last executing test programs: 12.866276379s ago: executing program 4 (id=3188): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000780)={0x0, 0x7, 0x0, [0x408000000000, 0x81, 0x66ce, 0x1, 0x1], [0x401, 0x401, 0x4, 0x6, 0x7f, 0x10000, 0x9, 0x80, 0x32, 0x81, 0x200, 0x8, 0x8, 0x80000001, 0x7, 0x0, 0xd6, 0x10000, 0x6000000, 0x0, 0x1, 0x4, 0x5, 0x9, 0x7, 0x4, 0x2, 0x4, 0x7, 0x8, 0x734, 0x70, 0x0, 0x100000001, 0x9, 0x100000, 0x1, 0x1, 0x7f, 0x6, 0x7, 0x8000, 0x6, 0x9, 0x1, 0x9, 0xc, 0x60000000, 0xf, 0x96e8, 0xe2b, 0x7, 0x7100000000000000, 0x1, 0x8, 0x200, 0x4, 0x3, 0xf, 0x0, 0x8, 0x5446, 0xa0, 0x7, 0x0, 0x6, 0x8000000000000001, 0xe69e, 0x6ede3f57, 0x9, 0x7029, 0x3, 0x0, 0x1, 0x2, 0x0, 0x8000000000000000, 0x2, 0x8, 0xf, 0x7, 0x5, 0x5, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x100, 0xc, 0x400, 0x9, 0x7, 0x4, 0xfffffffffffffffc, 0x8000000000000000, 0x7, 0xfffffffffffffffb, 0x0, 0x6, 0x0, 0x8, 0xfff, 0x5, 0xffffffff, 0x80000000, 0x2, 0x60000000, 0xbbce, 0x48, 0xffff, 0x1, 0x1, 0x4, 0x1, 0xfe, 0x8486, 0x7, 0x2, 0x0, 0x8, 0x3]}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000bc0)={r2, 0x5, 0x5, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000bc0)={r2, 0x5, 0x5, 0x1}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) (async) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) (async) r4 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0xd0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x4}}}, {{@ipv6={@loopback, @remote, [0xff, 0xffffffff, 0x3b9983f889429c90, 0xff], [0xffffffff, 0x0, 0xff, 0xffffffff], 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x2b, 0x7f, 0x3, 0x8}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @private0, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0xffffff00, 0xffffff00], 'pim6reg0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x4, 0x9, 0x3, 0x21}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@icmp6={{0x28}, {0x8, "0e00"}}, @common=@rt={{0x138}, {0x3ff, [0xee, 0x8], 0xf0ee, 0x2, 0x0, [@local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xe}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1c}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @local], 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000fc0)={0x0, 0x7, {0x5ef3, @usage=0x3, r3, 0x8, 0x9, 0x0, 0xd1e, 0x7, 0x410, @struct={0xa5, 0x3b}, 0x6, 0x3ebe, [0xa94, 0x9, 0x6, 0x5, 0x5, 0x7]}, {0x7, @usage=0x1, r3, 0x429ed0b5, 0x100, 0x2, 0xa7f0, 0x7, 0x14, @usage=0x8, 0x7, 0x8, [0x78, 0x6, 0x7, 0x8, 0x7, 0x7f]}, {0x0, @usage=0x95, r3, 0x0, 0x3, 0xc68, 0x5, 0x4, 0x410, @usage=0x9, 0x7fffffff, 0xe25, [0xffffffffffffffb1, 0x1, 0x8, 0x6, 0x100000000, 0xfffffffffffffffc]}, {0x3, 0x9, 0x8000000000000000}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x7808, 0x700, 0x3ff, 0x6}}) 12.037271583s ago: executing program 4 (id=3191): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000180)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f0000000680)) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1}, 0x10}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @local, 'batadv_slave_1\x00'}}, 0x1e) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) close(r7) (async) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'vxcan1\x00'}}, 0x1e) 11.859732392s ago: executing program 4 (id=3193): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) (rerun: 32) 11.560863304s ago: executing program 4 (id=3197): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040800098004000280140000248f52064a38ab36001000010000000000"], 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000dcc0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) pwrite64(r3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r4, &(0x7f000000da40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/192, 0xc0}, {&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000640)=""/149, 0x95}], 0x7, &(0x7f0000000780)=""/119, 0x77}, 0xfffe0}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/111, 0x6f}, {&(0x7f0000000900)=""/48, 0x30}], 0x2, &(0x7f0000000980)=""/235, 0xeb}, 0xc3e0}, {{&(0x7f0000000a80)=@ax25={{0x3, @null}, [@rose, @null, @null, @remote, @rose, @netrom, @null, @netrom]}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/6, 0x6}, {&(0x7f0000000b40)=""/32, 0x20}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/196, 0xc4}, {&(0x7f0000000c80)=""/228, 0xe4}], 0x8}, 0xa92a}, {{&(0x7f0000000e00)=@vsock, 0x80, &(0x7f0000001340)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/28, 0x1c}, {&(0x7f0000006780)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/209, 0xd1}, {&(0x7f0000000fc0)=""/219, 0xdb}, {&(0x7f00000010c0)=""/175, 0xaf}, {&(0x7f0000001180)=""/248, 0xf8}, {&(0x7f0000001280)=""/91, 0x5b}, {&(0x7f0000001300)=""/55, 0x37}], 0x9, &(0x7f0000001400)=""/26, 0x1a}, 0x81}, {{&(0x7f0000001440)=@nl=@unspec, 0x80, &(0x7f000000ba00)=[{&(0x7f0000007780)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/64, 0x40}, {&(0x7f0000001500)=""/204, 0xcc}, {&(0x7f0000001600)=""/223, 0xdf}, {&(0x7f0000008780)=""/89, 0x59}, {&(0x7f0000008800)=""/211, 0xd3}, {&(0x7f0000008900)=""/233, 0xe9}, {&(0x7f0000008a00)=""/4096, 0x1000}, {&(0x7f0000009a00)=""/4096, 0x1000}, {&(0x7f000000aa00)=""/4096, 0x1000}], 0xa, &(0x7f000000bac0)=""/250, 0xfa}, 0x7}, {{&(0x7f000000bbc0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f000000d040)=[{&(0x7f000000bc40)=""/110, 0x6e}, {&(0x7f000000bcc0)=""/4096, 0x1000}, {&(0x7f000000ccc0)=""/182, 0xb6}, {&(0x7f000000cd80)=""/66, 0x42}, {&(0x7f000000ce00)=""/157, 0x9d}, {&(0x7f000000cec0)=""/191, 0xbf}, {&(0x7f000000cf80)=""/156, 0x9c}], 0x7, &(0x7f000000d0c0)=""/128, 0x80}, 0x3b3}, {{&(0x7f000000d140)=@ll, 0x80, &(0x7f000000d580)=[{&(0x7f000000d1c0)=""/150, 0x96}, {&(0x7f000000d280)=""/238, 0xee}, {&(0x7f000000d380)=""/150, 0x96}, {&(0x7f000000d440)=""/95, 0x5f}, {&(0x7f0000001700)=""/10, 0xa}, {&(0x7f000000d4c0)=""/149, 0x95}], 0x6, &(0x7f000000d600)=""/220, 0xdc}, 0x8}, {{&(0x7f000000d700)=@tipc=@id, 0x80, &(0x7f000000d980)=[{&(0x7f000000d780)=""/178, 0xb2}, {&(0x7f000000d840)=""/243, 0xf3}, {&(0x7f000000d940)=""/41, 0x29}], 0x3, &(0x7f000000d9c0)}, 0x4}, {{0x0, 0x0, &(0x7f000000da00)}, 0xe}], 0x9, 0x2, &(0x7f000000dc80)={0x77359400}) 10.632364975s ago: executing program 4 (id=3209): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) 10.43393688s ago: executing program 4 (id=3213): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000a3d000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) write(r1, 0x0, 0x0) 3.32523001s ago: executing program 1 (id=3270): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) pread64(r1, &(0x7f0000000180)=""/127, 0x7f, 0x188d) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) 3.132924348s ago: executing program 0 (id=3272): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) sendmsg$nl_route_sched(r3, 0x0, 0x4004800) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000080)={0x7, &(0x7f0000000440)=[{@none}, {}, {}, {@none}, {@none}, {@none}, {@none}]}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000400)={0x0, 0x2, "64da36", 0xb, 0x8b}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) (async) sendmsg$nl_route_sched(r3, 0x0, 0x4004800) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000080)={0x7, &(0x7f0000000440)=[{@none}, {}, {}, {@none}, {@none}, {@none}, {@none}]}) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000400)={0x0, 0x2, "64da36", 0xb, 0x8b}) (async) 3.105236803s ago: executing program 1 (id=3273): r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x2ac, 0x6, 0xa, 0x400, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xe9, 0x7, 0x1, 0x0, "fc2cfe18a62dd27d638161c298edd5673f774fa37b2ac6dc5edb24a3822985e6ecec26973714d6e5f7089a634a70c54ac7083d37224cc916c0cf08ed74d63e942dcf0b748d29be1395584e77750c6032415eaa124c09a27e567d365e45f3072c795ece7be0dc3e644af77a6ccd69815ea07d05d8b8eba332338f14ba4b39145e79a70732706a2cc1e2771caecf1e0cf6467b40985e4fbf7d0c907847661255d53ad8873455c18176dbaa394c86035edb1a30146d7693b039bd99eef6efd361207b9761f3f28c8f2749274024216f66b072ec1cf54e121632105e36319654697ca5f236ae64"}, @NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xb0, 0x3, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWTABLE={0x214, 0x0, 0xa, 0x101, 0x0, 0x0, {0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x26, 0x6, "6c508b7bc93befbbbe84ef2c763fbc9c3caf5285c82a72c8b8278cc6202c112b5b1f"}, @NFTA_TABLE_USERDATA={0xb3, 0x6, "0b6a91623fd4ff7e3aa26a8f8c3234f3a5bbc35b219348f19690c16e8b16910d797933d1eb239d8f6924568447b95c79cd74c0da6f73af5dc5c026bc237dc02f3f16796db1697a395097498d9a51ad79db8646ddbddbbc6f723e484c9b5ecf11d8cf4a6aeab3cec775916a5e5fe6789bc8d6d3e6c9953dfbdf3ada5abd61239e46e4024cbbecab4bf77e7008cd4a2d363079538cb649212c6522feb9a93ee972887184fe7ee7884390ba3d63ede7c2"}, @NFTA_TABLE_USERDATA={0xf9, 0x6, "f2cf0bae1cc3d4a1aff8c44204fe1437f830c9ac0335110e51df7152bcd849f432d110b436965ea4fd52644cf31137740d159b6d1e8c28d9d2d19dd8b2cc8aa7b53b63ba817882d159cf728d66e50df3413ce1fbd288a9a13f83058da9672a462a06f39a8dd72432ad79ae2eeb1f0fe025e2d8050686000f78f12bf20a430813273ac980da52af713cf1991e88701352ae79383406acfb1384f87c51975e780e1a6e10d3b1563e54e3148bbb35ce9026ddf19b62b373113d9875ce61885b3fa027b8b931a294b3488a21d2aa882e3bb29c2a8878649ff5b6c1ca91df6a51298835cd780a0d936fb9221c883bef264cca1ab9ec0e45"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 2.912521763s ago: executing program 0 (id=3276): getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@dellink={0x28, 0x11, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, 0x20042, 0x80}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6c2d}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4810) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 2.786872552s ago: executing program 1 (id=3277): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x11) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x400, @private1={0xfc, 0x1, '\x00', 0x2}, 0x6}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x67ab, 0xa5, 0x869c, 0x6, 0xfffffff8}, &(0x7f0000000080)=0x98) 2.697887771s ago: executing program 0 (id=3278): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)={[{0x2b, 'cpu'}, {0x2d, 'rlimit'}, {0x2d, 'pids'}, {0x2b, 'devices'}]}, 0x1c) (async) write$cgroup_subtree(r0, &(0x7f0000000440)={[{0x2b, 'cpu'}, {0x2d, 'rlimit'}, {0x2d, 'pids'}, {0x2b, 'devices'}]}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xffbffffe, @mcast1, 0x9}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0xfc, 0x0, 0xfffffffd}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0xfc, 0x0, 0xfffffffd}]}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) write$cgroup_freezer_state(r0, &(0x7f0000000480)='FROZEN\x00', 0x7) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000881) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x3, 0x1}, {0x10, 0x5}, {0x40, 0x2}, {0xcc, 0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x81}], "84965d14dba50a4a"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000001) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) (async) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r1, 0x0) (async) listen(r1, 0x0) accept$inet6(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7f}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac06, 0x9]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x1) 2.554609426s ago: executing program 1 (id=3280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x0) sendmmsg$sock(r2, &(0x7f0000000d00)=[{{&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000300)="61e6e35e93791daaad6816dbd1aa8818aea160802440f6263901de04ebdd5a059f1eb40910d5437c199ab7519783479febef65f35f55ee0f7296c7bbd937bce38b9f7b554db1a7304750ad8c2b3e9d3e07f013605b9374b5", 0x58}, {&(0x7f0000000200)="74be9b0a410f81026725bdba8053fb63ddafdd80e9f496f55da88d84e3f7fe85cb3c20b06705449d0f3beac03cfc8249565a51bb", 0x34}, {&(0x7f0000000500)="d8e0ac0877714e9ef46a6dde9f4e221573a4eac358862145f86e5ae7d148e0a1e8d53d98d9d1e5e3638a3afebda155dfd76d24a21991d9e73f998224fbe9eb577b9e69e9c81f90264818748ffa62d0c70f2e0597019911b052fd280d4ec87188a54ec94dac46e3d77245080ba290288922e1c9b86ee0ead813de3649a8b3d8fe3ac7ff721995a15e1dc5740f1bed7b2c39e1beda00d0869b9fbf9fa4735e2b9a0be3d198699f21047c9eb47692d912f4560bd1be6a79d8e02b3cf19ab3e4fe87cbd5d1a59ca05054e9bb676e176f0dde8c0c9a3f09501273d3b4a5476cf071140d1dd0684e85", 0xe6}, {&(0x7f0000000600)="b234b6419d2f4b70196381c2fbb084dee6caf3095dfe1f15fa1756a4d2fc8710a7b0602ffc35baba5b024639e55ef735d87d37fff33258c06b15a12908fda81705f924d7d887522bc80b917e9562cd36c2a5f501d3c78969940054251c5eb7fa5bb49b2eb944", 0x66}, {&(0x7f00000003c0)="e02cec1ac03c3ab02fea596a", 0xc}, {&(0x7f0000000680)="0c4e3aec128be262c0ea3f6577805deeb8dedd14c87d3334acb24579b98ab64fc220a9e5423de95b5807a31c91302192f67f490226cb2239487a12193e008a44588c1c8dfb51ee52c93bcef68843cbbe69876d00609241542b1c033964db29a7b487116dd9de1d86e3b796f214cae1e65e4eef4f4a086730ba65ef86c6116e5fb04c90654352f178bf92ff4d0b0f251d1ef213e4671f90bcfe367b552d8d943ecf6f52", 0xa3}, {&(0x7f0000000740)="773fb81d87d694fd797562acbf87ec22a9133ce64e9e36ed481a15ef77fb664f926cf47388780e7434c0e628d0217c046086c7e27a0dcc6f7db0d4568f757594e79972e2565c07186498a47fc190219ea70d54ac70fc74a01cef1914579d3bb9b5a7a88fce387b7f589c8dcfa7c00d578450bca7bc88461968332c51b8affaabe1be6fab6fe6ce98622473643a3bbf297d82", 0x92}, {&(0x7f0000000800)}, {&(0x7f0000000840)="acc0fcdf4868934c143baed77574ea050fb84aef8eb69faca4eb7bd789966811e91987b734b4e33704875d36bf9362edfe0b706df6f258b2f1fbbd2c5f4acb1305a8e6d16884f1a8262ca4ca80dc02f24a4f1d8a4d60ecdff1b01763065e78a61a08eeb65bb3056c9b2f7074c9546721e3a0108edacb6a15bdb43152d06bd41cc84f47084960d7400c657aaafdbdab157955b454f9c70dd92346113bdf79e9238252914e7655fae76a13ba7d24173d18df971356188b25f973ce6466ecb45b272d5faffb24938da9af4ebeb4db6c312f5a78f2604d3cfb32ee8d25df8ec26bd440c3b22ef9afbeb6", 0xe8}], 0x9, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0x31}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}], 0x48}}, {{&(0x7f0000000a80)=@sco, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)="7624d93778abbdd21655b8a028cc6229cf87c46a9831e059e3a81c0784dba041810e64d6bb3c0117c500a2f765cbfc32176bb139a2b0791e183dc02c1a533830410d4a036149f07aeda6fb282fd48e5013e26ea7b7e4bfdd8d37a2dc3a1848b2db31bbece55a8ea1446484905cb7bb4547c0c74c73ae2d3091c8982721fbb4aa889ba16bc845e536b603279e375893683f71c6ca6a31c3cf1a", 0x99}, {&(0x7f0000000bc0)="44ba3d19fe51e3d91189eb880f41a045a432dd748ba3684a36d351a4d256ae0665e84d1d9d392bebeb3d81b1d59d900c6f8210b637bdeb340d53125a7a497068695bb48c8d9fe201ad579d37a09426eb825075b31e3d376cc4ef4b038d491988cd3345e2f9615486bac1b45b12f0a777e658acf540847985a775205def066fccf8c5071bde762f5339d1ac60b27f35ebae45e9f8c5d1cb0b9243821a80f92cf4b0", 0xa1}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}], 0x2, 0x4004) (async) sendmmsg$sock(r2, &(0x7f0000000d00)=[{{&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000300)="61e6e35e93791daaad6816dbd1aa8818aea160802440f6263901de04ebdd5a059f1eb40910d5437c199ab7519783479febef65f35f55ee0f7296c7bbd937bce38b9f7b554db1a7304750ad8c2b3e9d3e07f013605b9374b5", 0x58}, {&(0x7f0000000200)="74be9b0a410f81026725bdba8053fb63ddafdd80e9f496f55da88d84e3f7fe85cb3c20b06705449d0f3beac03cfc8249565a51bb", 0x34}, {&(0x7f0000000500)="d8e0ac0877714e9ef46a6dde9f4e221573a4eac358862145f86e5ae7d148e0a1e8d53d98d9d1e5e3638a3afebda155dfd76d24a21991d9e73f998224fbe9eb577b9e69e9c81f90264818748ffa62d0c70f2e0597019911b052fd280d4ec87188a54ec94dac46e3d77245080ba290288922e1c9b86ee0ead813de3649a8b3d8fe3ac7ff721995a15e1dc5740f1bed7b2c39e1beda00d0869b9fbf9fa4735e2b9a0be3d198699f21047c9eb47692d912f4560bd1be6a79d8e02b3cf19ab3e4fe87cbd5d1a59ca05054e9bb676e176f0dde8c0c9a3f09501273d3b4a5476cf071140d1dd0684e85", 0xe6}, {&(0x7f0000000600)="b234b6419d2f4b70196381c2fbb084dee6caf3095dfe1f15fa1756a4d2fc8710a7b0602ffc35baba5b024639e55ef735d87d37fff33258c06b15a12908fda81705f924d7d887522bc80b917e9562cd36c2a5f501d3c78969940054251c5eb7fa5bb49b2eb944", 0x66}, {&(0x7f00000003c0)="e02cec1ac03c3ab02fea596a", 0xc}, {&(0x7f0000000680)="0c4e3aec128be262c0ea3f6577805deeb8dedd14c87d3334acb24579b98ab64fc220a9e5423de95b5807a31c91302192f67f490226cb2239487a12193e008a44588c1c8dfb51ee52c93bcef68843cbbe69876d00609241542b1c033964db29a7b487116dd9de1d86e3b796f214cae1e65e4eef4f4a086730ba65ef86c6116e5fb04c90654352f178bf92ff4d0b0f251d1ef213e4671f90bcfe367b552d8d943ecf6f52", 0xa3}, {&(0x7f0000000740)="773fb81d87d694fd797562acbf87ec22a9133ce64e9e36ed481a15ef77fb664f926cf47388780e7434c0e628d0217c046086c7e27a0dcc6f7db0d4568f757594e79972e2565c07186498a47fc190219ea70d54ac70fc74a01cef1914579d3bb9b5a7a88fce387b7f589c8dcfa7c00d578450bca7bc88461968332c51b8affaabe1be6fab6fe6ce98622473643a3bbf297d82", 0x92}, {&(0x7f0000000800)}, {&(0x7f0000000840)="acc0fcdf4868934c143baed77574ea050fb84aef8eb69faca4eb7bd789966811e91987b734b4e33704875d36bf9362edfe0b706df6f258b2f1fbbd2c5f4acb1305a8e6d16884f1a8262ca4ca80dc02f24a4f1d8a4d60ecdff1b01763065e78a61a08eeb65bb3056c9b2f7074c9546721e3a0108edacb6a15bdb43152d06bd41cc84f47084960d7400c657aaafdbdab157955b454f9c70dd92346113bdf79e9238252914e7655fae76a13ba7d24173d18df971356188b25f973ce6466ecb45b272d5faffb24938da9af4ebeb4db6c312f5a78f2604d3cfb32ee8d25df8ec26bd440c3b22ef9afbeb6", 0xe8}], 0x9, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0x31}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}], 0x48}}, {{&(0x7f0000000a80)=@sco, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)="7624d93778abbdd21655b8a028cc6229cf87c46a9831e059e3a81c0784dba041810e64d6bb3c0117c500a2f765cbfc32176bb139a2b0791e183dc02c1a533830410d4a036149f07aeda6fb282fd48e5013e26ea7b7e4bfdd8d37a2dc3a1848b2db31bbece55a8ea1446484905cb7bb4547c0c74c73ae2d3091c8982721fbb4aa889ba16bc845e536b603279e375893683f71c6ca6a31c3cf1a", 0x99}, {&(0x7f0000000bc0)="44ba3d19fe51e3d91189eb880f41a045a432dd748ba3684a36d351a4d256ae0665e84d1d9d392bebeb3d81b1d59d900c6f8210b637bdeb340d53125a7a497068695bb48c8d9fe201ad579d37a09426eb825075b31e3d376cc4ef4b038d491988cd3345e2f9615486bac1b45b12f0a777e658acf540847985a775205def066fccf8c5071bde762f5339d1ac60b27f35ebae45e9f8c5d1cb0b9243821a80f92cf4b0", 0xa1}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}], 0x2, 0x4004) listen(r0, 0x0) (async) listen(r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f0000000dc0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000e00)=0x28) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f00000000c0), 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000d80)=0x4) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000c4000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x80000008, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000c4000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x80000008, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) 2.521068959s ago: executing program 2 (id=3281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001880)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f00000017c0)=@delchain={0x84, 0x65, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0x4}, {0x10, 0xd}, {0xc, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x37f0}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xffe0}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0xfff2}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xf}}, @TCA_FLOW_POLICE={0x10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x2d, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000016c0)={'nat\x00', 0x0, 0x0, 0x0, [0x80000001, 0xd, 0x2, 0x657, 0x5, 0xffffffffffff7fff]}, &(0x7f0000001540)=0x78) listen(r0, 0x3) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) sendmmsg$sock(r0, &(0x7f0000001600)=[{{&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000080)="25627c8cd0102b22bc687a986cb3b4c2a4e34829daea34aca96b5c3911f6b3d0dc819cf123f072e46776df3d79e6924a5f0decb4f13b3de3a60889e0ff6585184a", 0x41}, {&(0x7f0000000100)="a23da27ce67c8924859cb302a872c4a5e25176070d5bf5be9da7676c3ac2d71a05", 0x21}, {&(0x7f0000000240)="51f5fa12e54d7502af57f67ab8c67aab9cc088a25b06cf38d12e8ca82ecd64c83fe956c0247936ba85682165b516b03669dabc176cd2b0d43b88fdba57b36230451123031fca70bfcb134221a94a3e46bc75ee5c5a8e74d20029f38cad973c5c6eba9aee0a06b5432ccb301011222561271e3a7a0faf28195a318b99a012d8da02a4e3c8ab3210a36177", 0x8a}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="38b52040f40ee06a09fef655c7ced36298e955906fd43a824e90d82ddd72ef0affff71b0b98eadefa11f1777e182e8b11a96aed9ea4ff2681100e6246281d374e53dbeeb7cbeda3f82f92605b77a5099b910db794d25811af02791d72a5e2b5e1d9132e04c034993e048b84dd15cbf75427a0cd3b1322f5f7bc4535c0a4a99944aba0904b711ea54e6de219cad7b5825", 0x90}, {&(0x7f0000000140)="65c90ab93650173c433ec54fb49814be0cfbacb956f02644c311cd8eb8c4eb7b9bff2df57501d7942651190e55b3e5cf27f7f991ba9ad088de", 0x39}], 0x6}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000001c0)="b536014b0c6691f6a70a96c6f83b8f60c3c0311b6c4e95157fa87a85102333725abea6816b51fca34419e7acbad7a5751151", 0x32}, {&(0x7f0000001440)="ed5b4c0781e6c93fe2ba7c3a5b26d5cb359bbef4b3b9f545e3d18262543c21816beff59d09c30ea0b2462d85dd69b7006bf08e024f51ef27a74b263aa7022ef9dcbbdc700b05df04a292565fe08b857f065a0a48606ef2a01fe024c08816b3bbaffff652202699a35c5b44f9f888d1a5384f32c9084e04271c0176bfc406744f2fd3cee002ac974e50c7e9ecffdd03dd4743bccfd0", 0xfffffffffffffcf4}, {&(0x7f0000001500)="ba6b0d07316ad2ec", 0x8}, {&(0x7f0000001680)="151743a4bb4851e9862d1f3ce4580ae33aa1855d51a48be14a1eeae6b23ee0ff5e28e9872b45", 0x26}], 0x4, &(0x7f00000015c0)=[@txtime={{0x18, 0x1, 0x3d, 0x522}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}}], 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) (async) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001880)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f00000017c0)=@delchain={0x84, 0x65, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0x4}, {0x10, 0xd}, {0xc, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x37f0}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xffe0}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0xfff2}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xf}}, @TCA_FLOW_POLICE={0x10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x2d, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000016c0)={'nat\x00', 0x0, 0x0, 0x0, [0x80000001, 0xd, 0x2, 0x657, 0x5, 0xffffffffffff7fff]}, &(0x7f0000001540)=0x78) (async) listen(r0, 0x3) (async) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) (async) sendmmsg$sock(r0, &(0x7f0000001600)=[{{&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000080)="25627c8cd0102b22bc687a986cb3b4c2a4e34829daea34aca96b5c3911f6b3d0dc819cf123f072e46776df3d79e6924a5f0decb4f13b3de3a60889e0ff6585184a", 0x41}, {&(0x7f0000000100)="a23da27ce67c8924859cb302a872c4a5e25176070d5bf5be9da7676c3ac2d71a05", 0x21}, {&(0x7f0000000240)="51f5fa12e54d7502af57f67ab8c67aab9cc088a25b06cf38d12e8ca82ecd64c83fe956c0247936ba85682165b516b03669dabc176cd2b0d43b88fdba57b36230451123031fca70bfcb134221a94a3e46bc75ee5c5a8e74d20029f38cad973c5c6eba9aee0a06b5432ccb301011222561271e3a7a0faf28195a318b99a012d8da02a4e3c8ab3210a36177", 