29d35dd679cfa673a84f6abde8f2fe5622ec66fe9", @ANYRES32=r6, @ANYBLOB="90007087", @ANYRES32=r7, @ANYRES8=r8, @ANYRES32=r9, @ANYBLOB="1400020069703665727370616e300000000000001400020073797a5f74756e000000000000000000140002007767310000000000000000000000000008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32, @ANYBLOB="140002006d6163766c616e31000000000000000050000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES8, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020067726530000000000000000000010000000022e9b1696dbaaafc86a27e335dcfb9e2c8229dd2cf45a8bdf68fbda8afafecb3a550d74efa26781c8803fd626b5dda9e6514f909bf3bff046a7cbde8b7950465ef", @ANYRES32=r14, @ANYBLOB="080003000000000008000300020000002000018008000300000000001400020076657468315f6d616376746170000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x44084}, 0x150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$rose(r17, 0x104, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 1m10.18499607s ago: executing program 3 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000000ffffffffffff0802110000005050505050500040040400008800760604051900030000000600cd00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000100)={0x1d, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x41, 0x4, 0x1, 0x0, 0x104, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x89, 0xe, "ec7d3e3ee0b512c4c55e9c43"}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@loopback, 0x9}, {@private=0xa010100, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9d3}, {@private=0xa010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0x4, [{@multicast2, 0x991}, {@multicast1, 0x4}, {@broadcast, 0x308}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8000}, {@multicast2, 0x10}]}, @lsrr={0x83, 0x1b, 0x3f, [@private=0xa010102, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0xf, 0xb6, [@rand_addr=0x64010102, @multicast2, @multicast2]}, @generic={0x86, 0xa, "c12f7fbbd7ef9167"}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0x7, "7aa03cd044"}, {0x5, 0xe, "6a9fd990e14ac7c4c561488b"}, {0x2, 0x8, "26335d07f20d"}, {0x7, 0xd, "7ad1cb097df2f1d59731da"}, {0x6, 0x8, "e10490959d30"}, {0x6, 0x2}, {0xc7560b093dbdb3c6, 0x7, "dd57654c1a"}, {0x2, 0xb, "a4e017caa119b03502"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0x40, 0x8, {{0x17, 0x4, 0x3, 0x17, 0x5c, 0x68, 0x0, 0x8d, 0x4, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x13, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, @rand_addr=0x64010102]}, @ssrr={0x89, 0x27, 0x99, [@multicast2, @multicast2, @rand_addr=0x64010101, @rand_addr, @multicast2, @empty, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x7, [{@rand_addr=0x64010102}]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x17, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x7}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3}}, {0x4}}]}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x89, 0x184b, 0x14, @local, @private1, 0x8000, 0x8000, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x7, 0x6, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0xde1, 0x1}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000005f1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000d40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="e0010000", @ANYBLOB="1b5b01b7b59e96fbfc051ea45de38b7300201ea6004b21af13def503db5c3284d888c4376a8e40c2a34d33f7b7e03ef5682f3b00974db57514e5c5cf2ce3233671e81d2cd8e86ea440898f0fd5a9fafdd4fd9f232c6dbe8dade26b4000", @ANYBLOB="c10c28bd7000ffdbdf2509000000900001801400020076657468305f746f5f626f6e640000001400020076657468315f746f5f626174616476001400020070696d367265673000000000000000001400020069703667726574617030000000000000140002007465616d5f736c6176655f300000000014000200766574683000000000000000000000001400020064766d727030000000000000000000000c00018008000300020000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000200726f7365300000000000000000000000080001003f0d88057c330700000000000000963b0d7e0ae8e38a720db9f16a5a8b574217d7d39a89dd67f5e071bd6dba43ef5de8b97a2bc076beb968b78e50c598a9cf3d46962bdcac0b5c7ddcdccbc5a1323fc60085bf1afbf6dce7f651af7acbae4ba1fab0796e33349e857a4b1a37e2619deef79bf8d67af2cd9ea29d35dd679cfa673a84f6abde8f2fe5622ec66fe9", @ANYRES32=r6, @ANYBLOB="90007087", @ANYRES32=r7, @ANYRES8=r8, @ANYRES32=r9, @ANYBLOB="1400020069703665727370616e300000000000001400020073797a5f74756e000000000000000000140002007767310000000000000000000000000008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32, @ANYBLOB="140002006d6163766c616e31000000000000000050000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES8, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020067726530000000000000000000010000000022e9b1696dbaaafc86a27e335dcfb9e2c8229dd2cf45a8bdf68fbda8afafecb3a550d74efa26781c8803fd626b5dda9e6514f909bf3bff046a7cbde8b7950465ef", @ANYRES32=r14, @ANYBLOB="080003000000000008000300020000002000018008000300000000001400020076657468315f6d616376746170000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x44084}, 0x150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$rose(r17, 0x104, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 59.796601232s ago: executing program 3 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000000ffffffffffff0802110000005050505050500040040400008800760604051900030000000600cd00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000100)={0x1d, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x41, 0x4, 0x1, 0x0, 0x104, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x89, 0xe, "ec7d3e3ee0b512c4c55e9c43"}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@loopback, 0x9}, {@private=0xa010100, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9d3}, {@private=0xa010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0x4, [{@multicast2, 0x991}, {@multicast1, 0x4}, {@broadcast, 0x308}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8000}, {@multicast2, 0x10}]}, @lsrr={0x83, 0x1b, 0x3f, [@private=0xa010102, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0xf, 0xb6, [@rand_addr=0x64010102, @multicast2, @multicast2]}, @generic={0x86, 0xa, "c12f7fbbd7ef9167"}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0x7, "7aa03cd044"}, {0x5, 0xe, "6a9fd990e14ac7c4c561488b"}, {0x2, 0x8, "26335d07f20d"}, {0x7, 0xd, "7ad1cb097df2f1d59731da"}, {0x6, 0x8, "e10490959d30"}, {0x6, 0x2}, {0xc7560b093dbdb3c6, 0x7, "dd57654c1a"}, {0x2, 0xb, "a4e017caa119b03502"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0x40, 0x8, {{0x17, 0x4, 0x3, 0x17, 0x5c, 0x68, 0x0, 0x8d, 0x4, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x13, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, @rand_addr=0x64010102]}, @ssrr={0x89, 0x27, 0x99, [@multicast2, @multicast2, @rand_addr=0x64010101, @rand_addr, @multicast2, @empty, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x7, [{@rand_addr=0x64010102}]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x17, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x7}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3}}, {0x4}}]}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x89, 0x184b, 0x14, @local, @private1, 0x8000, 0x8000, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x7, 0x6, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0xde1, 0x1}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000005f1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000d40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="e0010000", @ANYBLOB="1b5b01b7b59e96fbfc051ea45de38b7300201ea6004b21af13def503db5c3284d888c4376a8e40c2a34d33f7b7e03ef5682f3b00974db57514e5c5cf2ce3233671e81d2cd8e86ea440898f0fd5a9fafdd4fd9f232c6dbe8dade26b4000", @ANYBLOB="c10c28bd7000ffdbdf2509000000900001801400020076657468305f746f5f626f6e640000001400020076657468315f746f5f626174616476001400020070696d367265673000000000000000001400020069703667726574617030000000000000140002007465616d5f736c6176655f300000000014000200766574683000000000000000000000001400020064766d727030000000000000000000000c00018008000300020000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000200726f7365300000000000000000000000080001003f0d88057c330700000000000000963b0d7e0ae8e38a720db9f16a5a8b574217d7d39a89dd67f5e071bd6dba43ef5de8b97a2bc076beb968b78e50c598a9cf3d46962bdcac0b5c7ddcdccbc5a1323fc60085bf1afbf6dce7f651af7acbae4ba1fab0796e33349e857a4b1a37e2619deef79bf8d67af2cd9ea29d35dd679cfa673a84f6abde8f2fe5622ec66fe9", @ANYRES32=r6, @ANYBLOB="90007087", @ANYRES32=r7, @ANYRES8=r8, @ANYRES32=r9, @ANYBLOB="1400020069703665727370616e300000000000001400020073797a5f74756e000000000000000000140002007767310000000000000000000000000008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32, @ANYBLOB="140002006d6163766c616e31000000000000000050000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES8, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020067726530000000000000000000010000000022e9b1696dbaaafc86a27e335dcfb9e2c8229dd2cf45a8bdf68fbda8afafecb3a550d74efa26781c8803fd626b5dda9e6514f909bf3bff046a7cbde8b7950465ef", @ANYRES32=r14, @ANYBLOB="080003000000000008000300020000002000018008000300000000001400020076657468315f6d616376746170000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x44084}, 0x150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$rose(r17, 0x104, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 50.085640175s ago: executing program 3 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000000ffffffffffff0802110000005050505050500040040400008800760604051900030000000600cd00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000100)={0x1d, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x41, 0x4, 0x1, 0x0, 0x104, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x89, 0xe, "ec7d3e3ee0b512c4c55e9c43"}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@loopback, 0x9}, {@private=0xa010100, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9d3}, {@private=0xa010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0x4, [{@multicast2, 0x991}, {@multicast1, 0x4}, {@broadcast, 0x308}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8000}, {@multicast2, 0x10}]}, @lsrr={0x83, 0x1b, 0x3f, [@private=0xa010102, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0xf, 0xb6, [@rand_addr=0x64010102, @multicast2, @multicast2]}, @generic={0x86, 0xa, "c12f7fbbd7ef9167"}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0x7, "7aa03cd044"}, {0x5, 0xe, "6a9fd990e14ac7c4c561488b"}, {0x2, 0x8, "26335d07f20d"}, {0x7, 0xd, "7ad1cb097df2f1d59731da"}, {0x6, 0x8, "e10490959d30"}, {0x6, 0x2}, {0xc7560b093dbdb3c6, 0x7, "dd57654c1a"}, {0x2, 0xb, "a4e017caa119b03502"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0x40, 0x8, {{0x17, 0x4, 0x3, 0x17, 0x5c, 0x68, 0x0, 0x8d, 0x4, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x13, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, @rand_addr=0x64010102]}, @ssrr={0x89, 0x27, 0x99, [@multicast2, @multicast2, @rand_addr=0x64010101, @rand_addr, @multicast2, @empty, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x7, [{@rand_addr=0x64010102}]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x17, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x7}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3}}, {0x4}}]}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x89, 0x184b, 0x14, @local, @private1, 0x8000, 0x8000, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x7, 0x6, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0xde1, 0x1}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000005f1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000d40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="e0010000", @ANYBLOB="1b5b01b7b59e96fbfc051ea45de38b7300201ea6004b21af13def503db5c3284d888c4376a8e40c2a34d33f7b7e03ef5682f3b00974db57514e5c5cf2ce3233671e81d2cd8e86ea440898f0fd5a9fafdd4fd9f232c6dbe8dade26b4000", @ANYBLOB="c10c28bd7000ffdbdf2509000000900001801400020076657468305f746f5f626f6e640000001400020076657468315f746f5f626174616476001400020070696d367265673000000000000000001400020069703667726574617030000000000000140002007465616d5f736c6176655f300000000014000200766574683000000000000000000000001400020064766d727030000000000000000000000c00018008000300020000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000200726f7365300000000000000000000000080001003f0d88057c330700000000000000963b0d7e0ae8e38a720db9f16a5a8b574217d7d39a89dd67f5e071bd6dba43ef5de8b97a2bc076beb968b78e50c598a9cf3d46962bdcac0b5c7ddcdccbc5a1323fc60085bf1afbf6dce7f651af7acbae4ba1fab0796e33349e857a4b1a37e2619deef79bf8d67af2cd9ea29d35dd679cfa673a84f6abde8f2fe5622ec66fe9", @ANYRES32=r6, @ANYBLOB="90007087", @ANYRES32=r7, @ANYRES8=r8, @ANYRES32=r9, @ANYBLOB="1400020069703665727370616e300000000000001400020073797a5f74756e000000000000000000140002007767310000000000000000000000000008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32, @ANYBLOB="140002006d6163766c616e31000000000000000050000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES8, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020067726530000000000000000000010000000022e9b1696dbaaafc86a27e335dcfb9e2c8229dd2cf45a8bdf68fbda8afafecb3a550d74efa26781c8803fd626b5dda9e6514f909bf3bff046a7cbde8b7950465ef", @ANYRES32=r14, @ANYBLOB="080003000000000008000300020000002000018008000300000000001400020076657468315f6d616376746170000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x44084}, 0x150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$rose(r17, 0x104, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 37.017531285s ago: executing program 3 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000000ffffffffffff0802110000005050505050500040040400008800760604051900030000000600cd00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000100)={0x1d, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x41, 0x4, 0x1, 0x0, 0x104, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x89, 0xe, "ec7d3e3ee0b512c4c55e9c43"}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@loopback, 0x9}, {@private=0xa010100, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9d3}, {@private=0xa010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0x4, [{@multicast2, 0x991}, {@multicast1, 0x4}, {@broadcast, 0x308}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8000}, {@multicast2, 0x10}]}, @lsrr={0x83, 0x1b, 0x3f, [@private=0xa010102, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0xf, 0xb6, [@rand_addr=0x64010102, @multicast2, @multicast2]}, @generic={0x86, 0xa, "c12f7fbbd7ef9167"}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0x7, "7aa03cd044"}, {0x5, 0xe, "6a9fd990e14ac7c4c561488b"}, {0x2, 0x8, "26335d07f20d"}, {0x7, 0xd, "7ad1cb097df2f1d59731da"}, {0x6, 0x8, "e10490959d30"}, {0x6, 0x2}, {0xc7560b093dbdb3c6, 0x7, "dd57654c1a"}, {0x2, 0xb, "a4e017caa119b03502"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0x40, 0x8, {{0x17, 0x4, 0x3, 0x17, 0x5c, 0x68, 0x0, 0x8d, 0x4, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x13, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, @rand_addr=0x64010102]}, @ssrr={0x89, 0x27, 0x99, [@multicast2, @multicast2, @rand_addr=0x64010101, @rand_addr, @multicast2, @empty, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x7, [{@rand_addr=0x64010102}]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x17, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x7}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3}}, {0x4}}]}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x89, 0x184b, 0x14, @local, @private1, 0x8000, 0x8000, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x7, 0x6, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0xde1, 0x1}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000005f1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000d40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="e0010000", @ANYBLOB="1b5b01b7b59e96fbfc051ea45de38b7300201ea6004b21af13def503db5c3284d888c4376a8e40c2a34d33f7b7e03ef5682f3b00974db57514e5c5cf2ce3233671e81d2cd8e86ea440898f0fd5a9fafdd4fd9f232c6dbe8dade26b4000", @ANYBLOB="c10c28bd7000ffdbdf2509000000900001801400020076657468305f746f5f626f6e640000001400020076657468315f746f5f626174616476001400020070696d367265673000000000000000001400020069703667726574617030000000000000140002007465616d5f736c6176655f300000000014000200766574683000000000000000000000001400020064766d727030000000000000000000000c00018008000300020000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000200726f7365300000000000000000000000080001003f0d88057c330700000000000000963b0d7e0ae8e38a720db9f16a5a8b574217d7d39a89dd67f5e071bd6dba43ef5de8b97a2bc076beb968b78e50c598a9cf3d46962bdcac0b5c7ddcdccbc5a1323fc60085bf1afbf6dce7f651af7acbae4ba1fab0796e33349e857a4b1a37e2619deef79bf8d67af2cd9ea29d35dd679cfa673a84f6abde8f2fe5622ec66fe9", @ANYRES32=r6, @ANYBLOB="90007087", @ANYRES32=r7, @ANYRES8=r8, @ANYRES32=r9, @ANYBLOB="1400020069703665727370616e300000000000001400020073797a5f74756e000000000000000000140002007767310000000000000000000000000008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32, @ANYBLOB="140002006d6163766c616e31000000000000000050000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES8, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020067726530000000000000000000010000000022e9b1696dbaaafc86a27e335dcfb9e2c8229dd2cf45a8bdf68fbda8afafecb3a550d74efa26781c8803fd626b5dda9e6514f909bf3bff046a7cbde8b7950465ef", @ANYRES32=r14, @ANYBLOB="080003000000000008000300020000002000018008000300000000001400020076657468315f6d616376746170000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x44084}, 0x150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$rose(r17, 0x104, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 4.841042152s ago: executing program 4 (id=1690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000110000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 4.769114177s ago: executing program 4 (id=1693): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xffffffffffffffa7, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7fffffff, 0xa5b, 0xd, 0x8, 0x1e47}, 0x10, 0x0, 0x1, 0xcc2, 0x0, 0x19, 0x1d, 0xd, 0xfc, 0x33c, {0x3ff, 0x10000, 0x5, 0x1, 0x1000, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x804c055}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000000040000f0fffffeb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r5 = socket(0x11, 0x80a, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) (async, rerun: 64) r7 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @mcast1, 0x5}, 0x1c) (async, rerun: 32) listen(r6, 0x82) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r10 = accept4(r9, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r10, &(0x7f0000001b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000000000001200000000000000170100000200"], 0x30, 0x20005811}], 0x1, 0x20008014) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400000000fcffffff00000000", @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.578328371s ago: executing program 4 (id=1698): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) (async) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180500000000000000000000000000009500000000000000950000000000ddff"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000100)=r3) 4.438751556s ago: executing program 4 (id=1702): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='rpcgss_oid_to_mech\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x0, r4}, 0x10) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, 0x3a, 0x600, 0x70bd2d, 0x25dfdbff, {0x12}, [@typed={0xc, 0x70, 0x0, 0x0, @u64=0x9}, @nested={0x43, 0x4f, 0x0, 0x1, [@generic="e3ae143778250ef131684799ef2c4c4b0ccee4005edbeab08fc07a4301a63f0f8fa0854b4216401130d2527495c0aff37c51545b7b5bc1", @typed={0x8, 0x5a, 0x0, 0x0, @pid=r5}]}, @generic="132d7bd6579f19bdece1f4f553a349ad7d29fe805896e08a897b3d4c24561143a8d0c9dd69358169aa9bd972501ec619ae56c632088279eb59cc4750d87f4e6737edeaf185e7fe69cd5c266b85852b1ab5a3e2cfc3ebb1def3b9458df50b164acb914379dca064", @typed={0x8, 0x145, 0x0, 0x0, @fd=r6}, @nested={0x8, 0xad, 0x0, 0x1, [@nested={0x4, 0xb0}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x50}, 0x2000000) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r7, 0x180000000) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x100, 0x1403, 0x1, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) 4.311085768s ago: executing program 4 (id=1705): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES64=r9, @ANYRES32=r0, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) getsockname$packet(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000400000002000000000000000102", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0], 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d", 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000080000000800cf4ec3e7bbbe5fd020e635000000", @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0], 0x48) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x20048840) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11}, 0xc) 4.074991422s ago: executing program 1 (id=1711): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* rrw'], 0xa) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000002f40)=""/4083, 0xff3) 3.880936679s ago: executing program 4 (id=1714): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xbb8}, 0x1, 0x0, 0x0, 0x4}, 0x84080) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0xfffffffffffffcae, &(0x7f0000002740)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300000000000000004e0000000e00030000000000000073696d0000000f0002006e6d7464657673696d300000304995576ccd885e9b5cff2730a1dfbfebe855d1d838ae274ab668ba6839344832c26b5443f2f77400d18c5dee"], 0x34}}, 0x11) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x20, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24000801) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a8036ff000000000000000008000100ac1e000108000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000013001b000000070000000361000008009a"], 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f0000000480)={0xa, 0x106, 0xfffffffc, @private0}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000000c0)='/', 0x1}, {&(0x7f0000000600)="22bdfabb3e37430581c760930a0041f671579fbc924cc7e22edc07be07d648ad1efd5f53fcc460aa1bf55c524d75ae59f54cd2cf4c66ac90eb2211c77e3e6860c8add20de8d0f877edbe37c592a3949df7ae6166a4a26ae907ade75a675de9dc4b65d85c8100e244c44701cffb79e563ea7ad5", 0x73}], 0x2}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) bind$inet6(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8) socket$inet6(0xa, 0x3, 0x7) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sys_enter\x00'}, 0x18) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[], 0xfdef) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) 3.583084892s ago: executing program 1 (id=1715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@mcast2, 0x0, r1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 3.533800238s ago: executing program 2 (id=1717): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x3, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="ff81177d51ffaaaaaaaaaabb4305f0d179e3378cdb0c7afd5af5586019f9d95960d5a047568aae4ffc685600000000000000000000000000000038ffafa26be3d9429c9c03bdfc5b70113026543fd75f815e5e6e88ba573a0294623ec509e3ce3ca493dfb58524f97b51c349cf7a189bb5bc98f2f3a1317d1bae3b1e4e5860f630c61a6ef2bd372db9e3daa907b3ea0468a7bf7c47a606ef26a8fb5092fd6627f7bd6f63793cebbdf773c71f5b272cddfdff6431c7ab21b06dc023f2f9e31f28e3f93bdb374eef21724ff7b80a60dd3ec3bf66ccf07fd7556434f503d7b3423ff78330"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000800000018000180140002006970766c616e310000f1ff0000000000180002800400010010000380"], 0x44}}, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x1c, r7, 0x1, 0x8000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r5}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB="400000001400010000000000000000000a000000", @ANYRES32=r12, @ANYBLOB="14000200000000000000000000001f05000000011400060000000000ffa139ebf51cc14ce4080438f7914d00a80000"], 0x40}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2, 0x44400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x4, 0x0, 0x29, r9}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0xca231000) 3.37505356s ago: executing program 2 (id=1718): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000200000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 3.314070623s ago: executing program 1 (id=1720): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6(0xa, 0x80000, 0x1038) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x80, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$inet(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001200)="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", 0x294}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b373", 0x165}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d", 0x36}, {&(0x7f0000002e80)="f610e61ac81cc3edc86f05f10dfd1efe17d2", 0x12}, {&(0x7f0000000600)="2054ce9fa34fbc4a1d8599d1a76a4eed8f72f60371dddce7359a1148790a0c992a07daee0eb1228eb2f9f181950dc0e31e832382fff7f4ddad1cfcd672cb1a056e38d318caa400d7337babdaeaf27ff333d856ee2db5efc6273fa1d97845016598d153009f0be2760b6ed06c406f44161b416c8208fd03985252ffc7c27b03a6e66a31d3cc7b1997622b12c3063c2cdd27a3b6fd00e1c4456e65f0804e61b29c97264b5653e220b61068a81d10655f50c4e0bb8589770a0deb1bb209c8e56fab252a06a232496b908b8d68c5446ea1c6b9a2832a12baca720deac13a643984457a8597ece1e2868285626d0c4e29836c6b2b41e328b9d6b09be4223f40e7ec5bbc84c2bc28237f3d7aa5d8456f40348b1f3fe8138a5c24752b26bf1d1885f14a1c6fd095c47a43196dae8cc81b570f953ccae05d524927928640ec0e4b0e05ad49d292dbd0617d26dc3502b9b6251b112eb5640c94f7e54f0f000000000000812a7cfdc1fea8b1c68e0d17929542ff", 0x16f}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3.21087053s ago: executing program 2 (id=1721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r2}, r3, 0x4, @inherit={0x80, &(0x7f0000000280)={0x0, 0x7, 0x7, 0x1, {0x9, 0x737, 0x8, 0xb6, 0xf}, [0x1, 0xf0, 0x3, 0xa011, 0x2, 0x5, 0x400]}}, @subvolid=0xfff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001300)={r1, 0x6, 0xcd, "f732f3a8c2f922095265d6f388a07e621b82704f2026f9f550a027dcd8a53527aa35b3ab086e8ff3ed65daab3680cf1a80b4cc2844acbb529d98cfdbdf04373e3dcbc76ba4e6f4559e784b870b90c96cfdb6552b9e57fe69fb2f8a0fb9d85864c83657e075db91f8ae543756e736b7c92c85d1e0a2f547c959c4f667fc0e8a11fcde701b1c43c9bbe3292fc9d492a06bba2cfae44c14bb9545c22905fb6a792a762e92b34588ab65a2d9a826df6695c0276e633436a0391680105b5856c8a6b5988c9bab0ed7b21816f0f483de"}, 0xd5) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000001400)={0x9, @remote}, &(0x7f0000001440)=0x12, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000001480)={0x1e, 0x3, 0x4, 0xb, 0x2}) connect$inet6(r0, &(0x7f00000014c0)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa2}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000001500)={0xa, 0x4e24, 0x0, @private0, 0x7}, 0x1c) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001540), 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001540)={0x0, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001580)={r7, 0x8, 0x8}, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000015c0), 0x8) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000015c0), 0x8) getsockname$packet(r9, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001640)=0x14) openat$cgroup_ro(r9, &(0x7f0000001680)='cgroup.freeze\x00', 0x0, 0x0) (async) r11 = openat$cgroup_ro(r9, &(0x7f0000001680)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)=@mpls_getnetconf={0x5c, 0x52, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x41}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffe01}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r10}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r11) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r11) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r11) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r12, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r12, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}]}, 0x1c}}, 0x20044094) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r12, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}]}, 0x1c}}, 0x20044094) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001a80), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001ac0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001ac0)={'batadv_slave_1\x00'}) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001b40)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000001b00), {[{{@ip={@private=0xa010102, @remote, 0xff, 0xffffff00, 'macsec0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x2, 0x3, 0x44}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1000, 0x7ff, 0x7, 'syz0\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@addrtype={{0x30}, {0x10e999c3459c863f, 0xc00, 0x1}}, @inet=@rpfilter={{0x28}, {0x15}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x7, 0x5, '\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 3.057867031s ago: executing program 1 (id=1723): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x1e, 0x61, 0x2e]}}, 0x0, 0x2e, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x28) 2.990923838s ago: executing program 2 (id=1724): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x40000000000000) socket$tipc(0x1e, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000540)=@deltaction={0x14, 0x31, 0x200}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100000000a84b5206573c7cb9b7000000000002000000"], 0x14}}, 0x4) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003904000000000400000000000000", @ANYRES32=r7, @ANYBLOB="030000007f0000002000128008000100736974001400028008000100", @ANYRES32], 0x40}}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x3, 0x18}, 0xc) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000b908571190a55956667cf28b443d2689fb8996058d3229e3cef82f5a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x6, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0xfffbfffb, 0x16, &(0x7f00000000c0)=""/22, 0x40f00, 0x30, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0xd3, 0x5ad6b9d2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r8, r9, 0xffffffffffffffff, r10], &(0x7f0000000580)=[{0x0, 0x5, 0x9, 0x1}, {0x2, 0x2, 0x4, 0x2}, {0x0, 0x1, 0x2}, {0x3, 0x4, 0xa, 0x4}], 0x10, 0x5a0, @void, @value}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000ac0)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_bcm(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/155, 0x9b}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000240)=""/14, 0xe}], 0x7, &(0x7f0000000980)=""/125, 0x7d}, 0x2122) sendmsg$NL80211_CMD_GET_WIPHY(r12, &(0x7f00000007c0)={0x0, 0xfffffc89, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) 2.952741009s ago: executing program 1 (id=1725): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, &(0x7f00000000c0)) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, 0x0, 0x4000000) close(r6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080), 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x1d, r8}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x7, 0x19, 0xf, {}, {0x77359400}, {0x4, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x6, 0x3, 0x0, 0x0, "da9a9efe5461d48d"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x40308}, [@IFLA_EXT_MASK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.714901354s ago: executing program 0 (id=1727): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x0) (rerun: 32) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x6}}]}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) writev(r6, &(0x7f0000000200), 0x1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000066c206000000e6f60000", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010062726964676500000c0002800500190088000000"], 0x3c}}, 0x0) 2.550644535s ago: executing program 0 (id=1728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x10, 0x2, 0x80000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x3) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="520003000100b8", 0x7) 241.119784ms ago: executing program 0 (id=1729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0xd0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x86a8, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0xd, 0xa, 0x9, 0x18, 0xfffffffffffffff0}, @generic={0x0, 0xd, 0x2, 0x8, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x2, 0x7d4c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000002c0)=[0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x5, 0x4, 0x3, 0x4}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x43, 0xd, &(0x7f0000000400)="93152c7734730dda51206748bd1220529254113103d00c11590ef58820bc9597d1f6b46f200c6e3ef7bd2d8b35003535029406a07357fe7ccbc9ae1e3ffe7d7eb861cd", &(0x7f0000000480)=""/13, 0x7, 0x0, 0xb3, 0x96, &(0x7f00000005c0)="eaf9bf3af49cd1e9ef8801a3b636a946ec0ac67116bff51225b877c675a304be37fdafbe408afca96121722c279ee09b5834abe227e6837332bd04008ecd7e84d879db776d9057b25bca9e36a54548e197667838d9adf36d3b6399fe31bfe2818ac1916959c2adeed5e86adc36620de19d3830125deec54d58fe43672f263117a18f91b3f37eeb39963e038cb94d97ebeda0f40a014de0969ea66202fa3f61f0670d44555c17bce9eaba0e6bc98d403183f67f", &(0x7f0000000680)="bbff9187b4ba62930cc8bd4d8d5188d285097806b92f07f2b3c95a7fcadad07ed334bc5b4d9768ecf62ca8c73ab0c030cf741ae8ee7a00f9c7b683c3fdaa95b5d6ebed77ac9dac22ee03541e3aa9633dce33f2748ba5031f8cb4043e7e95076aef1a2078a407fe9205d531c09deca3924899580e5f05350b3f28a2d501925b8f51d73aa3c8055cee560f247f3bd85ebc2bb369559763", 0x5, 0x0, 0x6}, 0x50) 191.138349ms ago: executing program 1 (id=1730): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131", @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYBLOB="d6c1ebb6dc69fba69e46fa28439c694f194bcea0cd00789a99477b957a0aa496dc91290f6fecd563f6b251cfbd0769e71be0921d6cf6ea4a7a5c9add1ffd1e8a6fd10b3647cf75ff75acf7e657fd26688772514b2cfbf9c0b0a17d16a9312f40b6f4db97ccf83cdc6d58460843517644c477a91a090fd63470ccbfce3c67a57a6cfcd45743c4f4213a83c1862621db6e243fd8473c680de0aa787f6b4434c222111ae6f4221b6a"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000004780)=""/4107, 0x100b}], 0x1}}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x5, 0x0, 0x0) 190.200793ms ago: executing program 2 (id=1731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000480000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 136.343288ms ago: executing program 0 (id=1732): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee17688a2006c08020300ecff3f000000030000d6c8db0000dba67e06018000020000f10607bdff59300a3d8500001fb700674f19b4315033bf79a61eff0601150039010017dc9a3800ea000000000400000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2132ce68bf17a6e000000000000000000000f2308964cb87c8f82cfe83a2e2ff75307fde55df9907b971eb3c5461917b625bd3", 0xb9) 93.224914ms ago: executing program 2 (id=1733): syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$xdp(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="68a35545d9", 0x5}, {0x0}, {&(0x7f0000000180)="4189efd800482359960b42fd67abb0da25490c191e5ea6f3e33a46f1a8cfbd9f8e154299b7df43b58d3d5d6d2acd457eb6f5824bb1324a53a3e4", 0x3a}], 0x3}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f0000000640)=""/165, 0xa5}], 0x7}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='W&{\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf250200000030000280240003800800020003000000080002007f00000008000200620f00000800020000000000080002000100000034000180040002802c0004001400010002004e20ac1414aa00000000000000001400020002004e23ffffffff00000000000000006400028008000100060000003c00038008000100b5b9000008000200c85b00000800010003000000080001005e930000080002000b0000000800010003000000080002000b0000000800020003000000140003800800010002000000080001000600000004000380"], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r7, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}]]}, 0x30}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="149657b20e9e4fdde233e7ffdd", @ANYRES16=r10, @ANYBLOB="0001000000000000000004000000"], 0x14}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18.984948ms ago: executing program 0 (id=1734): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) pread64(r2, &(0x7f00000000c0)=""/244, 0xf4, 0x0) r3 = accept4(r0, 0x0, &(0x7f00000001c0), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000fa", @ANYRES16=r6, @ANYBLOB="0101000000000000000008000000180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 0s ago: executing program 0 (id=1735): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x1e, 0x61, 0x2e]}}, 0x0, 0x2e, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x28) kernel console output (not intermixed with test programs): luetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.283369][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.299105][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.306261][ T7790] IPv6: sit2: Disabled Multicast RS [ 105.313932][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 