0x8a}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="38b52040f40ee06a09fef655c7ced36298e955906fd43a824e90d82ddd72ef0affff71b0b98eadefa11f1777e182e8b11a96aed9ea4ff2681100e6246281d374e53dbeeb7cbeda3f82f92605b77a5099b910db794d25811af02791d72a5e2b5e1d9132e04c034993e048b84dd15cbf75427a0cd3b1322f5f7bc4535c0a4a99944aba0904b711ea54e6de219cad7b5825", 0x90}, {&(0x7f0000000140)="65c90ab93650173c433ec54fb49814be0cfbacb956f02644c311cd8eb8c4eb7b9bff2df57501d7942651190e55b3e5cf27f7f991ba9ad088de", 0x39}], 0x6}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000001c0)="b536014b0c6691f6a70a96c6f83b8f60c3c0311b6c4e95157fa87a85102333725abea6816b51fca34419e7acbad7a5751151", 0x32}, {&(0x7f0000001440)="ed5b4c0781e6c93fe2ba7c3a5b26d5cb359bbef4b3b9f545e3d18262543c21816beff59d09c30ea0b2462d85dd69b7006bf08e024f51ef27a74b263aa7022ef9dcbbdc700b05df04a292565fe08b857f065a0a48606ef2a01fe024c08816b3bbaffff652202699a35c5b44f9f888d1a5384f32c9084e04271c0176bfc406744f2fd3cee002ac974e50c7e9ecffdd03dd4743bccfd0", 0xfffffffffffffcf4}, {&(0x7f0000001500)="ba6b0d07316ad2ec", 0x8}, {&(0x7f0000001680)="151743a4bb4851e9862d1f3ce4580ae33aa1855d51a48be14a1eeae6b23ee0ff5e28e9872b45", 0x26}], 0x4, &(0x7f00000015c0)=[@txtime={{0x18, 0x1, 0x3d, 0x522}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}}], 0x2, 0x0) (async) 2.257851803s ago: executing program 0 (id=3282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r1, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x0) 2.126834996s ago: executing program 2 (id=3283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001700)={@in6={{0xa, 0x4e24, 0xb, @mcast1, 0x81}}, 0x0, 0x0, 0x3f, 0x0, "f1990e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae3d393dd38ea6c02965c6776267517308a3d40aa1c788df600"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r3) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="a38dc5e73fcbd1142e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000001400)=[{&(0x7f00000004c0)="e41cdbf161be3e2ef03b5091e7c02394c1b045ecf6e191834738f71ecff73aaf2a6ca218674d52892bca1c76c3374978bee4ee976f24220eb138a0157f14f31183f233142c9188df", 0x48}, {&(0x7f0000000640)="3d56086e2648463ba46b682391850fd76edf9300a5b8bccf8e1e90e81c79a5cda75f40112b950e3325675abe32396907673bfab35f1b000186c48c18f2719972b561c5660d02472124c5422d7f18d380713988ddf9aceae218d79bc54c56e934af10202f5f28b559d5a8c113d9cfd52a6940eb609370a4c6080d538b4a00a549a5e2b1050dd6c6312cefed57bdc5199cf19716fdcced4d9adb7b423643f83fdce763245bfe358ee62712802225bc9d93d16711a5293d19fd5070fe76f0320caf57fdf1b0c8b7018146b9bbcd", 0xcc}, {&(0x7f0000000780)="4b97f8be3e319c7692ceeeeb0fc665c1bfe72483a1b330edbc0efcea1c0f1fdfc555dd99a72a684c6546bd31536d0f6be4e7671f93f6bfa53fe2908876465e572a62493f9a96460d373db0f18308ff9781e5cdb4e65fd84a4846d7499ac57fb6394d7c3b315b7f2ec29412d0fb30fb60ea649db212700f223662bd9c7dfbd5b78d5ecc34a99c728072ada8b688a83f38ae4a34a40d360d5bf9dbae42d07595bdaf0f89247e1062d30ddebc047d5bd16d8287a5e10069c380160210", 0xbb}, {&(0x7f0000001800)="c6c4dd44da9f6061a68271a90443b0b65b9f254228815e0b4899f22065ab2bebf294b4125f55016f159843ab9e1d480108553e785f260abb37ffd12f03e1bf36792ac35df1355b93b821d4a29cdf851569ebb691346c0324d2dbb8ea4a57c3b54ad2b3cde6bf4253a58bc7506a680056dca9a240b3200f9ac27e0cc1536423f98382e868a8de6878129b96a0a1cfb76681afe912226cd35c468bf92d1f4175ca40f7b550dd076410cb7a63af942ad2c6909b2cfd85c5b4ef3f6dc632b835dfad689c76697890c49562433763f4457c2fbaa2f5e4673a5bf1e2ad24dd15cb480d", 0xe0}, {&(0x7f0000001600)="8ede3549c5f3dde9186b965f491b62640f4f9a50131e96f875387b36b6c5d8d5bd8259401b69c507db8f29d6a07938793e0941ad63a8c8a736ec31c3c989dc105ecb057b0af62ab2cabb2bf781d42744c4328eb429256f6eec6db2f717d632bf7f63c0ba7b5ffd07de828f2bc0dbc2d0a50ff743315aea4dc390f39c4b2f05dd4ea73238f0726db6342c819bbcf526ba16f141bd78e18bb2d9d08c8dbcf46f7a0a5259494cb3bf", 0xa7}, {&(0x7f0000001140)="ca55560633d9e55959a61f7a94e1505c6ed53e22cd46e1d0609e70d3d95ae8192f08db8b00dedad47eba95fe87895f9ab139f1a656f009962cef1c3ca5b483630ca2ef184d83de890b86833aa125c7eb6a8cda87e5043e2401d0a1ff1aebd4cf98d347a539fb7442c49421103b23c161065cde0055afe04a80f5cf42e12a0b4634ab3217af3d726f94c9503ea027c4780c24ac5707974573b2dd20e31b754fed74da020238274503d83c8865f006600d8ba08c3e8436cde9b19f16fd324d2bf0", 0xc0}, {&(0x7f0000001200)="8558ba6560642a7efb760017c3b06ff184b806aa456f58eab3cb93510741a9f8ea544805d0053d808a658d1ce0586d8d50a939196bf2b1d311253751f6188e951232e8da305d14814b84eed25e7f00ce81c990cb1bb4ed5f404e377d2fe1833f2ad85e7a4dd485704b8cc3a53fdce552ae3ecdc59a17d26020c5d8f3c89a07169a4896a429a5c6b19b496707e88705257100b52cbcf184991fd142c696a3d10e8a70f726abf85e172df9480b164463", 0xaf}], 0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) 1.51631337s ago: executing program 3 (id=3287): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x1, &(0x7f0000000140), &(0x7f0000000200)=0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x68}}, 0x24040800) 948.806287ms ago: executing program 3 (id=3288): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) (async, rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, 0x1, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6015}]}, 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x11) close(r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 902.857157ms ago: executing program 0 (id=3289): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040002000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020002000000080003000dac0f"], 0x44}}, 0x0) r3 = epoll_create(0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x30002004}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0) 902.29687ms ago: executing program 2 (id=3290): r0 = gettid() r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x18}, 0x200000c4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 675.123969ms ago: executing program 0 (id=3291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0xd1, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x2, 0x4, 0x1, 0x4, 0xb4, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x6f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x40, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, r0, r0, r0, r4, r0, r0], &(0x7f00000008c0)=[{0x2, 0x5, 0x4, 0x4}], 0x10, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x3, [@var={0xf, 0x0, 0x0, 0xe, 0x4, 0x2}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0x3, [{0xc, 0x7, 0xff}]}, @enum={0x7, 0x6, 0x0, 0x6, 0x4, [{0xc}, {0x6, 0x200}, {0x1, 0x4}, {0xb, 0xd66e}, {0x8, 0x1}, {0x7, 0x6b8}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x3, [{0x7, 0x2, 0x1}, {0x0, 0x4, 0xb}, {0xf, 0x1, 0x4}, {0x4, 0x2, 0x4}, {0x10, 0x2, 0x5}, {0x7, 0x5, 0x4}]}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x9}]}]}, {0x0, [0x5f]}}, &(0x7f0000000cc0)=""/173, 0x103, 0xad, 0x1, 0x7}, 0x28) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) recvfrom$inet6(r8, &(0x7f0000000ec0)=""/172, 0xac, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x8, 0x200, 0x5, 0x100, r0, 0xfffffff8, '\x00', r2, r7, 0x4, 0x2, 0x3, 0x7}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x30, r10, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff46}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0700000000000000000010000000000000000000", @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="04000000010000000500"/28], 0x50) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000840)={0x0, 0x1, 0xa}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4040) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000b40)={'ip_vti0\x00', {0x2, 0x0, @multicast2}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 657.361354ms ago: executing program 1 (id=3292): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r1, &(0x7f00000003c0)=""/132, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000300)={@private1, 0x0}, &(0x7f0000000340)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x9, 0x440, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x4, 0x205, 0x2}, 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000f600000018480000fdffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000002000000001103000008000018330000040000000000000000000000d180f2ff010000001852000007000000000000000000000018160000", @ANYRES32=r2, @ANYBLOB="0000000000e8ffff9400000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2a7e, 0x1000, &(0x7f0000000d40)=""/4096, 0xc2f00, 0x10, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x3, 0x7}, 0x10, 0xa304, r2, 0x2, &(0x7f0000000700)=[r4, r2, r2, r7, r2, r2, r2], &(0x7f0000000740)=[{0x3, 0x1, 0x3, 0x9}, {0x3, 0x5, 0x3, 0x9}], 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r9, 0x4) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x0, r2}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 583.164627ms ago: executing program 2 (id=3293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000005e4cd36bb96bd2b9"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 520.030221ms ago: executing program 3 (id=3294): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) close(r0) 433.799783ms ago: executing program 3 (id=3295): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x4, 0x7, 0x1, 0x5, 0x81}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 331.113782ms ago: executing program 2 (id=3296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00', @remote}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000100)="7d2371115107f171844664966c7b4091f4a0ea10dc110f97ced03a1e1cb89182312042cde5ca83a343f041cbcc0e38bab9d8eca40f332100040000152d8ab7477fd9c725a3553153d4010a0b5733493445a79b0100"/99, 0x63}], 0x1) getsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000440), 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0xb) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0xd77, 0xe, 0x5]}, &(0x7f0000000080)=0x44) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001f40)={'dummy0\x00', &(0x7f0000001f00)=@ethtool_sfeatures={0x3b, 0x2, [{0xa, 0x4}, {0x0, 0x2}]}}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 315.216334ms ago: executing program 1 (id=3297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x40000000015, 0x1, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r2, 0x80000000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x4, 0x1, 0x6, 0x2, 0x10, 0xfff, 0xf}, 0x9c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socket(0x40000000015, 0x1, 0x0) (async) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) (async) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r2, 0x80000000) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x4, 0x1, 0x6, 0x2, 0x10, 0xfff, 0xf}, 0x9c) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) close(r0) (async) 255.978875ms ago: executing program 3 (id=3298): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) read(r1, &(0x7f0000000040)=""/59, 0x3b) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x1409, 0x262543c4cee33fe7, 0x70bd2b, 0x1000}, 0x4e}}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800611800200000080095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', r0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.912326ms ago: executing program 3 (id=3299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000500000000000000640000000000000200000038000480340001800b000100657874686472000024000280050002000000000008000340000000000800044000000000080001400000000b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000100000000000000"], 0x8c}}, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) (async, rerun: 32) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r4) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)={0x60, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffcb, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x34, r7, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x58, r7, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xe462}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40805}, 0x40800) 0s ago: executing program 2 (id=3300): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000dfffffff0a60060a010400000000000000000200000034000480300001800e000100627974656f72648d720000001c000000080002400000000008000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/136], 0x88}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x3, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) r2 = socket(0x1d, 0x2, 0x6) r3 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) write$ppp(r4, &(0x7f0000000440)='\x00\x00', 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, r8, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x5c}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000280)={0x80000008}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/25, 0x19, 0x1, &(0x7f0000000180)=""/57, 0x39}, &(0x7f0000000240)=0x40) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1f6300000f000000020000000300000000080400", @ANYRES32=r9, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="010000000500"/28], 0x50) kernel console output (not intermixed with test programs): 5 callbacks suppressed [ 195.480748][T10857] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1372'. [ 195.561894][T10867] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 195.580961][T10867] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1376'. [ 195.593693][T10869] IPv6: sit2: Disabled Multicast RS [ 195.605930][T10867] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 195.636120][T10867] netlink: 'syz.3.1376': attribute type 2 has an invalid length. [ 196.007293][T10896] netlink: 'syz.0.1385': attribute type 4 has an invalid length. [ 196.018911][T10896] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1385'. [ 196.089308][T10896] `: renamed from bond0 [ 196.122888][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 196.148119][T10898] ipvlan0: entered promiscuous mode [ 196.211865][T10905] netlink: 'syz.1.1387': attribute type 13 has an invalid length. [ 196.220573][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'. [ 196.220591][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 196.220896][T10905] netlink: 'syz.1.1387': attribute type 13 has an invalid length. [ 196.239410][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1388'. [ 196.267206][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 196.450488][T10914] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1391'. [ 196.559205][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1393'. [ 196.686613][T10928] IPVS: ip_vs_edit_dest(): server weight less than zero [ 196.971773][T10947] vxcan1: tx address claim with different name [ 197.097394][T10955] netlink: 'syz.0.1407': attribute type 7 has an invalid length. [ 197.105181][T10955] netlink: 'syz.0.1407': attribute type 8 has an invalid length. [ 197.173495][T10957] tipc: Enabled bearer , priority 0 [ 197.351520][T10957] syzkaller0: entered promiscuous mode [ 197.369769][T10957] syzkaller0: entered allmulticast mode [ 197.447293][ T30] audit: type=1804 audit(1758042659.732:4): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1411" name="/newroot/298/cgroup.controllers" dev="tmpfs" ino=1541 res=1 errno=0 [ 197.493443][ T30] audit: type=1800 audit(1758042659.762:5): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1411" name="cgroup.controllers" dev="tmpfs" ino=1541 res=0 errno=0 [ 198.733718][T10957] tipc: Resetting bearer [ 198.741689][T10977] veth0: entered promiscuous mode [ 198.752877][T10986] veth0: left promiscuous mode [ 198.789575][T10956] tipc: Resetting bearer [ 198.861996][T10956] tipc: Disabling bearer [ 199.013717][T11002] netlink: 'syz.0.1417': attribute type 11 has an invalid length. [ 199.052351][T11009] Bluetooth: MGMT ver 1.23 [ 199.400909][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.407491][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.414356][T11026] sysfs: cannot create duplicate filename '/class/ieee80211/!ãÙdñ4QNªå¯¿$ûÌÌULÙv…D£øUDŒw˜}z' [ 199.434850][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.1.1427 Not tainted syzkaller #0 PREEMPT(full) [ 199.434900][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.434914][T11026] Call Trace: [ 199.434923][T11026] [ 199.434932][T11026] dump_stack_lvl+0x189/0x250 [ 199.434968][T11026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.434995][T11026] ? __pfx__printk+0x10/0x10 [ 199.435033][T11026] ? kernfs_path_from_node+0x2f/0x290 [ 199.435058][T11026] ? kernfs_path_from_node+0x250/0x290 [ 199.435080][T11026] ? kernfs_path_from_node+0x2f/0x290 [ 199.435110][T11026] sysfs_warn_dup+0x8e/0xa0 [ 199.435133][T11026] sysfs_do_create_link_sd+0xc0/0x110 [ 199.435160][T11026] device_add_class_symlinks+0x1cf/0x240 [ 199.435192][T11026] device_add+0x475/0xb50 [ 199.435224][T11026] wiphy_register+0x1ba6/0x28d0 [ 199.435268][T11026] ? __pfx_wiphy_register+0x10/0x10 [ 199.435296][T11026] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 199.435335][T11026] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 199.435368][T11026] ieee80211_register_hw+0x3484/0x4100 [ 199.435417][T11026] ? ieee80211_register_hw+0x1491/0x4100 [ 199.435459][T11026] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 199.435510][T11026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.435567][T11026] ? __hrtimer_setup+0x187/0x210 [ 199.435587][T11026] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 199.435613][T11026] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 199.435683][T11026] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 199.435718][T11026] ? trace_kmalloc+0x1f/0xd0 [ 199.435744][T11026] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 199.435775][T11026] ? kstrndup+0xbf/0x160 [ 199.435810][T11026] hwsim_new_radio_nl+0xea4/0x1b10 [ 199.435846][T11026] ? __pfx___nla_validate_parse+0x10/0x10 [ 199.435888][T11026] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 199.435938][T11026] ? __nla_parse+0x40/0x60 [ 199.435965][T11026] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 199.436007][T11026] genl_family_rcv_msg_doit+0x212/0x300 [ 199.436047][T11026] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 199.436094][T11026] ? bpf_lsm_capable+0x9/0x20 [ 199.436123][T11026] ? security_capable+0x7e/0x2e0 [ 199.436165][T11026] genl_rcv_msg+0x60e/0x790 [ 199.436203][T11026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.436232][T11026] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 199.436282][T11026] netlink_rcv_skb+0x208/0x470 [ 199.436310][T11026] ? __lock_acquire+0xab9/0xd20 [ 199.436343][T11026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.436375][T11026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.436423][T11026] ? down_read+0x1ad/0x2e0 [ 199.436452][T11026] genl_rcv+0x28/0x40 [ 199.436479][T11026] netlink_unicast+0x82c/0x9e0 [ 199.436524][T11026] ? __pfx_netlink_unicast+0x10/0x10 [ 199.436561][T11026] ? netlink_sendmsg+0x642/0xb30 [ 199.436582][T11026] ? skb_put+0x11b/0x210 [ 199.436612][T11026] netlink_sendmsg+0x805/0xb30 [ 199.436649][T11026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.436677][T11026] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.436702][T11026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.436725][T11026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.436750][T11026] __sock_sendmsg+0x21c/0x270 [ 199.436788][T11026] ____sys_sendmsg+0x505/0x830 [ 199.436824][T11026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.436863][T11026] ? import_iovec+0x74/0xa0 [ 199.436896][T11026] ___sys_sendmsg+0x21f/0x2a0 [ 199.436925][T11026] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.436996][T11026] ? __fget_files+0x2a/0x420 [ 199.437014][T11026] ? __fget_files+0x3a0/0x420 [ 199.437047][T11026] __x64_sys_sendmsg+0x19b/0x260 [ 199.437080][T11026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.437122][T11026] ? rcu_is_watching+0x15/0xb0 [ 199.437151][T11026] ? do_syscall_64+0xbe/0x3b0 [ 199.437181][T11026] do_syscall_64+0xfa/0x3b0 [ 199.437203][T11026] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.437225][T11026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.437246][T11026] ? clear_bhb_loop+0x60/0xb0 [ 199.437274][T11026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.437301][T11026] RIP: 0033:0x7f019af8eba9 [ 199.437320][T11026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.437338][T11026] RSP: 002b:00007f019bd52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.437359][T11026] RAX: ffffffffffffffda RBX: 00007f019b1d5fa0 RCX: 00007f019af8eba9 [ 199.437374][T11026] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 199.437387][T11026] RBP: 00007f019b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 199.437399][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.437412][T11026] R13: 00007f019b1d6038 R14: 00007f019b1d5fa0 R15: 00007fff01c0ce88 [ 199.437448][T11026] [ 200.352003][T11054] openvswitch: netlink: Unknown nsh attribute 0 [ 200.358798][T11054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.619746][T11071] __nla_validate_parse: 6 callbacks suppressed [ 200.619766][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'. [ 200.646419][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'. [ 200.822579][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1442'. [ 201.069738][T10468] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 201.101381][T11094] netlink: 'syz.1.1446': attribute type 1 has an invalid length. [ 201.192017][T11094] gretap0: entered promiscuous mode [ 201.250802][T11098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1446'. [ 201.422357][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 201.609705][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1451'. [ 201.940239][T11140] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.148586][T11153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 202.479601][T11165] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 202.489511][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 202.501507][T11165] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 202.516785][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 202.541827][T11170] tipc: Enabled bearer , priority 0 [ 202.587161][T11165] bond7: entered allmulticast mode [ 202.592993][T11165] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.606526][T11170] syzkaller0: entered promiscuous mode [ 202.612360][T11170] syzkaller0: entered allmulticast mode [ 202.654329][T11170] tipc: Resetting bearer [ 202.722745][T11167] tipc: Resetting bearer [ 202.766566][T11167] tipc: Disabling bearer [ 202.889350][T11191] netlink: 'syz.4.1473': attribute type 32 has an invalid length. [ 202.897420][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 202.919851][T11191] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 203.098374][T11201] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 203.183094][T11207] bond5: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.198676][T11207] bond5: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 203.211295][T11207] bond5: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 203.598379][T11233] netlink: 'syz.4.1486': attribute type 1 has an invalid length. [ 204.421316][T11282] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 204.664221][T11302] tipc: Enabling of bearer rejected, failed to enable media [ 204.720493][T11302] syzkaller0: entered allmulticast mode [ 205.397383][T11349] syzkaller0: entered promiscuous mode [ 205.403062][T11349] syzkaller0: entered allmulticast mode [ 205.745995][T11322] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 205.757965][T11322] __nla_validate_parse: 9 callbacks suppressed [ 205.757985][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1513'. [ 205.957280][T11356] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 205.976491][T11356] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 206.160288][T11372] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1525'. [ 206.204461][T11377] netlink: 'syz.2.1527': attribute type 8 has an invalid length. [ 206.245760][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 206.329721][T11379] bond0: entered promiscuous mode [ 206.334820][T11379] bond_slave_0: entered promiscuous mode [ 206.370610][T11379] bond_slave_1: entered promiscuous mode [ 206.376654][T11379] geneve1: entered promiscuous mode [ 206.388293][T11379] bond0: left promiscuous mode [ 206.393115][T11379] bond_slave_0: left promiscuous mode [ 206.401239][T11379] bond_slave_1: left promiscuous mode [ 206.406859][T11379] geneve1: left promiscuous mode [ 206.560888][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1535'. [ 206.738201][T11413] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1538'. [ 206.763462][T11413] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1538'. [ 207.103093][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 207.193331][T11435] netlink: 'syz.0.1543': attribute type 2 has an invalid length. [ 207.399649][T11450] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1547'. [ 207.441432][T11453] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 207.570830][T11463] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1554'. [ 207.900200][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 207.975702][T11481] tipc: Enabling of bearer rejected, already enabled [ 208.242039][T11495] netlink: 'syz.0.1565': attribute type 10 has an invalid length. [ 208.979839][T11495] `: (slave team0): Releasing backup interface [ 209.109493][T11495] batman_adv: batadv0: Adding interface: team0 [ 209.115921][T11495] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.147363][T11495] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 209.398662][T11523] ipvlan1: entered promiscuous mode [ 209.727305][T11549] netlink: 'syz.1.1577': attribute type 4 has an invalid length. [ 210.229766][T11588] netlink: 'syz.1.1588': attribute type 32 has an invalid length. [ 210.460019][T11595] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 210.785722][T11611] __nla_validate_parse: 4 callbacks suppressed [ 210.785743][T11611] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1593'. [ 211.224059][T11640] netlink: 'syz.2.1601': attribute type 1 has an invalid length. [ 211.231984][T11640] netlink: 'syz.2.1601': attribute type 3 has an invalid length. [ 211.304559][T11645] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 211.328678][T11646] netlink: 'syz.1.1605': attribute type 83 has an invalid length. [ 211.344226][T11646] bond0: option ad_select: unable to set because the bond device is up [ 211.421657][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 211.458417][T11643] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.535624][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1610'. [ 211.669654][T11666] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1611'. [ 211.718406][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 211.718601][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 211.729702][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 211.998780][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 212.016143][T11686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1617'. [ 212.031968][ T59] smc: removing ib device syz2 [ 212.133087][T11686] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1617'. [ 212.195419][T11694] netlink: 'syz.3.1619': attribute type 3 has an invalid length. [ 212.282696][T11698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1619'. [ 212.320806][T11698] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1619'. [ 212.394362][T11698] veth1_macvtap: left promiscuous mode [ 213.114829][T11719] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1624'. [ 213.126301][T11720] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 213.303577][T11725] netlink: 'syz.3.1626': attribute type 5 has an invalid length. [ 213.716222][T11747] netlink: 'syz.0.1632': attribute type 4 has an invalid length. [ 213.772983][T11747] netlink: 'syz.0.1632': attribute type 4 has an invalid length. [ 214.877263][T11771] syzkaller1: entered promiscuous mode [ 214.890617][T11771] syzkaller1: entered allmulticast mode [ 214.936692][T11771] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 215.940116][T11818] __nla_validate_parse: 4 callbacks suppressed [ 215.940135][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'. [ 216.338594][T11839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1662'. [ 216.355527][T11841] netlink: 'syz.4.1661': attribute type 12 has an invalid length. [ 216.375171][T11839] netlink: 'syz.3.1662': attribute type 7 has an invalid length. [ 216.401146][T11839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1662'. [ 216.556049][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 216.617072][T11849] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 216.646554][T11863] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1668'. [ 216.989038][T11883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1673'. [ 217.104188][T11886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1674'. [ 217.204601][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 217.214999][T11889] netlink: 'syz.3.1675': attribute type 3 has an invalid length. [ 217.335598][T11894] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1677'. [ 217.357632][T11894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.401736][T11896] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1677'. [ 217.982617][T11926] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 218.021259][T11926] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 218.034444][T11926] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 218.150461][T11932] bridge: RTM_NEWNEIGH with invalid ether address [ 218.241952][T11926] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 218.295669][T11926] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 218.382609][T11926] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 218.611399][T11926] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 218.667276][T11926] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 218.701815][T11926] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 218.938913][T11926] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 218.954209][T11966] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 218.978446][T11926] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 219.015411][T11926] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 219.182935][T11971] netlink: 'syz.3.1698': attribute type 3 has an invalid length. [ 219.354474][T10469] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.390188][T10469] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 219.398746][T10469] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 219.461634][T10469] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.486849][T10469] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 219.517170][T10469] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 219.525529][T10469] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.568472][T10469] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 219.587696][T10469] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 219.742023][T10469] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.776964][T10469] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 219.805770][T10469] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 219.981610][T12001] unknown channel width for channel at 909000KHz? [ 220.037994][T12005] unknown channel width for channel at 909000KHz? [ 220.243467][T12016] netlink: 'syz.2.1712': attribute type 33 has an invalid length. [ 220.404116][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.427494][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.634499][T12015] veth5: left promiscuous mode [ 220.655800][T12015] gretap1: left promiscuous mode [ 220.773506][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.802051][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.837152][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.853077][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.878849][T12036] openvswitch: netlink: Missing key (keys=40, expected=80) [ 220.897206][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.905804][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.920232][T12036] netlink: 'syz.4.1719': attribute type 1 has an invalid length. [ 221.014549][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.045789][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.064714][T12049] __nla_validate_parse: 5 callbacks suppressed [ 221.064735][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 221.123407][T12042] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 221.185938][T12045] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 221.196563][T12053] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 221.260071][T12053] 8021q: adding VLAN 0 to HW filter on device bond7 [ 221.341016][T12036] veth7: entered promiscuous mode [ 221.354792][T12036] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 221.422688][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1723'. [ 221.469183][T12054] bond7: (slave geneve2): making interface the new active one [ 221.493087][T12054] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 221.587069][T12058] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 221.730817][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 222.174726][T12102] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 222.255264][T12100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1734'. [ 222.305689][T12107] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 222.364667][T12107] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 222.402518][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 222.586300][T12107] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.694649][T12112] bond8: (slave geneve3): making interface the new active one [ 222.709785][T12126] netlink: 'syz.4.1741': attribute type 18 has an invalid length. [ 222.737615][T12112] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 222.766652][T12115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1737'. [ 222.881609][T12132] pim6reg1: entered promiscuous mode [ 222.917149][T12132] pim6reg1: entered allmulticast mode [ 223.017435][T12145] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1746'. [ 223.052442][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 223.375260][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 