105.322437][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.361612][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.497374][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.631189][ T7807] IPVS: Scheduler module ip_vs_sip not found [ 105.656960][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.793394][ T7820] xt_hashlimit: size too large, truncated to 1048576 [ 105.848834][ T7820] xt_hashlimit: max too large, truncated to 1048576 [ 105.858575][ T7820] xt_hashlimit: overflow, try lower: 0/0 [ 105.922790][ T12] bridge_slave_1: left allmulticast mode [ 105.929879][ T12] bridge_slave_1: left promiscuous mode [ 105.937151][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.950230][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.287283][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.298714][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.310011][ T12] bond0 (unregistering): Released all slaves [ 106.549231][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 106.559806][ T7847] netlink: 'syz.0.560': attribute type 2 has an invalid length. [ 106.650158][ T7847] fþ: entered promiscuous mode [ 106.898247][ T12] hsr_slave_0: left promiscuous mode [ 106.906511][ T12] hsr_slave_1: left promiscuous mode [ 106.919052][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.932210][ T7876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.941713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.949707][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.958475][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.983016][ T12] bridge_slave_0: left allmulticast mode [ 106.989027][ T12] bridge_slave_0: left promiscuous mode [ 106.995376][ T12] veth1_macvtap: left promiscuous mode [ 107.004326][ T12] veth0_macvtap: left promiscuous mode [ 107.011690][ T12] veth1_vlan: left promiscuous mode [ 107.017440][ T12] veth0_vlan: left promiscuous mode [ 107.398390][ T55] Bluetooth: hci2: command tx timeout [ 107.529236][ T12] team0 (unregistering): Port device team_slave_1 removed [ 107.567958][ T12] team0 (unregistering): Port device team_slave_0 removed [ 107.711408][ T7884] __nla_validate_parse: 5 callbacks suppressed [ 107.711430][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.568'. [ 107.986613][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.993878][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.004070][ T7793] bridge_slave_0: entered allmulticast mode [ 108.011902][ T7793] bridge_slave_0: entered promiscuous mode [ 108.022132][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.029355][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.039925][ T7793] bridge_slave_1: entered allmulticast mode [ 108.055901][ T7793] bridge_slave_1: entered promiscuous mode [ 108.244195][ T7893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.257475][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.303233][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.310835][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.570'. [ 108.388559][ T7793] team0: Port device team_slave_0 added [ 108.400894][ T7793] team0: Port device team_slave_1 added [ 108.457113][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.477174][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.510593][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.527905][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.547349][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.574426][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.608306][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 108.693146][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 108.710028][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 108.746040][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 108.763079][ T7793] hsr_slave_0: entered promiscuous mode [ 108.775016][ T7793] hsr_slave_1: entered promiscuous mode [ 108.880551][ T7911] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.894760][ T7911] syzkaller1: entered promiscuous mode [ 108.902455][ T7911] syzkaller1: entered allmulticast mode [ 108.911831][ T7920] IPVS: Error connecting to the multicast addr [ 109.059230][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 109.077748][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 109.283930][ T7942] netlink: 176 bytes leftover after parsing attributes in process `syz.4.584'. [ 109.431014][ T7947] netlink: 'syz.0.586': attribute type 2 has an invalid length. [ 109.442078][ T7947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.586'. [ 109.456414][ T7950] x_tables: duplicate underflow at hook 3 [ 109.475881][ T55] Bluetooth: hci2: command tx timeout [ 109.497408][ T7955] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 109.806287][ T7793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.827485][ T7793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.907580][ T7793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.932680][ T7793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.076748][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.142580][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.168621][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.175834][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.218401][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.225559][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.712370][ T8027] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.790563][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.861624][ T7793] veth0_vlan: entered promiscuous mode [ 110.895602][ T7793] veth1_vlan: entered promiscuous mode [ 110.957871][ T7793] veth0_macvtap: entered promiscuous mode [ 110.968962][ T7793] veth1_macvtap: entered promiscuous mode [ 111.000627][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.022043][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.033903][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.045348][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.057594][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.084411][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.107638][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.191647][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.225022][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.248929][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.295855][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.321950][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.354853][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.407504][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.451573][ T7793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.474945][ T7793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.491027][ T7793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.501975][ T7793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.562562][ T55] Bluetooth: hci2: command tx timeout [ 111.811578][ T8079] trusted_key: syz.4.620 sent an empty control message without MSG_MORE. [ 111.842002][ T6199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.863912][ T6199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.961396][ T6210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.980942][ T6210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.160659][ T8087] netlink: 'syz.4.623': attribute type 5 has an invalid length. [ 112.176489][ T8087] netlink: 'syz.4.623': attribute type 6 has an invalid length. [ 112.219140][ T8087] syz_tun: entered promiscuous mode [ 112.292841][ T8087] syz_tun: left promiscuous mode [ 113.342907][ T8128] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 113.391688][ T8134] netlink: 'syz.1.636': attribute type 4 has an invalid length. [ 113.437724][ T8134] netlink: 'syz.1.636': attribute type 3 has an invalid length. [ 113.730560][ T6196] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.030528][ T8168] IPv6: sit1: Disabled Multicast RS [ 114.062276][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.073410][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.120754][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.130567][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.142201][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 114.150832][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.293651][ T8181] __nla_validate_parse: 10 callbacks suppressed [ 114.293701][ T8181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.649'. [ 114.306667][ T5911] IPVS: starting estimator thread 0... [ 114.405860][ T8183] IPVS: using max 22 ests per chain, 52800 per kthread [ 114.657777][ T6196] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.691940][ T8200] team_slave_0: entered promiscuous mode [ 114.697992][ T8200] team_slave_1: entered promiscuous mode [ 114.713503][ T8200] vlan2: entered promiscuous mode [ 114.726024][ T8200] team0: entered promiscuous mode [ 114.734316][ T8200] team0: Device vlan2 is already an upper device of the team interface [ 114.754055][ T8200] team0: left promiscuous mode [ 114.759959][ T8200] team_slave_0: left promiscuous mode [ 114.765491][ T8200] team_slave_1: left promiscuous mode [ 114.804095][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 114.822516][ T8201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.654'. [ 114.888646][ T6196] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.935001][ T8212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.654'. [ 115.037814][ T6196] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.150879][ T8228] netlink: 276 bytes leftover after parsing attributes in process `syz.0.661'. [ 115.195291][ T8228] netlink: 'syz.0.661': attribute type 2 has an invalid length. [ 115.527814][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.535059][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.574488][ T8169] bridge_slave_0: entered allmulticast mode [ 115.591192][ T8169] bridge_slave_0: entered promiscuous mode [ 115.641864][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.673359][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.693014][ T8169] bridge_slave_1: entered allmulticast mode [ 115.702380][ T8169] bridge_slave_1: entered promiscuous mode [ 115.754812][ T6196] bridge_slave_1: left allmulticast mode [ 115.768289][ T6196] bridge_slave_1: left promiscuous mode [ 115.785206][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.849146][ T6196] bridge_slave_0: left allmulticast mode [ 115.864962][ T6196] bridge_slave_0: left promiscuous mode [ 115.893407][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.010342][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 116.019564][ T8268] netlink: 88 bytes leftover after parsing attributes in process `syz.0.671'. [ 116.144156][ T8271] netlink: 244 bytes leftover after parsing attributes in process `syz.4.673'. [ 116.281769][ T5144] Bluetooth: hci2: command tx timeout [ 116.434962][ T8288] netlink: 'syz.0.678': attribute type 9 has an invalid length. [ 116.531999][ T6196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.548371][ T6196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.559204][ T6196] bond0 (unregistering): Released all slaves [ 116.581274][ T8260] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 116.762129][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.932095][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.020427][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 117.064171][ T8313] ieee802154 phy0 wpan0: encryption failed: -90 [ 117.191049][ T8169] team0: Port device team_slave_0 added [ 117.258618][ T8169] team0: Port device team_slave_1 added [ 117.285968][ T8307] tap0: tun_chr_ioctl cmd 1074025677 [ 117.292038][ T8307] tap0: linktype set to 0 [ 117.386672][ T6196] hsr_slave_0: left promiscuous mode [ 117.410516][ T6196] hsr_slave_1: left promiscuous mode [ 117.443223][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.450965][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.466802][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.474991][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.530584][ T8335] netlink: 'syz.2.690': attribute type 4 has an invalid length. [ 117.545624][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'. [ 117.550284][ T6196] veth1_macvtap: left promiscuous mode [ 117.565881][ T6196] veth0_macvtap: left promiscuous mode [ 117.571548][ T6196] veth1_vlan: left promiscuous mode [ 117.590724][ T6196] veth0_vlan: left promiscuous mode [ 117.908639][ T8354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'. [ 118.222058][ T6196] team0 (unregistering): Port device team_slave_1 removed [ 118.258872][ T6196] team0 (unregistering): Port device team_slave_0 removed [ 118.359647][ T5144] Bluetooth: hci2: command tx timeout [ 118.676391][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.706039][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.756198][ T8169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.782437][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.799573][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.879050][ T8169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.987549][ T8169] hsr_slave_0: entered promiscuous mode [ 119.014117][ T8169] hsr_slave_1: entered promiscuous mode [ 119.549771][ T8394] __nla_validate_parse: 130 callbacks suppressed [ 119.549793][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 119.747195][ T8169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.773584][ T8169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.796642][ T8169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.822070][ T8169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.923662][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.944115][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.966014][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.973196][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.015771][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.022919][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.054591][ T8169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.065766][ T8169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.307093][ T8429] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 120.386607][ T8429] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 120.435930][ T5144] Bluetooth: hci2: command tx timeout [ 120.447570][ T8429] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 120.530434][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.689225][ T8169] veth0_vlan: entered promiscuous mode [ 120.703580][ T8169] veth1_vlan: entered promiscuous mode [ 120.787784][ T8169] veth0_macvtap: entered promiscuous mode [ 120.861552][ T8452] netlink: 'syz.1.727': attribute type 10 has an invalid length. [ 120.888625][ T8169] veth1_macvtap: entered promiscuous mode [ 120.913272][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.924806][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.935768][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.946444][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.956570][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.963710][ T8460] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 120.967384][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.986739][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.996537][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.007964][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.019784][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.030462][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.040732][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.051522][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.062489][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.097372][ T8463] netlink: 'syz.2.732': attribute type 2 has an invalid length. [ 121.111728][ T8463] netlink: 'syz.2.732': attribute type 9 has an invalid length. [ 121.119704][ T8463] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.732'. [ 121.136644][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.147809][ T8452] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 121.177605][ T8169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.195937][ T8169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.205197][ T8169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.224776][ T8169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.296002][ T8463] IPv6: Can't replace route, no match found [ 121.304434][ T8474] netlink: 'syz.2.732': attribute type 2 has an invalid length. [ 121.345072][ T8474] netlink: 'syz.2.732': attribute type 9 has an invalid length. [ 121.366270][ T8474] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.732'. [ 121.511084][ T6210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.511428][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 121.530097][ T6210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.577380][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 121.593639][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 121.608679][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.630905][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.805383][ T8493] syzkaller0: entered allmulticast mode [ 121.977987][ T8502] syzkaller0 (unregistering): left allmulticast mode [ 122.027156][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 122.395010][ T8516] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 122.636578][ T8536] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 123.166780][ T8548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.196406][ T8548] sctp: [Deprecated]: syz.1.757 (pid 8548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.196406][ T8548] Use struct sctp_sack_info instead [ 124.113347][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.761'. [ 124.156206][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.761'. [ 124.215909][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.761'. [ 124.316981][ T6205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.356067][ T8569] tipc: Started in network mode [ 124.366067][ T8569] tipc: Node identity 92ad09969806, cluster identity 4711 [ 124.373546][ T8569] tipc: Enabled bearer , priority 10 [ 124.417159][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.447696][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.465793][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.477686][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.489861][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.497635][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.573870][ T8584] __nla_validate_parse: 17 callbacks suppressed [ 124.573890][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 124.610738][ T6205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.628595][ T8585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'. [ 124.783260][ T6205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.803721][ T8592] netlink: 36 bytes leftover after parsing attributes in process `syz.0.769'. [ 124.942364][ T6205] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.050812][ T8577] chnl_net:caif_netlink_parms(): no params data found [ 125.320904][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.345900][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.353166][ T8577] bridge_slave_0: entered allmulticast mode [ 125.377860][ T8577] bridge_slave_0: entered promiscuous mode [ 125.408031][ T6205] bridge_slave_1: left allmulticast mode [ 125.413824][ T6205] bridge_slave_1: left promiscuous mode [ 125.419725][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.429592][ T6205] bridge_slave_0: left allmulticast mode [ 125.435364][ T6205] bridge_slave_0: left promiscuous mode [ 125.441740][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.452436][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 125.505228][ T25] tipc: Node number set to 178981270 [ 125.982900][ T6205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.994306][ T6205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.006450][ T6205] bond0 (unregistering): Released all slaves [ 126.021809][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.029137][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.038948][ T8577] bridge_slave_1: entered allmulticast mode [ 126.049352][ T8577] bridge_slave_1: entered promiscuous mode [ 126.216418][ T8640] netlink: 9 bytes leftover after parsing attributes in process `syz.0.783'. [ 126.295886][ T8577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.305641][ T8640] 0·: renamed from hsr0 [ 126.316851][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 126.322468][ T8640] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.355151][ T8640] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.368047][ T8640] 0·: entered allmulticast mode [ 126.376882][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 126.386193][ T8640] hsr_slave_0: entered allmulticast mode [ 126.386221][ T8640] hsr_slave_1: entered allmulticast mode [ 126.393256][ T8640] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 126.415052][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.784'. [ 126.464727][ T8577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.596724][ T5144] Bluetooth: hci2: command tx timeout [ 126.705470][ T8577] team0: Port device team_slave_0 added [ 126.757134][ T8577] team0: Port device team_slave_1 added [ 126.804206][ T8651] infiniband syz1: set down [ 126.812280][ T8651] infiniband syz1: added team_slave_0 [ 126.830147][ T6205] hsr_slave_0: left promiscuous mode [ 126.874068][ T6205] hsr_slave_1: left promiscuous mode [ 126.888977][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.889937][ T8651] RDS/IB: syz1: added [ 126.901237][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.901607][ T8651] smc: adding ib device syz1 with port count 1 [ 126.934532][ T8651] smc: ib device syz1 port 1 has pnetid [ 126.942159][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.955952][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.993593][ T6205] veth1_macvtap: left promiscuous mode [ 127.010165][ T6205] veth0_macvtap: left promiscuous mode [ 127.020997][ T6205] veth1_vlan: left promiscuous mode [ 127.037355][ T6205] veth0_vlan: left promiscuous mode [ 127.470747][ T6205] team0 (unregistering): Port device team_slave_1 removed [ 127.508863][ T6205] team0 (unregistering): Port device team_slave_0 removed [ 127.974383][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.981659][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.036181][ T8577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.057506][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.064504][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.096744][ T8577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.247278][ T8577] hsr_slave_0: entered promiscuous mode [ 128.253958][ T8577] hsr_slave_1: entered promiscuous mode [ 128.676077][ T5144] Bluetooth: hci2: command tx timeout [ 128.769449][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 129.017141][ T8577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.037148][ T8577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.066111][ T8577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.096366][ T8577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.232383][ T8577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.254073][ T8577] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.269219][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.276403][ T6199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.451456][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.458646][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.523069][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.530642][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.571352][ T8725] bridge0: entered allmulticast mode [ 129.597746][ T8728] netlink: 36 bytes leftover after parsing attributes in process `syz.4.803'. [ 129.638807][ T8727] bridge_slave_1: left allmulticast mode [ 129.644730][ T8727] bridge_slave_1: left promiscuous mode [ 129.658109][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.680403][ T8727] bridge_slave_0: left allmulticast mode [ 129.686537][ T8727] bridge_slave_0: left promiscuous mode [ 129.692488][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.756101][ T5144] Bluetooth: hci2: command tx timeout [ 131.984604][ T8577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.013230][ T8770] sock: sock_set_timeout: `syz.1.815' (pid 8770) tries to set negative timeout [ 132.060819][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 132.266220][ T8577] veth0_vlan: entered promiscuous mode [ 132.274483][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 132.335822][ T8779] netlink: 'syz.2.818': attribute type 3 has an invalid length. [ 132.378260][ T8577] veth1_vlan: entered promiscuous mode [ 132.482981][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.821'. [ 132.507921][ T8792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.555373][ T8577] veth0_macvtap: entered promiscuous mode [ 132.597708][ T8577] veth1_macvtap: entered promiscuous mode [ 132.614516][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.625292][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.641725][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.682862][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.703942][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.714587][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.726226][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.758836][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 132.797365][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.808254][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.818183][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.828758][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.838935][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.849505][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.860431][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.866356][ T5144] Bluetooth: hci2: command tx timeout [ 132.896650][ T8577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.909373][ T8577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.925765][ T8577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.934513][ T8577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.955391][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 132.969602][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 132.979622][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.830'. [ 133.008294][ T8814] gtp0: entered promiscuous mode [ 133.013590][ T8814] gtp0: entered allmulticast mode [ 133.026495][ T8814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.088680][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157441][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.833'. [ 133.167405][ T6210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.175480][ T6210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.206722][ T8825] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 133.212085][ T6196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.214590][ T8825] netlink: 224 bytes leftover after parsing attributes in process `syz.2.832'. [ 133.233088][ T6196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.260274][ T8833] Bluetooth: MGMT ver 1.23 [ 133.420291][ T8839] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 133.701995][ T8852] bridge1: port 1(bridge_slave_1) entered blocking state [ 133.712876][ T8852] bridge1: port 1(bridge_slave_1) entered disabled state [ 133.722015][ T8852] bridge_slave_1: entered allmulticast mode [ 133.730456][ T8852] bridge_slave_1: entered promiscuous mode [ 133.738489][ T8854] vcan0: Master is either lo or non-ether device [ 133.764006][ T8856] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 133.775556][ T8856] tipc: Enabled bearer , priority 10 [ 134.256361][ T8870] xt_l2tp: wrong L2TP version: 0 [ 134.294816][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.430439][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.580856][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.709787][ T8883] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.797905][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.917924][ T8893] __nla_validate_parse: 8 callbacks suppressed [ 134.917944][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 135.110256][ T12] bridge_slave_1: left allmulticast mode [ 135.125995][ T12] bridge_slave_1: left promiscuous mode [ 135.131887][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.218166][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 135.229122][ T12] bridge_slave_0: left allmulticast mode [ 135.234850][ T12] bridge_slave_0: left promiscuous mode [ 135.259303][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.268390][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.278526][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.287183][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.297018][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.312191][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 135.321869][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.668774][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.680213][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.692516][ T12] bond0 (unregistering): Released all slaves [ 136.112024][ T8935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.861'. [ 136.336935][ T12] hsr_slave_0: left promiscuous mode [ 136.343520][ T12] hsr_slave_1: left promiscuous mode [ 136.354974][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.396085][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.421951][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.438313][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.491491][ T12] veth1_macvtap: left promiscuous mode [ 136.516200][ T12] veth0_macvtap: left promiscuous mode [ 136.532059][ T12] veth1_vlan: left promiscuous mode [ 136.544145][ T12] veth0_vlan: left promiscuous mode [ 136.557615][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 136.634333][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 136.671034][ T8954] netlink: 'syz.4.870': attribute type 3 has an invalid length. [ 137.140025][ T8963] netlink: 'syz.2.873': attribute type 2 has an invalid length. [ 137.294854][ T12] team0 (unregistering): Port device team_slave_1 removed [ 137.339369][ T12] team0 (unregistering): Port device team_slave_0 removed [ 137.397583][ T5144] Bluetooth: hci2: command tx timeout [ 137.761263][ T8951] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 137.808332][ T8963] : entered promiscuous mode [ 137.929202][ T8907] chnl_net:caif_netlink_parms(): no params data found [ 138.172815][ T8985] bond0: entered promiscuous mode [ 138.178447][ T8985] bond_slave_0: entered promiscuous mode [ 138.184421][ T8985] bond_slave_1: entered promiscuous mode [ 138.191662][ T8985] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.260457][ T8985] bond0: left promiscuous mode [ 138.265413][ T8985] bond_slave_0: left promiscuous mode [ 138.272706][ T8985] bond_slave_1: left promiscuous mode [ 138.338204][ T8987] batadv_slave_1: entered promiscuous mode [ 138.351036][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.363004][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.372262][ T8907] bridge_slave_0: entered allmulticast mode [ 138.409728][ T8907] bridge_slave_0: entered promiscuous mode [ 138.434039][ T8987] batadv_slave_1: left promiscuous mode [ 138.469255][ T8994] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 138.473992][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.490565][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.515154][ T8907] bridge_slave_1: entered allmulticast mode [ 138.542066][ T8907] bridge_slave_1: entered promiscuous mode [ 138.660616][ T8907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.681901][ T8907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.736972][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.886'. [ 138.754612][ T8907] team0: Port device team_slave_0 added [ 138.783294][ T8907] team0: Port device team_slave_1 added [ 138.799249][ T9002] xt_cluster: you have exceeded the maximum number of cluster nodes (600 > 32) [ 138.885503][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.899673][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 138.921999][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.949769][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'. [ 138.960992][ T8907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.978868][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.994567][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.061045][ T8907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.086192][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 139.096798][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 139.118542][ T9009] netlink: 'syz.4.888': attribute type 12 has an invalid length. [ 139.196934][ T8907] hsr_slave_0: entered promiscuous mode [ 139.256201][ T8907] hsr_slave_1: entered promiscuous mode [ 139.475983][ T5144] Bluetooth: hci2: command tx timeout [ 139.935197][ T8907] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.961754][ T8907] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.982820][ T8907] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.990594][ T9041] __nla_validate_parse: 2 callbacks suppressed [ 139.990612][ T9041] netlink: 48 bytes leftover after parsing attributes in process `syz.1.902'. [ 140.018442][ T8907] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 140.055435][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 140.172353][ T8907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.231265][ T8907] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.244292][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 140.282338][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 140.306404][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.904'. [ 140.329539][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.336766][ T6196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.361081][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.368293][ T6196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.711322][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 140.890878][ T8907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.923207][ T8907] veth0_vlan: entered promiscuous mode [ 140.970378][ T8907] veth1_vlan: entered promiscuous mode [ 140.995066][ T8907] veth0_macvtap: entered promiscuous mode [ 141.036723][ T8907] veth1_macvtap: entered promiscuous mode [ 141.078830][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.090492][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.100920][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.111611][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.121660][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.132544][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.144425][ T8907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.168267][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.186545][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.203453][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.215630][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.235100][ T8907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.249046][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 141.267668][ T8907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.284338][ T8907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.328303][ T8907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.345933][ T8907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.385834][ T8907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.394596][ T8907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.544595][ T6196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.556134][ T5144] Bluetooth: hci2: command tx timeout [ 141.571909][ T6196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.658425][ T6199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.676628][ T6199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.016642][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 142.034888][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'. [ 142.080460][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 142.653575][ T9153] Bluetooth: MGMT ver 1.23 [ 142.902217][ T9160] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.184100][ T9177] Bluetooth: MGMT ver 1.23 [ 143.552582][ T6210] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.365239][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.385003][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.393717][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.416874][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.428268][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.436682][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.806850][ T6210] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.889192][ T9225] dvmrp0: entered allmulticast mode [ 146.039322][ T6210] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.218519][ T6210] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.376881][ T6210] bridge_slave_1: left allmulticast mode [ 146.385470][ T6210] bridge_slave_1: left promiscuous mode [ 146.399083][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.433702][ T6210] bridge_slave_0: left allmulticast mode [ 146.454491][ T6210] bridge_slave_0: left promiscuous mode [ 146.483254][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.516234][ T55] Bluetooth: hci2: command tx timeout [ 147.116164][ T6210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.127975][ T6210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.140206][ T6210] bond0 (unregistering): Released all slaves [ 147.160275][ T9268] __nla_validate_parse: 2 callbacks suppressed [ 147.160293][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.970'. [ 147.193307][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.970'. [ 147.202654][ T9268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.970'. [ 147.306746][ T9214] chnl_net:caif_netlink_parms(): no params data found [ 147.534574][ T9283] syz.2.973 (9283) used obsolete PPPIOCDETACH ioctl [ 147.600670][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.625957][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.663838][ T9214] bridge_slave_0: entered allmulticast mode [ 147.702812][ T9214] bridge_slave_0: entered promiscuous mode [ 147.724428][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.754413][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.771805][ T9214] bridge_slave_1: entered allmulticast mode [ 147.783102][ T9214] bridge_slave_1: entered promiscuous mode [ 147.824918][ T6210] hsr_slave_0: left promiscuous mode [ 147.838555][ T6210] hsr_slave_1: left promiscuous mode [ 147.844569][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.852880][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.862342][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.869991][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.891193][ T6210] veth1_macvtap: left promiscuous mode [ 147.905817][ T6210] veth0_macvtap: left promiscuous mode [ 147.907123][ T9297] netlink: 44 bytes leftover after parsing attributes in process `syz.0.978'. [ 147.911763][ T6210] veth1_vlan: left promiscuous mode [ 147.935548][ T6210] veth0_vlan: left promiscuous mode [ 148.463413][ T6210] team0 (unregistering): Port device team_slave_1 removed [ 148.508474][ T6210] team0 (unregistering): Port device team_slave_0 removed [ 148.597578][ T55] Bluetooth: hci2: command tx timeout [ 149.036991][ T9311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.983'. [ 149.042321][ T9214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.087727][ T9214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.242227][ T9214] team0: Port device team_slave_0 added [ 149.252434][ T9214] team0: Port device team_slave_1 added [ 149.367606][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.374606][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.423927][ T9214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.437914][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.445045][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.471837][ T9214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.502556][ T9324] lo speed is unknown, defaulting to 1000 [ 149.555602][ T9324] lo speed is unknown, defaulting to 1000 [ 149.633237][ T9214] hsr_slave_0: entered promiscuous mode [ 149.639895][ T9214] hsr_slave_1: entered promiscuous mode [ 149.665075][ T9324] lo speed is unknown, defaulting to 1000 [ 149.693413][ T9324] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.734238][ T9324] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.784676][ T9339] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.988'. [ 149.798093][ T9343] netlink: 232 bytes leftover after parsing attributes in process `syz.2.991'. [ 149.807606][ T9343] netlink: 72 bytes leftover after parsing attributes in process `syz.2.991'. [ 149.811624][ T9329] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.988'. [ 149.840945][ T9342] netlink: 232 bytes leftover after parsing attributes in process `syz.2.991'. [ 149.844691][ T9324] lo speed is unknown, defaulting to 1000 [ 149.913085][ T9324] lo speed is unknown, defaulting to 1000 [ 149.925250][ T9324] lo speed is unknown, defaulting to 1000 [ 149.999993][ T9324] lo speed is unknown, defaulting to 1000 [ 150.034601][ T9324] lo speed is unknown, defaulting to 1000 [ 150.173568][ T9355] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 150.542917][ T9214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.569085][ T9214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.586054][ T9214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.607072][ T9214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.676080][ T55] Bluetooth: hci2: command tx timeout [ 150.751780][ T9214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.770077][ T9214] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.782531][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.789747][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.851052][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.858247][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.027274][ T9399] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 151.071464][ T9399] team0: Port device team_slave_0 removed [ 151.146179][ T9401] sch_fq: defrate 511 ignored. [ 151.500990][ T9417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.523720][ T9417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.543188][ T9417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.561556][ T9417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.609809][ T9417] bond0: (slave batadv0): Releasing backup interface [ 151.674674][ T9214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.718143][ T9214] veth0_vlan: entered promiscuous mode [ 151.754471][ T9214] veth1_vlan: entered promiscuous mode [ 151.811512][ T9214] veth0_macvtap: entered promiscuous mode [ 151.831149][ T9214] veth1_macvtap: entered promiscuous mode [ 151.939704][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.953689][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.976505][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.992989][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.005026][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.020818][ T9435] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.035204][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.047956][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.059939][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.085867][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.098216][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.141410][ T9214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.154998][ T9214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.171715][ T9214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.181763][ T9214] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.194423][ T9446] __nla_validate_parse: 9 callbacks suppressed [ 152.194441][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 152.307393][ T9454] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 152.335540][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.345325][ T9454] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 152.351678][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.391388][ T6199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.414221][ T6199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.655188][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1028'. [ 152.946842][ T9475] lo speed is unknown, defaulting to 1000 [ 153.058589][ T9487] openvswitch: netlink: Message has 1275 unknown bytes. [ 153.066112][ T9487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.193780][ T9490] xt_l2tp: invalid flags combination: 0 [ 153.273339][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 153.307031][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 153.548543][ T9505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'. [ 153.566970][ T9505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'. [ 153.785207][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.798383][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.036322][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.044767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.392577][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.586094][ T9530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1043'. [ 154.593421][ T9528] netlink: 'syz.4.1046': attribute type 10 has an invalid length. [ 154.661666][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.707757][ T9537] sctp: [Deprecated]: syz.4.1046 (pid 9537) Use of int in maxseg socket option. [ 154.707757][ T9537] Use struct sctp_assoc_value instead [ 154.753395][ T9532] batadv_slave_1: entered promiscuous mode [ 154.777703][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.788062][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.797225][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.805185][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.820433][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.830718][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.846759][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 154.860000][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.931486][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.990541][ T9547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1050'. [ 155.014957][ T9552] syzkaller0: entered allmulticast mode [ 155.035044][ T9552] syzkaller0 (unregistering): left allmulticast mode [ 155.087640][ T9531] batadv_slave_1: left promiscuous mode [ 155.204371][ T62] bridge_slave_1: left allmulticast mode [ 155.230380][ T62] bridge_slave_1: left promiscuous mode [ 155.238064][ T9556] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1054'. [ 155.254795][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.257230][ T9556] unsupported nlmsg_type 40 [ 155.284320][ T62] bridge_slave_0: left allmulticast mode [ 155.294153][ T62] bridge_slave_0: left promiscuous mode [ 155.309579][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.883957][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.057239][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.066105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.231876][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.282836][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.326681][ T62] bond0 (unregistering): Released all slaves [ 156.383677][ T9540] lo speed is unknown, defaulting to 1000 [ 156.665557][ T9584] netlink: 'syz.4.1064': attribute type 3 has an invalid length. [ 156.800813][ T9593] netlink: 'syz.1.1065': attribute type 5 has an invalid length. [ 156.853298][ T9593] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 156.866521][ T9540] chnl_net:caif_netlink_parms(): no params data found [ 156.923515][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.934754][ T5144] Bluetooth: hci2: command tx timeout [ 157.145849][ T9576] lo speed is unknown, defaulting to 1000 [ 157.605213][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.625966][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.633288][ T9540] bridge_slave_0: entered allmulticast mode [ 157.663838][ T9540] bridge_slave_0: entered promiscuous mode [ 157.685852][ T9630] __nla_validate_parse: 3 callbacks suppressed [ 157.685870][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 157.706218][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.714082][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.728237][ T9540] bridge_slave_1: entered allmulticast mode [ 157.735355][ T9540] bridge_slave_1: entered promiscuous mode [ 157.754554][ T62] hsr_slave_0: left promiscuous mode [ 157.802200][ T62] hsr_slave_1: left promiscuous mode [ 157.849903][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.866681][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.887480][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.894953][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.942763][ T62] veth1_macvtap: left promiscuous mode [ 157.951736][ T62] veth0_macvtap: left promiscuous mode [ 157.957992][ T62] veth1_vlan: left promiscuous mode [ 157.963618][ T62] veth0_vlan: left promiscuous mode [ 158.354924][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 158.421060][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 158.529156][ T62] team0 (unregistering): Port device team_slave_1 removed [ 158.573173][ T62] team0 (unregistering): Port device team_slave_0 removed [ 158.982339][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 158.996083][ T5144] Bluetooth: hci2: command tx timeout [ 158.998134][ T52] net_ratelimit: 1 callbacks suppressed [ 158.998152][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.065547][ T9657] bridge_slave_1: left allmulticast mode [ 159.077682][ T9657] bridge_slave_1: left promiscuous mode [ 159.083495][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.092382][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.100882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.115489][ T9657] bridge_slave_0: left allmulticast mode [ 159.121875][ T9657] bridge_slave_0: left promiscuous mode [ 159.127891][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.223062][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.236229][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.389187][ T9540] team0: Port device team_slave_0 added [ 159.414985][ T9540] team0: Port device team_slave_1 added [ 159.482115][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 159.507097][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.514097][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.602234][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.640776][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.676270][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.719935][ T9686] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1087'. [ 159.727890][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.743160][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1087'. [ 159.763324][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1086'. [ 159.775873][ T9687] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1087'. [ 159.784956][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1087'. [ 159.949259][ T9540] hsr_slave_0: entered promiscuous mode [ 159.969112][ T9540] hsr_slave_1: entered promiscuous mode [ 159.994109][ T9699] nbd: socks must be embedded in a SOCK_ITEM attr [ 160.037101][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.147096][ T9709] netlink: 'syz.0.1093': attribute type 1 has an invalid length. [ 160.278918][ T9711] netlink: 'syz.4.1095': attribute type 3 has an invalid length. [ 160.391446][ T9720] netlink: 'syz.4.1097': attribute type 11 has an invalid length. [ 160.482299][ T9725] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 160.493806][ T9725] ip6gretap0: entered promiscuous mode [ 160.504399][ T9725] macvtap1: entered promiscuous mode [ 160.510302][ T9725] macvtap1: entered allmulticast mode [ 160.515870][ T9725] ip6gretap0: entered allmulticast mode [ 160.523424][ T9725] ip6gretap0: left allmulticast mode [ 160.529291][ T9725] ip6gretap0: left promiscuous mode [ 160.580557][ T9540] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.589769][ T9540] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.599412][ T9540] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.610102][ T9540] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.702354][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.723210][ T9540] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.743623][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.750907][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.777607][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.784872][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.995396][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.044854][ T9540] veth0_vlan: entered promiscuous mode [ 161.073090][ T9540] veth1_vlan: entered promiscuous mode [ 161.076200][ T5144] Bluetooth: hci2: command tx timeout [ 161.079480][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.114700][ T9746] netlink: 'syz.1.1104': attribute type 4 has an invalid length. [ 161.142191][ T9540] veth0_macvtap: entered promiscuous mode [ 161.154285][ T9540] veth1_macvtap: entered promiscuous mode [ 161.157453][ T6205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.168558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.182485][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.195962][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.206615][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.217316][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.228514][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.248753][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.259962][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.270379][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.281141][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.287957][ T9750] sctp: [Deprecated]: syz.1.1105 (pid 9750) Use of int in max_burst socket option. [ 161.287957][ T9750] Use struct sctp_assoc_value instead [ 161.292386][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.339241][ T9540] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.364692][ T9540] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.384325][ T9540] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.393520][ T9750] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 161.407464][ T9540] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.533153][ T6199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.566924][ T6199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.595245][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.624550][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.633667][ T9756] lo: entered allmulticast mode [ 161.646811][ T9756] lo: left allmulticast mode [ 162.129311][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.164384][ T9794] netlink: 'syz.2.1119': attribute type 2 has an invalid length. [ 162.780652][ T9819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.789576][ T9819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.120553][ T9834] __nla_validate_parse: 12 callbacks suppressed [ 163.120576][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 163.414669][ T9848] netlink: 'syz.2.1139': attribute type 13 has an invalid length. [ 163.501804][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.526777][ T9848] macvtap0: entered promiscuous mode [ 163.534971][ T9848] macvtap0: refused to change device tx_queue_len [ 164.196611][ T52] net_ratelimit: 2 callbacks suppressed [ 164.196632][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.225987][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.234381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.324937][ T9859] sctp: [Deprecated]: syz.1.1141 (pid 9859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.324937][ T9859] Use struct sctp_sack_info instead [ 164.409801][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1140'. [ 164.495110][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1144'. [ 164.540497][ T9870] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.566622][ T9870] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.584586][ T9870] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.598016][ T9875] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 164.621161][ T9870] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.655618][ T9874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1144'. [ 164.657955][ T9870] geneve2: entered allmulticast mode [ 164.706665][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.742645][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.754249][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.768261][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.781609][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 164.793968][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.867308][ T9888] sctp: [Deprecated]: syz.1.1148 (pid 9888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.867308][ T9888] Use struct sctp_sack_info instead [ 165.121145][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.165195][ T9880] lo speed is unknown, defaulting to 1000 [ 165.168381][ T9896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.223234][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1152'. [ 165.236979][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.246681][ T9895] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1152'. [ 165.255450][ T9896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.265824][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1152'. [ 165.285118][ T9895] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1152'. [ 165.302655][ T9896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.313675][ T9896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.338236][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.347045][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.442337][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.649566][ T9921] Cannot find del_set index 4 as target [ 165.735432][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.834898][ T9926] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1162'. [ 165.947676][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 165.979492][ T9880] chnl_net:caif_netlink_parms(): no params data found [ 166.116116][ T62] bridge_slave_1: left allmulticast mode [ 166.146863][ T62] bridge_slave_1: left promiscuous mode [ 166.167133][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.184927][ T62] bridge_slave_0: left allmulticast mode [ 166.191617][ T62] bridge_slave_0: left promiscuous mode [ 166.208505][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.841137][ T55] Bluetooth: hci2: command tx timeout [ 166.988200][ T9943] syz.2.1165: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 167.026378][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.2.1165 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 167.037220][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.047925][ T9943] Call Trace: [ 167.051305][ T9943] [ 167.054232][ T9943] dump_stack_lvl+0x241/0x360 [ 167.058958][ T9943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.064163][ T9943] ? __pfx__printk+0x10/0x10 [ 167.068768][ T9943] ? __rcu_read_unlock+0xa1/0x110 [ 167.073834][ T9943] warn_alloc+0x278/0x410 [ 167.078204][ T9943] ? stack_depot_save_flags+0x29/0x830 [ 167.083697][ T9943] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 167.089815][ T9943] ? __pfx_warn_alloc+0x10/0x10 [ 167.094781][ T9943] ? kasan_save_track+0x3f/0x80 [ 167.099658][ T9943] ? __kasan_kmalloc+0x98/0xb0 [ 167.104442][ T9943] ? xsk_setsockopt+0x4ea/0x950 [ 167.109322][ T9943] ? do_sock_setsockopt+0x3af/0x720 [ 167.114568][ T9943] ? __x64_sys_setsockopt+0x1ee/0x280 [ 167.119955][ T9943] ? do_syscall_64+0xf3/0x230 [ 167.124648][ T9943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.130741][ T9943] __vmalloc_node_range_noprof+0x126/0x1380 [ 167.136666][ T9943] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.143019][ T9943] ? __kasan_kmalloc+0x98/0xb0 [ 167.147789][ T9943] vmalloc_user_noprof+0x74/0x80 [ 167.152729][ T9943] ? xskq_create+0xb6/0x170 [ 167.157229][ T9943] xskq_create+0xb6/0x170 [ 167.161679][ T9943] xsk_init_queue+0xa1/0x100 [ 167.166291][ T9943] xsk_setsockopt+0x4ea/0x950 [ 167.171335][ T9943] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.176556][ T9943] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.181445][ T9943] ? aa_sock_opt_perm+0x79/0x120 [ 167.186516][ T9943] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.191730][ T9943] do_sock_setsockopt+0x3af/0x720 [ 167.196765][ T9943] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 167.202319][ T9943] ? __fget_files+0x395/0x410 [ 167.206997][ T9943] ? __fget_files+0x2a/0x410 [ 167.211595][ T9943] __x64_sys_setsockopt+0x1ee/0x280 [ 167.216826][ T9943] do_syscall_64+0xf3/0x230 [ 167.221334][ T9943] ? clear_bhb_loop+0x35/0x90 [ 167.226014][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.231917][ T9943] RIP: 0033:0x7f3e7757ff19 [ 167.236435][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.256244][ T9943] RSP: 002b:00007f3e783d1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.264675][ T9943] RAX: ffffffffffffffda RBX: 00007f3e77746080 RCX: 00007f3e7757ff19 [ 167.272680][ T9943] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 167.280666][ T9943] RBP: 00007f3e775f3986 R08: 0000000000000004 R09: 0000000000000000 [ 167.288656][ T9943] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.296639][ T9943] R13: 0000000000000000 R14: 00007f3e77746080 R15: 00007fff5745a658 [ 167.304634][ T9943] [ 167.320920][ T9943] Mem-Info: [ 167.324273][ T9943] active_anon:3115 inactive_anon:0 isolated_anon:0 [ 167.324273][ T9943] active_file:1412 inactive_file:38252 isolated_file:0 [ 167.324273][ T9943] unevictable:768 dirty:191 writeback:0 [ 167.324273][ T9943] slab_reclaimable:10813 slab_unreclaimable:104460 [ 167.324273][ T9943] mapped:29387 shmem:1443 pagetables:645 [ 167.324273][ T9943] sec_pagetables:0 bounce:0 [ 167.324273][ T9943] kernel_misc_reclaimable:0 [ 167.324273][ T9943] free:1339096 free_pcp:410 free_cma:0 [ 167.370445][ T9943] Node 0 active_anon:12460kB inactive_anon:0kB active_file:5648kB inactive_file:152932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117548kB dirty:760kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11628kB pagetables:2580kB sec_pagetables:0kB all_unreclaimable? no [ 167.403976][ T9943] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 167.442682][ T9943] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.484579][ T9943] lowmem_reserve[]: 0 2465 2466 0 0 [ 167.490142][ T9943] Node 0 DMA32 free:1441520kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:12420kB inactive_anon:0kB active_file:5648kB inactive_file:152100kB unevictable:1536kB writepending:756kB present:3129332kB managed:2552848kB mlocked:0kB bounce:0kB free_pcp:1512kB local_pcp:744kB free_cma:0kB [ 167.521536][ T9943] lowmem_reserve[]: 0 0 0 0 0 [ 167.526518][ T9943] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 167.553597][ T9943] lowmem_reserve[]: 0 0 0 0 0 [ 167.558594][ T9943] Node 1 Normal free:3899504kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.587735][ T9943] lowmem_reserve[]: 0 0 0 0 0 [ 167.592503][ T9943] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.608476][ T9943] Node 0 DMA32: 124*4kB (UE) 85*8kB (UME) 162*16kB (UME) 238*32kB (UME) 59*64kB (UME) 41*128kB (UME) 37*256kB (UME) 24*512kB (UME) 26*1024kB (UME) 14*2048kB (UM) 328*4096kB (UM) = 1440952kB [ 167.629743][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.638899][ T9943] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 167.653893][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.663186][ T9943] Node 1 Normal: 198*4kB (UM) 57*8kB (UM) 45*16kB (UME) 216*32kB (UME) 91*64kB (UME) 34*128kB (UME) 12*256kB (UM) 7*512kB (UM) 5*1024kB (UM) 5*2048kB (UE) 942*4096kB (M) = 3899504kB [ 167.665052][ T62] bond0 (unregistering): Released all slaves [ 167.682858][ T9943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.698744][ T9943] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.708242][ T9943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.719664][ T9943] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.729058][ T9943] 41107 total pagecache pages [ 167.746939][ T9943] 0 pages in swap cache [ 167.751453][ T9943] Free swap = 124996kB [ 167.755895][ T9943] Total swap = 124996kB [ 167.760194][ T9943] 2097051 pages RAM [ 167.764083][ T9943] 0 pages HighMem/MovableOnly [ 167.769002][ T9943] 426989 pages reserved [ 167.773228][ T9943] 0 pages cma reserved [ 167.821070][ T9942] macsec1: entered promiscuous mode [ 167.836198][ T9942] erspan0: entered promiscuous mode [ 167.841535][ T9942] macsec1: entered allmulticast mode [ 167.852713][ T9942] erspan0: entered allmulticast mode [ 168.203971][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 168.221620][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 168.668414][ T9946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.709375][ T9946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.915968][ T55] Bluetooth: hci2: command tx timeout [ 168.935877][ T9946] macvtap0: left promiscuous mode [ 169.081384][ T9946] bridge1: left promiscuous mode [ 169.094166][ T9946] bridge1: left allmulticast mode [ 169.105548][ T9946] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.119756][ T9946] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.132237][ T9946] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.141187][ T9946] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.226113][ T9963] veth1_to_hsr: entered allmulticast mode [ 169.385283][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.407587][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.415483][ T9880] bridge_slave_0: entered allmulticast mode [ 169.460586][ T9880] bridge_slave_0: entered promiscuous mode [ 169.487800][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.505298][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.516097][ T9880] bridge_slave_1: entered allmulticast mode [ 169.523539][ T9880] bridge_slave_1: entered promiscuous mode [ 169.680807][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 169.711614][ T9997] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 169.743332][T10002] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1182'. [ 169.763468][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.793254][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.815590][ T62] hsr_slave_0: left promiscuous mode [ 169.839403][ T62] hsr_slave_1: left promiscuous mode [ 169.863772][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.886782][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.929054][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.943690][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.990255][ T62] veth1_macvtap: left promiscuous mode [ 169.997501][ T62] veth0_macvtap: left promiscuous mode [ 170.004335][ T62] veth1_vlan: left promiscuous mode [ 170.011125][ T62] veth0_vlan: left promiscuous mode [ 170.285285][T10021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1184'. [ 170.931097][ T62] team0 (unregistering): Port device team_slave_1 removed [ 170.974052][ T62] team0 (unregistering): Port device team_slave_0 removed [ 170.998073][ T55] Bluetooth: hci2: command tx timeout [ 171.435913][T10016] tipc: Resetting bearer [ 171.503686][T10016] tipc: Disabling bearer [ 171.588106][ T9880] team0: Port device team_slave_0 added [ 171.616662][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 171.628425][ T9880] team0: Port device team_slave_1 added [ 171.720428][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.743019][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.793011][ T9880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.842325][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.873783][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.877346][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1192'. [ 171.920657][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 171.940167][ T9880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.171113][ T9880] hsr_slave_0: entered promiscuous mode [ 172.195396][ T9880] hsr_slave_1: entered promiscuous mode [ 172.255924][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'. [ 172.944650][T10081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.987113][T10081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.075999][ T55] Bluetooth: hci2: command tx timeout [ 173.183431][T10080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.222392][ T9880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.250216][T10089] sctp: [Deprecated]: syz.4.1205 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.250216][T10089] Use struct sctp_sack_info instead [ 173.258180][ T9880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.325036][ T9880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.338842][ T9880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.431610][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.451970][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.467541][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.474788][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.491891][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.499147][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.532786][T10097] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 173.582937][T10096] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 173.606602][T10097] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.614511][T10097] bond0: (slave team0): Enslaving as an active interface with an up link [ 173.636900][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1209'. [ 173.653967][ T9880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.667124][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 173.676848][ T9880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.688504][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 173.700866][T10096] bond0: (slave team0): Releasing backup interface [ 173.837035][T10111] sit0: entered promiscuous mode [ 173.855586][T10111] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 173.912352][T10111] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1213'. [ 173.929002][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 173.995422][T10120] nlmon0: Master is either lo or non-ether device [ 174.028139][T10123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.153105][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.192008][T10130] netlink: 'syz.4.1217': attribute type 5 has an invalid length. [ 174.216792][T10130] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 174.235184][T10135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1219'. [ 174.268757][ T9880] veth0_vlan: entered promiscuous mode [ 174.279501][ T9880] veth1_vlan: entered promiscuous mode [ 174.312696][ T9880] veth0_macvtap: entered promiscuous mode [ 174.321690][ T9880] veth1_macvtap: entered promiscuous mode [ 174.342140][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.378993][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.417727][T10141] IPVS: set_ctl: invalid protocol: 60 172.30.0.5:20002 [ 174.419720][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.453611][T10143] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1220'. [ 174.478303][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.510842][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.537924][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.542290][T10146] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 174.601786][ T9880] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.622669][ T9880] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.626915][T10139] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 174.649086][ T9880] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.649646][T10139] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1220'. [ 174.679386][ T9880] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.708904][T10148] IPv6: sit2: Disabled Multicast RS [ 174.716978][T10139] net_ratelimit: 8 callbacks suppressed [ 174.716995][T10139] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 174.852872][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.870253][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.920502][ T6199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.956582][ T6199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.991387][T10145] lo speed is unknown, defaulting to 1000 [ 176.137482][T10223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1241'. [ 176.224200][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 176.241475][T10231] netlink: 'syz.0.1244': attribute type 3 has an invalid length. [ 176.249621][T10229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.259903][T10229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.528415][ T6196] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.607223][T10250] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 176.628095][T10250] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 176.649043][T10250] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 177.471229][ T6196] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.582983][T10260] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.584483][T10259] SET target dimension over the limit! [ 177.592663][T10260] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.607029][T10260] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.615802][T10260] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.770178][ T6196] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.786569][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.806899][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.830147][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.841964][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.850454][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.860466][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.928452][T10278] xt_ecn: cannot match TCP bits for non-tcp packets [ 178.008299][ T6196] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.277628][ T6196] bridge_slave_1: left allmulticast mode [ 178.283357][ T6196] bridge_slave_1: left promiscuous mode [ 178.289410][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.307393][ T6196] bridge_slave_0: left allmulticast mode [ 178.325741][ T6196] bridge_slave_0: left promiscuous mode [ 178.346439][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.928613][ T6196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.940570][ T6196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.951106][ T6196] bond0 (unregistering): Released all slaves [ 178.962618][T10270] lo speed is unknown, defaulting to 1000 [ 179.409085][T10270] chnl_net:caif_netlink_parms(): no params data found [ 179.436791][T10347] sctp: [Deprecated]: syz.2.1273 (pid 10347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.436791][T10347] Use struct sctp_sack_info instead [ 179.466129][T10348] sctp: [Deprecated]: syz.2.1273 (pid 10348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.466129][T10348] Use struct sctp_sack_info instead [ 179.680253][T10270] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.695108][T10270] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.727788][T10270] bridge_slave_0: entered allmulticast mode [ 179.734645][T10270] bridge_slave_0: entered promiscuous mode [ 179.761968][ T6196] hsr_slave_0: left promiscuous mode [ 179.768430][ T6196] hsr_slave_1: left promiscuous mode [ 179.774389][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.782050][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.790599][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.798690][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.819902][ T6196] veth1_macvtap: left promiscuous mode [ 179.825744][ T6196] veth0_macvtap: left promiscuous mode [ 179.831390][ T6196] veth1_vlan: left promiscuous mode [ 179.837113][ T6196] veth0_vlan: left promiscuous mode [ 180.036879][ T5144] Bluetooth: hci2: command tx timeout [ 180.271858][T10369] __nla_validate_parse: 4 callbacks suppressed [ 180.271879][T10369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1278'. [ 180.351188][ T6196] team0 (unregistering): Port device team_slave_1 removed [ 180.398596][ T6196] team0 (unregistering): Port device team_slave_0 removed [ 180.642433][T10378] netlink: 'syz.1.1280': attribute type 1 has an invalid length. [ 180.902223][T10270] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.915463][T10270] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.923807][T10270] bridge_slave_1: entered allmulticast mode [ 180.932404][T10270] bridge_slave_1: entered promiscuous mode [ 180.950168][T10364] tap0: tun_chr_ioctl cmd 1074025677 [ 180.957707][T10364] tap0: linktype set to 1 [ 181.017604][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 181.042525][T10378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.149242][T10270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.201164][T10270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.353548][T10270] team0: Port device team_slave_0 added [ 181.370766][T10270] team0: Port device team_slave_1 added [ 181.496351][T10270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.517096][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.569905][T10270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.613855][T10270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.634227][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.687762][T10270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.813753][T10270] hsr_slave_0: entered promiscuous mode [ 181.830352][T10270] hsr_slave_1: entered promiscuous mode [ 181.863615][T10413] lo speed is unknown, defaulting to 1000 [ 181.926585][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 181.935524][T10428] netlink: 'syz.1.1293': attribute type 3 has an invalid length. [ 181.952064][T10428] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.961693][T10428] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.971061][T10428] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.980400][T10428] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.992937][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 182.116728][ T5144] Bluetooth: hci2: command tx timeout [ 182.243578][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1298'. [ 182.277915][T10441] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.296254][T10441] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.305805][T10441] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.319735][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1298'. [ 182.328992][T10441] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.339484][T10441] geneve2: entered allmulticast mode [ 182.412922][T10444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1299'. [ 182.651177][T10456] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 182.710578][T10456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.723030][T10460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1304'. [ 182.783001][T10270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.820424][T10270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.839704][T10270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.862168][T10270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.032329][T10270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.098705][T10270] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.114777][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.122008][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.122984][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1310'. [ 183.153707][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.160888][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.180829][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1310'. [ 183.437732][T10482] xt_CT: No such helper "netbios-ns" [ 183.815608][T10270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.919601][T10270] veth0_vlan: entered promiscuous mode [ 183.974239][T10270] veth1_vlan: entered promiscuous mode [ 183.994576][T10515] netlink: 'syz.0.1319': attribute type 1 has an invalid length. [ 184.067598][T10270] veth0_macvtap: entered promiscuous mode [ 184.081804][T10270] veth1_macvtap: entered promiscuous mode [ 184.101530][T10523] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 184.126319][T10520] vlan2: entered allmulticast mode [ 184.132474][T10520] bond0: entered allmulticast mode [ 184.138116][T10520] bond_slave_0: entered allmulticast mode [ 184.144169][T10520] bond_slave_1: entered allmulticast mode [ 184.150507][T10520] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 184.172745][T10520] bond0: left allmulticast mode [ 184.188794][T10520] bond_slave_0: left allmulticast mode [ 184.194408][T10520] bond_slave_1: left allmulticast mode [ 184.197638][ T5144] Bluetooth: hci2: command tx timeout [ 184.221991][T10520] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 184.290112][T10529] netlink: 'syz.1.1321': attribute type 10 has an invalid length. [ 184.319475][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.330483][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.342209][T10270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.359028][T10529] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 184.404805][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.417230][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.428355][T10270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.484645][T10270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.515428][T10270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.525230][T10270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.534393][T10270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.626154][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.634043][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.697523][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.710462][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.789471][T10615] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 185.837025][T10618] netlink: 'syz.0.1347': attribute type 2 has an invalid length. [ 185.876252][T10618] netlink: 'syz.0.1347': attribute type 4 has an invalid length. [ 185.982515][T10628] __nla_validate_parse: 13 callbacks suppressed [ 185.982537][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 186.186375][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 186.218119][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 186.276193][ T5843] Bluetooth: hci2: command tx timeout [ 186.299952][T10648] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 186.322549][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 186.355802][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 186.356146][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 186.464049][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 186.675446][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1365'. [ 186.774771][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 187.101962][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1371'. [ 187.278633][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 187.423923][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1374'. [ 188.018263][T10724] ip6gretap0: entered promiscuous mode [ 188.053377][T10724] batadv_slave_0: entered promiscuous mode [ 188.496464][T10738] netlink: 'syz.0.1384': attribute type 10 has an invalid length. [ 188.530379][T10738] team0: entered promiscuous mode [ 188.540729][T10738] team_slave_0: entered promiscuous mode [ 188.546777][T10738] team_slave_1: entered promiscuous mode [ 188.553426][T10738] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.615953][T10738] vlan0: entered promiscuous mode [ 188.621056][T10738] gretap0: entered promiscuous mode [ 188.642630][T10738] gretap0: left promiscuous mode [ 188.858507][T10755] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 189.244129][T10768] netlink: 'syz.0.1392': attribute type 1 has an invalid length. [ 189.994482][T10800] netlink: 'syz.1.1400': attribute type 39 has an invalid length. [ 190.216818][T10808] netlink: 'syz.2.1403': attribute type 4 has an invalid length. [ 190.884101][T10716] Set syz1 is full, maxelem 65536 reached [ 191.313101][T10864] netlink: 'syz.4.1418': attribute type 10 has an invalid length. [ 191.335371][T10867] netlink: zone id is out of range [ 191.341261][T10864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.348878][T10867] netlink: zone id is out of range [ 191.354414][T10867] netlink: zone id is out of range [ 191.368864][T10864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.380788][T10867] netlink: zone id is out of range [ 191.391365][T10867] netlink: zone id is out of range [ 191.397107][T10867] netlink: zone id is out of range [ 191.406975][T10867] netlink: zone id is out of range [ 191.423096][T10867] netlink: zone id is out of range [ 191.435785][T10867] netlink: zone id is out of range [ 191.538672][T10867] bond0 (unregistering): (slave veth3): Releasing backup interface [ 191.578359][T10867] bond0 (unregistering): (slave veth5): Releasing backup interface [ 191.619147][T10867] bond0 (unregistering): Released all slaves [ 191.629153][T10877] sctp: [Deprecated]: syz.4.1420 (pid 10877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.629153][T10877] Use struct sctp_sack_info instead [ 191.905292][T10892] netlink: 'syz.1.1424': attribute type 11 has an invalid length. [ 191.997721][T10896] tipc: Started in network mode [ 192.004823][T10896] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 192.017774][T10896] tipc: Enabled bearer , priority 0 [ 192.323091][T10916] __nla_validate_parse: 12 callbacks suppressed [ 192.323113][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 192.339532][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1432'. [ 193.035808][ T52] tipc: Node number set to 10136234 [ 193.078460][T10928] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1436'. [ 193.114102][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1437'. [ 193.130258][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1437'. [ 193.324271][T10941] netlink: 'syz.2.1439': attribute type 1 has an invalid length. [ 193.405857][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 193.471414][T10953] sctp: [Deprecated]: syz.0.1443 (pid 10953) Use of int in max_burst socket option deprecated. [ 193.471414][T10953] Use struct sctp_assoc_value instead [ 193.669268][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 193.683285][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 193.700243][T10966] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1450'. [ 193.714410][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1450'. [ 193.726802][T10966] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (11) [ 193.780325][T10969] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 194.036026][ T5144] Bluetooth: hci4: command 0x0405 tx timeout [ 194.166872][T10988] team0 (unregistering): Port device team_slave_1 removed [ 194.508715][T11004] netlink: 'syz.0.1463': attribute type 1 has an invalid length. [ 194.523813][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.548785][T11004] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 194.661543][T11017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.683500][T11017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.693946][T11017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.712315][T11017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.724499][T11017] geneve2: entered allmulticast mode [ 194.914835][T11028] Cannot find del_set index 65533 as target [ 195.093285][T11040] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 195.152446][T11040] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.298666][T11040] bond5: (slave ip6gretap1): making interface the new active one [ 195.314642][T11040] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 195.404500][T11045] vlan2: entered promiscuous mode [ 195.411296][T11045] bond5: entered promiscuous mode [ 195.419000][T11045] ip6gretap1: entered promiscuous mode [ 195.424726][T11045] vlan2: entered allmulticast mode [ 195.442746][T11045] bond5: entered allmulticast mode [ 195.451204][T11045] ip6gretap1: entered allmulticast mode [ 195.921061][T11081] pim6reg1: entered promiscuous mode [ 195.930665][T11081] pim6reg1: entered allmulticast mode [ 196.268064][T11096] netlink: 'syz.1.1493': attribute type 10 has an invalid length. [ 197.524125][T11158] __nla_validate_parse: 29 callbacks suppressed [ 197.524145][T11158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1511'. [ 197.530526][T11160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1512'. [ 197.556381][T11160] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 197.564829][T11160] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 197.573341][T11160] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 197.582485][T11160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 197.591660][T11160] geneve3: entered allmulticast mode [ 197.612962][T11158] syz_tun: entered promiscuous mode [ 197.620136][T11158] batadv_slave_0: entered promiscuous mode [ 197.629072][T11158] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 197.636910][T11158] Cannot create hsr debugfs directory [ 197.642848][T11158] hsr1: entered allmulticast mode [ 197.651607][T11158] syz_tun: entered allmulticast mode [ 197.657202][T11158] batadv_slave_0: entered allmulticast mode [ 198.173569][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'. [ 198.208918][T11190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1522'. [ 198.461696][T11206] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.606276][ T5144] Bluetooth: hci4: command 0x0405 tx timeout [ 198.702912][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1535'. [ 198.712279][T11225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1535'. [ 199.092152][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 199.351672][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1546'. [ 199.620371][T11267] netlink: 'syz.0.1548': attribute type 5 has an invalid length. [ 200.554543][T11290] netlink: 58 bytes leftover after parsing attributes in process `syz.1.1554'. [ 200.734267][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 200.779095][T11301] netlink: 'syz.1.1561': attribute type 1 has an invalid length. [ 200.830334][T11301] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.872945][T11302] bond5: (slave bridge0): making interface the new active one [ 200.903846][T11302] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 201.139900][T11336] netlink: 'syz.0.1570': attribute type 4 has an invalid length. [ 201.148255][T11336] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1570'. [ 201.751402][T11371] xt_connbytes: Forcing CT accounting to be enabled [ 201.758331][T11371] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 202.742512][T11444] __nla_validate_parse: 3 callbacks suppressed [ 202.742525][T11444] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1607'. [ 202.939995][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1610'. [ 