223.582042][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 223.603877][T12173] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 223.619987][T12173] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1756'. [ 223.903704][T12179] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 224.420666][T12202] nbd0: detected capacity change from 0 to 127 [ 224.479458][ T51] block nbd0: Receive control failed (result -32) [ 226.023291][T12174] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 226.043581][T12207] geneve3: entered promiscuous mode [ 226.077535][T12207] geneve3: entered allmulticast mode [ 226.249455][T12215] __nla_validate_parse: 6 callbacks suppressed [ 226.249477][T12215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1767'. [ 226.273249][T12220] netlink: 'syz.3.1766': attribute type 5 has an invalid length. [ 226.352292][T12223] sctp: [Deprecated]: syz.1.1769 (pid 12223) Use of int in max_burst socket option. [ 226.352292][T12223] Use struct sctp_assoc_value instead [ 226.487848][T12228] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 226.837943][T12246] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1775'. [ 226.869063][T12249] netlink: 'syz.0.1776': attribute type 2 has an invalid length. [ 227.513281][T12265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1782'. [ 227.769477][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'. [ 227.781255][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1784'. [ 227.802980][T12277] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1786'. [ 227.835191][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 228.036319][T12285] tipc: Enabled bearer , priority 0 [ 228.050620][T12286] syzkaller0: entered promiscuous mode [ 228.057229][T12286] syzkaller0: entered allmulticast mode [ 228.139896][T12285] tipc: Resetting bearer [ 228.157826][T12290] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 228.228304][T12284] tipc: Resetting bearer [ 228.288947][T12284] tipc: Disabling bearer [ 228.331202][T12296] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 228.352947][T12302] netlink: 444 bytes leftover after parsing attributes in process `syz.0.1794'. [ 228.364171][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 228.388424][T12302] openvswitch: netlink: Flow key attr not present in new flow. [ 228.663532][T12312] netlink: 'syz.3.1796': attribute type 10 has an invalid length. [ 228.696049][T12312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1796'. [ 229.037447][T12326] lo speed is unknown, defaulting to 1000 [ 229.037744][T12325] netlink: 'syz.2.1801': attribute type 1 has an invalid length. [ 229.064253][T12326] lo speed is unknown, defaulting to 1000 [ 229.097956][T12326] lo speed is unknown, defaulting to 1000 [ 229.884637][T12347] openvswitch: netlink: EtherType 50a is less than min 600 [ 230.051047][T12351] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 230.115219][T12326] infiniband syz0: set active [ 230.160969][T12326] infiniband syz0: added lo [ 230.171532][T12326] syz0: rxe_create_cq: returned err = -12 [ 230.180010][T12326] infiniband syz0: Couldn't create ib_mad CQ [ 230.186614][T12326] infiniband syz0: Couldn't open port 1 [ 230.223117][T12326] RDS/IB: syz0: added [ 230.254944][T12326] smc: adding ib device syz0 with port count 1 [ 230.261832][T12326] smc: ib device syz0 port 1 has pnetid [ 230.278573][T12351] bond9 (unregistering): Released all slaves [ 230.306717][ T5991] lo speed is unknown, defaulting to 1000 [ 230.321899][T12364] ip6tnl2: entered promiscuous mode [ 230.336285][T12364] ip6tnl2: entered allmulticast mode [ 230.375958][ T5942] lo speed is unknown, defaulting to 1000 [ 230.393659][T12326] lo speed is unknown, defaulting to 1000 [ 230.548372][T12375] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 230.719807][T12382] netlink: 'syz.3.1818': attribute type 33 has an invalid length. [ 231.091872][T12395] sctp: [Deprecated]: syz.0.1823 (pid 12395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.091872][T12395] Use struct sctp_sack_info instead [ 231.298354][T12404] openvswitch: netlink: Multiple metadata blocks provided [ 231.330435][T12404] tipc: Invalid UDP bearer configuration [ 231.330492][T12404] tipc: Enabling of bearer rejected, failed to enable media [ 231.359823][T12326] lo speed is unknown, defaulting to 1000 [ 231.419263][T12406] __nla_validate_parse: 9 callbacks suppressed [ 231.419285][T12406] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1828'. [ 231.491375][T12410] netlink: 'syz.3.1829': attribute type 1 has an invalid length. [ 231.517174][T12410] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1829'. [ 231.727248][T12420] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1832'. [ 231.740172][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 231.958696][T12429] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1836'. [ 232.128549][T12326] lo speed is unknown, defaulting to 1000 [ 232.507597][T12444] netlink: 'syz.1.1843': attribute type 10 has an invalid length. [ 232.547956][T12444] veth0_vlan: entered allmulticast mode [ 232.570781][T12449] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1845'. [ 232.852936][T12444] veth0_vlan: left promiscuous mode [ 232.879930][T12444] veth0_vlan: entered promiscuous mode [ 232.905246][T12444] team0: Device veth0_vlan failed to register rx_handler [ 232.972448][T12457] tipc: Enabled bearer , priority 0 [ 233.017034][T12326] lo speed is unknown, defaulting to 1000 [ 233.149807][T12462] syzkaller0: entered promiscuous mode [ 233.155332][T12462] syzkaller0: entered allmulticast mode [ 233.254912][T12450] tipc: Resetting bearer [ 233.290790][T12473] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1848'. [ 233.311061][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 233.360266][T12450] tipc: Disabling bearer [ 233.645961][T12477] hsr_slave_0 (unregistering): left promiscuous mode [ 234.011621][T12326] lo speed is unknown, defaulting to 1000 [ 234.287304][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'. [ 234.359135][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'. [ 235.038007][T12544] netlink: 'syz.0.1866': attribute type 13 has an invalid length. [ 235.057801][T12544] macvtap0: entered allmulticast mode [ 235.087802][T12544] macvtap0: refused to change device tx_queue_len [ 235.364167][T12558] netlink: 'syz.0.1870': attribute type 4 has an invalid length. [ 235.645829][T12572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.767340][T12568] netlink: 'syz.0.1873': attribute type 21 has an invalid length. [ 235.873523][T12581] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 236.079548][T12585] dvmrp0: entered allmulticast mode [ 236.094433][T12585] dvmrp0: left allmulticast mode [ 236.694165][T12606] netlink: 'syz.3.1885': attribute type 10 has an invalid length. [ 236.754470][T12606] team0: Port device dummy0 added [ 236.820152][T12612] netlink: 'syz.4.1886': attribute type 10 has an invalid length. [ 236.864290][T12612] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 237.316563][T12628] netlink: 'syz.2.1891': attribute type 1 has an invalid length. [ 237.353013][T12628] __nla_validate_parse: 6 callbacks suppressed [ 237.353033][T12628] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1891'. [ 237.581481][T12651] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 237.795050][T12655] bond7: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 237.829927][T12655] bond7: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 237.881500][T12655] bond7: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 238.004007][T12671] netlink: 'syz.3.1899': attribute type 10 has an invalid length. [ 238.014498][T12672] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 238.170143][T12660] macvtap1: entered promiscuous mode [ 238.175665][T12660] macvtap1: entered allmulticast mode [ 238.218439][T12660] bond_slave_1: entered promiscuous mode [ 238.224639][T12660] batadv0: entered promiscuous mode [ 238.270469][T12660] bond0: entered allmulticast mode [ 238.283702][T12660] bond_slave_0: entered allmulticast mode [ 238.307928][T12660] bond_slave_1: entered allmulticast mode [ 238.319850][T12660] mac80211_hwsim hwsim11 ÿ: entered allmulticast mode [ 238.327864][T12660] batadv0: entered allmulticast mode [ 238.342753][T12660] bond0: entered promiscuous mode [ 238.367287][T12660] bond_slave_0: entered promiscuous mode [ 238.373777][T12660] mac80211_hwsim hwsim11 ÿ: entered promiscuous mode [ 238.435677][T12660] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 238.451438][T12660] team0: Device macvtap1 failed to register rx_handler [ 238.481630][T12660] bond0: left allmulticast mode [ 238.486526][T12660] bond_slave_0: left allmulticast mode [ 238.494206][T12660] bond_slave_1: left allmulticast mode [ 238.499856][T12660] mac80211_hwsim hwsim11 ÿ: left allmulticast mode [ 238.507551][T12660] batadv0: left allmulticast mode [ 238.512642][T12660] bond0: left promiscuous mode [ 238.519994][T12660] bond_slave_0: left promiscuous mode [ 238.526013][T12660] mac80211_hwsim hwsim11 ÿ: left promiscuous mode [ 238.534387][T12660] bond_slave_1: left promiscuous mode [ 238.540067][T12660] batadv0: left promiscuous mode [ 238.626409][T12676] tap0: tun_chr_ioctl cmd 1074025676 [ 238.636529][T12676] tap0: owner set to 0 [ 238.647818][T12677] tipc: Started in network mode [ 238.652704][T12677] tipc: Node identity ce5c2507403a, cluster identity 4711 [ 238.662910][T12677] tipc: Enabled bearer , priority 0 [ 238.706310][T12678] syzkaller0: entered promiscuous mode [ 238.722668][T12678] syzkaller0: entered allmulticast mode [ 238.854929][T12678] tipc: Resetting bearer [ 238.927302][T12678] tipc: Disabling bearer [ 240.004476][T12754] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 240.034880][T12756] tipc: Enabled bearer , priority 0 [ 240.043214][T12756] syzkaller0: entered promiscuous mode [ 240.050417][T12756] syzkaller0: entered allmulticast mode [ 240.130872][T12756] tipc: Resetting bearer [ 240.261799][T12769] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1930'. [ 240.390521][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'. [ 240.464173][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'. [ 240.479615][T12769] netlink: 'syz.0.1930': attribute type 11 has an invalid length. [ 240.759559][T12789] netlink: 'syz.3.1934': attribute type 29 has an invalid length. [ 240.769347][T12791] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1936'. [ 240.779130][T12791] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1936'. [ 240.793504][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 240.796047][T12791] netlink: 'syz.2.1936': attribute type 5 has an invalid length. [ 240.829298][T12791] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1936'. [ 240.879634][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'. [ 240.911226][T12753] tipc: Resetting bearer [ 240.949916][T12760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.956105][T12760] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 240.988479][T12753] tipc: Disabling bearer [ 241.023487][T12760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.041002][T12760] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 241.140743][T12760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.154587][T12791] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 241.169999][T12760] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 241.201557][T12811] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1939'. [ 241.213351][ T59] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 241.239115][T12760] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 241.255436][ T59] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 241.263969][T12760] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 241.289110][ T59] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 241.324355][ T59] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 241.569498][T12818] netlink: 'syz.0.1942': attribute type 1 has an invalid length. [ 242.099380][T12843] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 243.468144][T12901] __nla_validate_parse: 4 callbacks suppressed [ 243.468166][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 243.531709][T12902] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 243.913215][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 244.318059][T12938] C: entered promiscuous mode [ 244.348391][T12952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.356505][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1973'. [ 244.387195][T12938] netlink: 'syz.3.1973': attribute type 2 has an invalid length. [ 244.429825][T12938] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.528205][T12953] macvlan0 (unregistering): left promiscuous mode [ 244.726261][T12965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1978'. [ 244.895377][T12976] netlink: 'syz.1.1982': attribute type 1 has an invalid length. [ 244.908324][T12976] netlink: 'syz.1.1982': attribute type 2 has an invalid length. [ 245.072394][T12983] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 245.073519][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 245.213278][T12988] netlink: 'syz.0.1989': attribute type 12 has an invalid length. [ 245.266317][T12993] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.1991'. [ 245.369715][T12996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1992'. [ 245.385982][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1993'. [ 245.390009][T12996] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1992'. [ 245.419228][T12999] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1994'. [ 245.600984][T13011] netlink: 'syz.3.1996': attribute type 2 has an invalid length. [ 260.841497][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.848246][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.241475][T13032] __nla_validate_parse: 5 callbacks suppressed [ 268.241493][T13032] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2007'. [ 268.259662][T13036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2006'. [ 268.292878][T13036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2006'. [ 268.330115][T13033] syzkaller1: entered promiscuous mode [ 268.335644][T13033] syzkaller1: entered allmulticast mode [ 268.515856][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2013'. [ 268.550505][T13054] netlink: 'syz.1.2012': attribute type 9 has an invalid length. [ 268.558406][T13054] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.2012'. [ 268.831317][T13079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2021'. [ 269.160421][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2028'. [ 269.169575][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2028'. [ 269.230530][T13101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2030'. [ 269.234548][T13107] ip6tnl3: entered promiscuous mode [ 269.249081][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'. [ 269.252811][T13107] ip6tnl3: entered allmulticast mode [ 269.625965][T13136] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 269.675218][T13136] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 269.752247][T13140] sctp: [Deprecated]: syz.2.2041 (pid 13140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.752247][T13140] Use struct sctp_sack_info instead [ 269.781503][T13143] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 269.817910][T13144] smc: net device ip_vti0 applied user defined pnetid SYZ1 [ 270.713099][T13203] bridge0: port 3(batadv1) entered blocking state [ 270.737163][T13203] bridge0: port 3(batadv1) entered disabled state [ 270.757338][T13203] batadv1: entered allmulticast mode [ 270.789057][T13203] batadv1: entered promiscuous mode [ 271.031613][T13220] netlink: 'syz.1.2064': attribute type 4 has an invalid length. [ 271.221099][ T7954] batman_adv: batadv1: IGMP Querier appeared [ 271.227398][ T7954] batman_adv: batadv1: MLD Querier appeared [ 272.027090][T13269] macvtap0: entered promiscuous mode [ 272.036760][T13269] vlan0: entered promiscuous mode [ 272.089670][T13269] macvtap0: entered allmulticast mode [ 272.137042][T13269] vlan0: entered allmulticast mode [ 272.150060][T13269] veth0_vlan: entered allmulticast mode [ 272.396270][T13308] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 272.464733][T13307] tipc: Enabled bearer , priority 0 [ 272.477574][T13307] syzkaller0: entered promiscuous mode [ 272.492673][T13307] syzkaller0: entered allmulticast mode [ 272.606266][T13307] tipc: Resetting bearer [ 272.632326][T13306] tipc: Resetting bearer [ 272.668479][T13306] tipc: Disabling bearer [ 273.197358][T13348] netlink: 'syz.3.2100': attribute type 23 has an invalid length. [ 273.315831][T13357] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 275.014967][T13357] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 275.107564][T13373] netlink: 'syz.0.2110': attribute type 28 has an invalid length. [ 275.145893][T13374] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 275.177079][T13373] netlink: 'syz.0.2110': attribute type 3 has an invalid length. [ 275.197941][T13373] __nla_validate_parse: 19 callbacks suppressed [ 275.197964][T13373] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2110'. [ 275.290474][T13385] bond5: (slave geneve5): making interface the new active one [ 275.299884][T13385] bond5: (slave geneve5): Enslaving as an active interface with an up link [ 275.365756][T13392] vlan3: entered promiscuous mode [ 275.372089][T13392] bridge0: entered promiscuous mode [ 275.398737][T10467] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 275.415535][T10467] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 275.430530][T10467] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 275.471813][T10467] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 275.608819][T13404] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 275.697485][T13412] delete_channel: no stack [ 275.868477][T13420] C: renamed from team_slave_0 [ 275.880971][T13420] netlink: 'syz.0.2124': attribute type 1 has an invalid length. [ 275.891043][T13420] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 275.916060][T13423] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2126'. [ 275.926833][T13428] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2126'. [ 276.012082][T13431] netlink: 700 bytes leftover after parsing attributes in process `syz.3.2128'. [ 276.045755][T13433] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 276.064625][T13433] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2129'. [ 276.081150][T13435] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.098300][T13433] netlink: 'syz.0.2129': attribute type 2 has an invalid length. [ 276.119937][T13433] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 276.350411][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2138'. [ 276.352194][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 276.402054][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2135'. [ 276.592882][T13476] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 276.602325][ T5962] IPVS: starting estimator thread 0... [ 276.658478][T13476] openvswitch: netlink: Multiple metadata blocks provided [ 276.747459][T13477] IPVS: using max 28 ests per chain, 67200 per kthread [ 276.768926][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 277.640921][T13533] netlink: 'syz.1.2160': attribute type 28 has an invalid length. [ 277.655923][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 277.663073][T13533] netlink: 'syz.1.2160': attribute type 3 has an invalid length. [ 278.186060][T13565] tipc: Enabled bearer , priority 0 [ 278.228041][T13565] syzkaller0: entered promiscuous mode [ 278.256005][T13565] syzkaller0: entered allmulticast mode [ 278.365254][T13577] tipc: Resetting bearer [ 278.412647][T13577] tipc: Disabling bearer [ 278.423901][T13581] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 278.439778][T13581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.536392][T13555] lo speed is unknown, defaulting to 1000 [ 278.596478][T13587] netlink: 'syz.2.2178': attribute type 2 has an invalid length. [ 278.907713][T13595] pimreg: entered allmulticast mode [ 279.251097][T13609] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 280.158822][T13655] validate_nla: 1 callbacks suppressed [ 280.158843][T13655] netlink: 'syz.2.2200': attribute type 7 has an invalid length. [ 280.242516][T13657] __nla_validate_parse: 11 callbacks suppressed [ 280.242537][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2201'. [ 280.405122][T13665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2204'. [ 281.039471][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'. [ 281.616769][T13738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2226'. [ 282.044114][T13765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2233'. [ 282.113343][T13769] netlink: 'syz.4.2235': attribute type 2 has an invalid length. [ 282.131818][T13771] netlink: 'syz.0.2236': attribute type 5 has an invalid length. [ 282.141644][T13769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2235'. [ 282.178978][T13769] bond0: option mode: unable to set because the bond device has slaves [ 282.555426][T13798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2245'. [ 283.253107][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2251'. [ 283.634854][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 283.677025][T13867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2262'. [ 283.694873][T13871] ve: renamed from ipvlan1 (while UP) [ 283.984765][T13891] xt_limit: Overflow, try lower: 604147548/4200216962 [ 284.003450][T13891] netlink: 'syz.3.2269': attribute type 1 has an invalid length. [ 284.011654][T13891] nbd: illegal input index 1048576 [ 284.345094][T13918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.364686][T13911] netlink: 'syz.4.2276': attribute type 3 has an invalid length. [ 284.432585][T13922] bridge_slave_0: default FDB implementation only supports local addresses [ 284.625448][T13934] netlink: 'syz.4.2281': attribute type 23 has an invalid length. [ 284.800795][T13946] 8021q: VLANs not supported on gre0 [ 285.037144][T13959] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 285.241285][T13959] bond6: entered promiscuous mode [ 285.254156][T13959] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.268909][T13967] team0: No ports can be present during mode change [ 285.593845][T13991] __nla_validate_parse: 8 callbacks suppressed [ 285.593867][T13991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2294'. [ 285.951599][T14013] batadv2: entered allmulticast mode [ 285.970180][T14016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.031717][T14019] openvswitch: netlink: EtherType 50a is less than min 600 [ 286.065766][T14018] netlink: 'syz.3.2303': attribute type 6 has an invalid length. [ 286.087330][T14018] netlink: 