203.734732][T11500] netlink: 'syz.0.1627': attribute type 13 has an invalid length. [ 203.742966][T11500] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1627'. [ 204.579816][ T5911] hid-generic 0005:04F3:0058.0001: item fetching failed at offset 0/1 [ 204.591666][ T5911] hid-generic 0005:04F3:0058.0001: probe with driver hid-generic failed with error -22 [ 204.742775][T11546] vlan0: entered promiscuous mode [ 204.751493][T11546] wg1: entered promiscuous mode [ 204.804849][T11546] wg1: left promiscuous mode [ 205.152190][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1648'. [ 205.174299][T11570] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.1649'. [ 205.187772][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 205.242697][T11561] lo speed is unknown, defaulting to 1000 [ 205.420287][T11579] sit0: left promiscuous mode [ 205.470499][T11579] net_ratelimit: 80 callbacks suppressed [ 205.470510][T11579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.785051][T11601] syz_tun (unregistering): left promiscuous mode [ 205.922298][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 205.981302][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 206.003787][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1659'. [ 206.573170][T11649] xt_TCPMSS: Only works on TCP SYN packets [ 206.805365][T11653] syz.1.1672: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.821298][T11653] CPU: 1 UID: 0 PID: 11653 Comm: syz.1.1672 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 206.832112][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.842201][T11653] Call Trace: [ 206.845506][T11653] [ 206.848462][T11653] dump_stack_lvl+0x241/0x360 [ 206.853181][T11653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.858415][T11653] ? __pfx__printk+0x10/0x10 [ 206.863042][T11653] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 206.869500][T11653] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 206.876050][T11653] warn_alloc+0x278/0x410 [ 206.880408][T11653] ? stack_depot_save_flags+0x29/0x830 [ 206.885894][T11653] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 206.891993][T11653] ? __pfx_warn_alloc+0x10/0x10 [ 206.896880][T11653] ? kasan_save_track+0x3f/0x80 [ 206.901793][T11653] ? __kasan_kmalloc+0x98/0xb0 [ 206.906616][T11653] ? xsk_setsockopt+0x4ea/0x950 [ 206.911501][T11653] ? do_sock_setsockopt+0x3af/0x720 [ 206.916719][T11653] ? __x64_sys_setsockopt+0x1ee/0x280 [ 206.922107][T11653] ? do_syscall_64+0xf3/0x230 [ 206.926804][T11653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.932898][T11653] __vmalloc_node_range_noprof+0x126/0x1380 [ 206.938840][T11653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.945176][T11653] ? __kasan_kmalloc+0x98/0xb0 [ 206.949949][T11653] vmalloc_user_noprof+0x74/0x80 [ 206.954888][T11653] ? xskq_create+0xb6/0x170 [ 206.959392][T11653] xskq_create+0xb6/0x170 [ 206.963722][T11653] xsk_init_queue+0xa1/0x100 [ 206.968323][T11653] xsk_setsockopt+0x4ea/0x950 [ 206.973004][T11653] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.978205][T11653] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.983088][T11653] ? aa_sock_opt_perm+0x79/0x120 [ 206.988047][T11653] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.993256][T11653] do_sock_setsockopt+0x3af/0x720 [ 206.998296][T11653] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 207.003849][T11653] ? __fget_files+0x395/0x410 [ 207.008524][T11653] ? __fget_files+0x2a/0x410 [ 207.013117][T11653] __x64_sys_setsockopt+0x1ee/0x280 [ 207.018321][T11653] do_syscall_64+0xf3/0x230 [ 207.022826][T11653] ? clear_bhb_loop+0x35/0x90 [ 207.027508][T11653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.033428][T11653] RIP: 0033:0x7f4ebab7ff19 [ 207.037876][T11653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.057590][T11653] RSP: 002b:00007f4ebb9fb058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 207.066023][T11653] RAX: ffffffffffffffda RBX: 00007f4ebad45fa0 RCX: 00007f4ebab7ff19 [ 207.073995][T11653] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 207.081965][T11653] RBP: 00007f4ebabf3986 R08: 0000000000000004 R09: 0000000000000000 [ 207.089935][T11653] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.097902][T11653] R13: 0000000000000000 R14: 00007f4ebad45fa0 R15: 00007ffeddb88b78 [ 207.105912][T11653] [ 207.175815][T11653] Mem-Info: [ 207.179162][T11653] active_anon:3347 inactive_anon:0 isolated_anon:0 [ 207.179162][T11653] active_file:1447 inactive_file:38271 isolated_file:0 [ 207.179162][T11653] unevictable:768 dirty:36 writeback:0 [ 207.179162][T11653] slab_reclaimable:11255 slab_unreclaimable:107083 [ 207.179162][T11653] mapped:29440 shmem:1428 pagetables:601 [ 207.179162][T11653] sec_pagetables:0 bounce:0 [ 207.179162][T11653] kernel_misc_reclaimable:0 [ 207.179162][T11653] free:1335066 free_pcp:443 free_cma:0 [ 207.228453][T11653] Node 0 active_anon:13488kB inactive_anon:0kB active_file:5788kB inactive_file:153008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117760kB dirty:144kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11664kB pagetables:2404kB sec_pagetables:0kB all_unreclaimable? no [ 207.276002][T11653] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 207.347241][T11653] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.401232][T11653] lowmem_reserve[]: 0 2465 2466 0 0 [ 207.416003][T11653] Node 0 DMA32 free:1425704kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:13648kB inactive_anon:0kB active_file:5788kB inactive_file:152176kB unevictable:1536kB writepending:144kB present:3129332kB managed:2552848kB mlocked:0kB bounce:0kB free_pcp:1544kB local_pcp:712kB free_cma:0kB [ 207.461177][T11653] lowmem_reserve[]: 0 0 0 0 0 [ 207.473509][T11653] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 207.500712][T11653] lowmem_reserve[]: 0 0 0 0 0 [ 207.505593][T11653] Node 1 Normal free:3899588kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.534697][T11653] lowmem_reserve[]: 0 0 0 0 0 [ 207.541530][T11653] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 207.582125][T11653] Node 0 DMA32: 62*4kB (UME) 343*8kB (UME) 340*16kB (UME) 234*32kB (UME) 777*64kB (UME) 151*128kB (UME) 37*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 321*4096kB (UM) = 1424624kB [ 207.608257][T11653] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 207.620467][T11653] Node 1 Normal: 203*4kB (UM) 57*8kB (UM) 45*16kB (UME) 216*32kB (UME) 90*64kB (UME) 33*128kB (UME) 13*256kB (UM) 7*512kB (UM) 5*1024kB (UM) 5*2048kB (UE) 942*4096kB (M) = 3899588kB [ 207.661134][T11653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.688694][T11653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.710525][T11653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.731829][T11653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.744513][T11653] 41146 total pagecache pages [ 207.754491][T11653] 0 pages in swap cache [ 207.761380][T11653] Free swap = 124996kB [ 207.769022][T11653] Total swap = 124996kB [ 207.773210][T11653] 2097051 pages RAM [ 207.780649][T11653] 0 pages HighMem/MovableOnly [ 207.785365][T11653] 426989 pages reserved [ 207.801401][T11653] 0 pages cma reserved [ 207.840095][T11674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1678'. [ 208.165299][T11694] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1684'. [ 208.294980][T11703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.425540][T11710] netlink: 'syz.4.1688': attribute type 3 has an invalid length. [ 208.439178][T11710] netlink: 'syz.4.1688': attribute type 3 has an invalid length. [ 208.454427][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1688'. [ 208.531438][T11716] netlink: 'syz.0.1689': attribute type 15 has an invalid length. [ 209.001965][T11758] rdma_rxe: rxe_newlink: failed to add bond0 [ 209.124560][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'. [ 209.178717][T11764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1705'. [ 209.192920][T11764] netlink: 'syz.4.1705': attribute type 39 has an invalid length. [ 209.289157][T11771] netlink: 'syz.0.1708': attribute type 21 has an invalid length. [ 209.305115][T11771] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.334108][T11776] netlink: 'syz.2.1710': attribute type 3 has an invalid length. [ 209.340427][T11771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.349368][T11771] IPv6: NLM_F_CREATE should be set when creating new route [ 209.356690][T11771] IPv6: NLM_F_CREATE should be set when creating new route [ 209.363930][T11771] IPv6: NLM_F_CREATE should be set when creating new route [ 209.393494][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 209.513201][T11778] team_slave_0: left promiscuous mode [ 209.526846][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 209.550883][T11778] team0 (unregistering): Port device team_slave_0 removed [ 209.561809][T11778] team_slave_1: left promiscuous mode [ 209.569291][T11778] team0 (unregistering): Port device team_slave_1 removed [ 209.592277][T11791] xt_hashlimit: size too large, truncated to 1048576 [ 209.599955][T11780] netlink: 'syz.1.1711': attribute type 21 has an invalid length. [ 209.615866][T11780] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1711'. [ 209.625028][T11780] netlink: 'syz.1.1711': attribute type 4 has an invalid length. [ 209.655853][T11780] netlink: 'syz.1.1711': attribute type 3 has an invalid length. [ 209.663639][T11780] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1711'. [ 209.729168][T11790] netlink: 'syz.2.1713': attribute type 29 has an invalid length. [ 209.741991][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 213.403185][T11861] ------------[ cut here ]------------ [ 213.409595][T11861] WARNING: CPU: 1 PID: 11861 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 213.422626][T11861] Modules linked in: [ 213.426783][T11861] CPU: 1 UID: 0 PID: 11861 Comm: syz.2.1733 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 213.437702][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.447880][T11861] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 213.454591][T11861] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 a6 65 87 fa eb 05 e8 9f 65 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 213.474466][T11861] RSP: 0018:ffffc90004e5f6b0 EFLAGS: 00010283 [ 213.480745][T11861] RAX: ffffffff87180c81 RBX: 0000000000000000 RCX: 0000000000080000 [ 213.489002][T11861] RDX: ffffc90005912000 RSI: 0000000000004767 RDI: 0000000000004768 [ 213.497263][T11861] RBP: 0000000000000000 R08: ffffffff87180a8d R09: 1ffffffff20329b6 [ 213.505395][T11861] R10: dffffc0000000000 R11: ffffffff87177ad0 R12: ffff8880285aee32 [ 213.513642][T11861] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88802a2630a0 [ 213.521784][T11861] FS: 00007f3e783f26c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 213.530880][T11861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.537567][T11861] CR2: 00007f3e775659e0 CR3: 0000000079728000 CR4: 00000000003526f0 [ 213.545986][T11861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.554088][T11861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.562212][T11861] Call Trace: [ 213.565529][T11861] [ 213.568656][T11861] ? __warn+0x165/0x4d0 [ 213.574815][T11861] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 213.581380][T11861] ? report_bug+0x2b3/0x500 [ 213.586037][T11861] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 213.592490][T11861] ? handle_bug+0x60/0x90 [ 213.597193][T11861] ? exc_invalid_op+0x1a/0x50 [ 213.601925][T11861] ? asm_exc_invalid_op+0x1a/0x20 [ 213.607185][T11861] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 213.613672][T11861] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 213.619910][T11861] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 213.626118][T11861] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 213.632366][T11861] ? mac80211_hwsim_add_interface+0x86/0x320 [ 213.638527][T11861] mac80211_hwsim_add_interface+0x9a/0x320 [ 213.644397][T11861] drv_add_interface+0x2f8/0x8e0 [ 213.649504][T11861] ieee80211_do_open+0x73d/0x2420 [ 213.654582][T11861] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 213.661245][T11861] ieee80211_open+0x192/0x200 [ 213.666063][T11861] __dev_open+0x2d3/0x450 [ 213.670437][T11861] ? __pfx___dev_open+0x10/0x10 [ 213.675332][T11861] ? dev_set_rx_mode+0xb8/0x2e0 [ 213.680311][T11861] __dev_change_flags+0x1e2/0x6f0 [ 213.685395][T11861] ? __pfx___mutex_lock+0x10/0x10 [ 213.690548][T11861] ? __pfx___dev_change_flags+0x10/0x10 [ 213.696299][T11861] ? apparmor_capable+0x13b/0x1b0 [ 213.701379][T11861] dev_change_flags+0x8b/0x1a0 [ 213.706389][T11861] devinet_ioctl+0xcce/0x1ac0 [ 213.711139][T11861] inet_ioctl+0x3d7/0x4f0 [ 213.715528][T11861] ? __pfx_inet_ioctl+0x10/0x10 [ 213.721561][T11861] ? tomoyo_path_number_perm+0x679/0x860 [ 213.727840][T11861] ? __lock_acquire+0x1397/0x2100 [ 213.732952][T11861] ? tomoyo_path_number_perm+0x206/0x860 [ 213.739281][T11861] sock_do_ioctl+0x158/0x460 [ 213.744204][T11861] ? __pfx_sock_do_ioctl+0x10/0x10 [ 213.749468][T11861] sock_ioctl+0x626/0x8e0 [ 213.753880][T11861] ? __pfx_sock_ioctl+0x10/0x10 [ 213.758841][T11861] ? __fget_files+0x2a/0x410 [ 213.763558][T11861] ? __fget_files+0x2a/0x410 [ 213.768356][T11861] ? __pfx_sock_ioctl+0x10/0x10 [ 213.773256][T11861] __se_sys_ioctl+0xf5/0x170 [ 213.777999][T11861] do_syscall_64+0xf3/0x230 [ 213.782681][T11861] ? clear_bhb_loop+0x35/0x90 [ 213.787717][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.793813][T11861] RIP: 0033:0x7f3e7757fb1b [ 213.798934][T11861] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 213.818686][T11861] RSP: 002b:00007f3e783f0e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.827293][T11861] RAX: ffffffffffffffda RBX: 00007f3e783f0fa0 RCX: 00007f3e7757fb1b [ 213.835369][T11861] RDX: 00007f3e783f0f00 RSI: 0000000000008914 RDI: 0000000000000004 [ 213.844066][T11861] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 213.853233][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 213.861510][T11861] R13: 0000000000000048 R14: 00007f3e783f0fc0 R15: 00007f3e783f0f00 [ 213.869800][T11861] [ 213.872867][T11861] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.880331][T11861] CPU: 1 UID: 0 PID: 11861 Comm: syz.2.1733 Not tainted 6.13.0-rc1-syzkaller-00212-gf930594981cd #0 [ 213.892263][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.902369][T11861] Call Trace: [ 213.905700][T11861] [ 213.908668][T11861] dump_stack_lvl+0x241/0x360 [ 213.913388][T11861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.918704][T11861] ? __pfx__printk+0x10/0x10 [ 213.923334][T11861] ? vscnprintf+0x5d/0x90 [ 213.927720][T11861] panic+0x349/0x880 [ 213.931656][T11861] ? __warn+0x174/0x4d0 [ 213.935873][T11861] ? __pfx_panic+0x10/0x10 [ 213.940354][T11861] __warn+0x344/0x4d0 [ 213.944552][T11861] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 213.950753][T11861] report_bug+0x2b3/0x500 [ 213.955221][T11861] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 213.961430][T11861] handle_bug+0x60/0x90 [ 213.966148][T11861] exc_invalid_op+0x1a/0x50 [ 213.970697][T11861] asm_exc_invalid_op+0x1a/0x20 [ 213.975584][T11861] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 213.982379][T11861] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 a6 65 87 fa eb 05 e8 9f 65 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 214.002381][T11861] RSP: 0018:ffffc90004e5f6b0 EFLAGS: 00010283 [ 214.008491][T11861] RAX: ffffffff87180c81 RBX: 0000000000000000 RCX: 0000000000080000 [ 214.016760][T11861] RDX: ffffc90005912000 RSI: 0000000000004767 RDI: 0000000000004768 [ 214.024769][T11861] RBP: 0000000000000000 R08: ffffffff87180a8d R09: 1ffffffff20329b6 [ 214.032771][T11861] R10: dffffc0000000000 R11: ffffffff87177ad0 R12: ffff8880285aee32 [ 214.041604][T11861] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88802a2630a0 [ 214.049620][T11861] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 214.056055][T11861] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 214.062066][T11861] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 214.068766][T11861] ? mac80211_hwsim_add_interface+0x86/0x320 [ 214.074773][T11861] mac80211_hwsim_add_interface+0x9a/0x320 [ 214.080590][T11861] drv_add_interface+0x2f8/0x8e0 [ 214.085550][T11861] ieee80211_do_open+0x73d/0x2420 [ 214.090754][T11861] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 214.097379][T11861] ieee80211_open+0x192/0x200 [ 214.102099][T11861] __dev_open+0x2d3/0x450 [ 214.106478][T11861] ? __pfx___dev_open+0x10/0x10 [ 214.111438][T11861] ? dev_set_rx_mode+0xb8/0x2e0 [ 214.116347][T11861] __dev_change_flags+0x1e2/0x6f0 [ 214.121402][T11861] ? __pfx___mutex_lock+0x10/0x10 [ 214.126536][T11861] ? __pfx___dev_change_flags+0x10/0x10 [ 214.132602][T11861] ? apparmor_capable+0x13b/0x1b0 [ 214.137639][T11861] dev_change_flags+0x8b/0x1a0 [ 214.142414][T11861] devinet_ioctl+0xcce/0x1ac0 [ 214.147476][T11861] inet_ioctl+0x3d7/0x4f0 [ 214.152275][T11861] ? __pfx_inet_ioctl+0x10/0x10 [ 214.157233][T11861] ? tomoyo_path_number_perm+0x679/0x860 [ 214.162960][T11861] ? __lock_acquire+0x1397/0x2100 [ 214.168118][T11861] ? tomoyo_path_number_perm+0x206/0x860 [ 214.173774][T11861] sock_do_ioctl+0x158/0x460 [ 214.178466][T11861] ? __pfx_sock_do_ioctl+0x10/0x10 [ 214.183716][T11861] sock_ioctl+0x626/0x8e0 [ 214.188094][T11861] ? __pfx_sock_ioctl+0x10/0x10 [ 214.193316][T11861] ? __fget_files+0x2a/0x410 [ 214.197967][T11861] ? __fget_files+0x2a/0x410 [ 214.202580][T11861] ? __pfx_sock_ioctl+0x10/0x10 [ 214.207453][T11861] __se_sys_ioctl+0xf5/0x170 [ 214.212611][T11861] do_syscall_64+0xf3/0x230 [ 214.217401][T11861] ? clear_bhb_loop+0x35/0x90 [ 214.222721][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.228652][T11861] RIP: 0033:0x7f3e7757fb1b [ 214.233433][T11861] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 214.253756][T11861] RSP: 002b:00007f3e783f0e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.262364][T11861] RAX: ffffffffffffffda RBX: 00007f3e783f0fa0 RCX: 00007f3e7757fb1b [ 214.270342][T11861] RDX: 00007f3e783f0f00 RSI: 0000000000008914 RDI: 0000000000000004 [ 214.278329][T11861] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 214.286311][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 214.294290][T11861] R13: 0000000000000048 R14: 00007f3e783f0fc0 R15: 00007f3e783f0f00 [ 214.302708][T11861] [ 214.305876][T11861] Kernel Offset: disabled [ 214.310274][T11861] Rebooting in 86400 seconds..