'syz.3.2303': attribute type 6 has an invalid length. [ 286.118210][T14025] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 286.163411][T14023] can: request_module (can-proto-4) failed. [ 286.356792][T14044] netlink: 'syz.3.2306': attribute type 16 has an invalid length. [ 286.366068][T14044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2306'. [ 286.463656][T14035] "syz.0.2307" (14035) uses obsolete ecb(arc4) skcipher [ 286.616376][T14059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2313'. [ 286.845704][T14076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2318'. [ 286.922592][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2320'. [ 286.952812][T14078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2320'. [ 286.955702][T14068] syzkaller1: entered promiscuous mode [ 286.971759][T14068] syzkaller1: entered allmulticast mode [ 287.147917][T14088] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2325'. [ 287.300543][T14097] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 287.520244][T14104] veth9: entered promiscuous mode [ 287.585600][T14103] veth9: entered promiscuous mode [ 287.769411][T14121] gre0: entered promiscuous mode [ 288.090726][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 288.155363][T14137] netlink: 'syz.3.2342': attribute type 11 has an invalid length. [ 288.204474][T14139] tipc: Enabled bearer , priority 0 [ 288.259287][T14139] tipc: Disabling bearer [ 288.365183][T14147] netlink: 'syz.2.2344': attribute type 21 has an invalid length. [ 288.382929][T14147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2344'. [ 288.554063][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2348'. [ 288.833049][T14169] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20003 [ 288.921941][T14169] ifb0: entered promiscuous mode [ 288.952056][T14169] ifb0: entered allmulticast mode [ 289.405624][T14175] lo speed is unknown, defaulting to 1000 [ 290.040879][T14235] netlink: 'syz.3.2368': attribute type 21 has an invalid length. [ 290.055004][T14235] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.084218][T14235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.091502][T14235] IPv6: NLM_F_CREATE should be set when creating new route [ 290.098811][T14235] IPv6: NLM_F_CREATE should be set when creating new route [ 290.106122][T14235] IPv6: NLM_F_CREATE should be set when creating new route [ 290.290947][T14244] netlink: 'syz.1.2371': attribute type 1 has an invalid length. [ 290.617333][T14258] __nla_validate_parse: 8 callbacks suppressed [ 290.617354][T14258] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2376'. [ 290.725365][T14261] tunl0: entered promiscuous mode [ 290.758104][T14261] gretap0: entered promiscuous mode [ 290.782921][T14261] erspan0: entered promiscuous mode [ 290.839194][T14261] ip_vti0: entered promiscuous mode [ 290.888502][T14263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.301187][T14277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2382'. [ 291.311112][T14277] veth0_to_bond: left allmulticast mode [ 291.320918][T14277] netlink: 'syz.4.2382': attribute type 2 has an invalid length. [ 291.728830][T14267] lo speed is unknown, defaulting to 1000 [ 292.121269][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2393'. [ 292.262923][T14309] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 292.307376][T14309] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 292.325860][T14309] gretap2: entered promiscuous mode [ 292.339331][T14309] gretap2: entered allmulticast mode [ 292.523788][T14326] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2399'. [ 292.908213][T14336] syzkaller0: entered promiscuous mode [ 292.933684][T14336] syzkaller0: entered allmulticast mode [ 293.019468][T14345] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 293.052972][T14336] tipc: Enabled bearer , priority 0 [ 293.064700][T14336] tipc: Resetting bearer [ 293.085194][T14335] tipc: Resetting bearer [ 293.138766][T14335] tipc: Disabling bearer [ 293.264440][T14348] 8021q: VLANs not supported on ip_vti0 [ 293.446345][T14352] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2406'. [ 293.515685][T14352] netlink: 'syz.0.2406': attribute type 4 has an invalid length. [ 293.995192][T14381] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 294.021382][T14381] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2415'. [ 294.329167][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2420'. [ 294.339260][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'. [ 294.366570][T14408] netlink: 'syz.1.2420': attribute type 1 has an invalid length. [ 294.402279][T14408] netlink: 'syz.1.2420': attribute type 2 has an invalid length. [ 294.728786][T14427] siw: device registration error -23 [ 294.824262][T14432] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2430'. [ 294.836817][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2432'. [ 294.856399][T14433] netlink: 'syz.3.2431': attribute type 1 has an invalid length. [ 294.909401][T14433] netlink: 'syz.3.2431': attribute type 2 has an invalid length. [ 295.406933][T14478] bridge_slave_0: left allmulticast mode [ 295.412637][T14478] bridge_slave_0: left promiscuous mode [ 295.421883][T14478] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.454345][T14478] bridge_slave_1: left allmulticast mode [ 295.485771][T14478] bridge_slave_1: left promiscuous mode [ 295.497111][T14478] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.512683][T14478] bond0: (slave bond_slave_0): Releasing backup interface [ 295.530677][T14478] bond0: (slave bond_slave_1): Releasing backup interface [ 295.546463][T14478] team0: Port device team_slave_0 removed [ 295.562289][T14478] team0: Port device team_slave_1 removed [ 295.564491][T14488] netlink: 'syz.2.2448': attribute type 1 has an invalid length. [ 295.575942][T14488] netlink: 'syz.2.2448': attribute type 1 has an invalid length. [ 295.576620][T14478] bond0: (slave geneve1): Releasing backup interface [ 295.585882][T14488] netlink: 'syz.2.2448': attribute type 4 has an invalid length. [ 295.599714][T14488] NCSI netlink: No device for ifindex 830110067 [ 295.614659][T14478] bond0: (slave wlan1): Releasing backup interface [ 295.625689][T14478] bond1: (slave geneve2): Releasing backup interface [ 295.639162][T14478] bond6: (slave ip6gretap2): Releasing backup interface [ 295.646162][T14478] bond6: (slave ip6gretap2): the permanent HWaddr of slave - da:32:c0:af:b5:65 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 295.668454][T14478] bond6: (slave veth7): Releasing backup interface [ 295.681652][ T43] lo speed is unknown, defaulting to 1000 [ 295.749102][T10479] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.761011][T10479] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 295.812404][T10479] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.850708][T10479] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 295.890474][T14498] __nla_validate_parse: 6 callbacks suppressed [ 295.890496][T14498] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2449'. [ 295.948328][T14498] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2449'. [ 295.974644][T14498] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2449'. [ 296.003263][T10479] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.013706][T10479] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 296.094696][T14513] openvswitch: netlink: Unknown key attributes 2 [ 296.102502][T14513] openvswitch: netlink: Unknown key attributes 2 [ 296.109825][T14513] openvswitch: netlink: Unknown key attributes 2 [ 296.117836][T14513] openvswitch: netlink: Unknown key attributes 2 [ 296.124478][T14513] openvswitch: netlink: Unknown key attributes 2 [ 296.135790][T14513] openvswitch: netlink: Unknown key attributes 2 [ 296.151220][T14513] openvswitch: netlink: Unknown key attributes 2 [ 296.152681][T10472] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.172334][T10472] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 296.299607][T14524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2455'. [ 296.342827][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2459'. [ 296.390727][T14517] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.400707][T14517] bond9: (slave bond10): making interface the new active one [ 296.409395][T14517] bond9: (slave bond10): Enslaving as an active interface with an up link [ 296.650240][T14556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2466'. [ 296.852040][T14565] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2471'. [ 296.880399][T14562] validate_nla: 1 callbacks suppressed [ 296.880422][T14562] netlink: 'syz.1.2470': attribute type 49 has an invalid length. [ 297.036763][T14576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2475'. [ 297.085551][T14575] IPVS: ip_vs_edit_dest(): server weight less than zero [ 297.555074][T14612] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2488'. [ 297.602371][T14616] tipc: Invalid UDP bearer configuration [ 297.602426][T14616] tipc: Enabling of bearer rejected, failed to enable media [ 297.725551][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 297.745842][T14624] netlink: 'syz.4.2491': attribute type 8 has an invalid length. [ 298.061717][T14646] netlink: 'syz.1.2498': attribute type 10 has an invalid length. [ 298.283737][T14662] xt_l2tp: invalid flags combination: 0 [ 298.751305][T14687] macvlan0: entered promiscuous mode [ 298.768711][T14687] batadv_slave_0: entered promiscuous mode [ 298.793515][T14687] debugfs: 'hsr1' already exists in 'hsr' [ 298.807399][T14687] Cannot create hsr debugfs directory [ 299.650710][T14752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.807913][T14768] IPv4: Oversized IP packet from 127.202.26.0 [ 300.082666][T14786] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 300.143450][T14786] bond8: entered promiscuous mode [ 300.153210][T14786] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.223056][T14796] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 300.516809][T14816] netlink: 'syz.2.2553': attribute type 1 has an invalid length. [ 300.931463][T14846] __nla_validate_parse: 10 callbacks suppressed [ 300.931481][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2558'. [ 301.075396][T14852] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20001 [ 301.390675][T14868] netlink: 'syz.3.2567': attribute type 26 has an invalid length. [ 301.430634][T14868] openvswitch: netlink: IPv4 tun info is not correct [ 301.752202][T14890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2574'. [ 303.109459][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 303.444246][T14931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2583'. [ 303.593177][T14931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2583'. [ 303.731797][T14940] veth11: entered promiscuous mode [ 303.816048][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 303.873020][T14966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2590'. [ 303.897246][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'. [ 303.961490][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2590'. [ 304.089438][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2598'. [ 304.111487][T14979] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 304.120599][T14979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.245785][T14977] hsr_slave_0 (unregistering): left promiscuous mode [ 304.362373][T14989] geneve2: entered promiscuous mode [ 304.367847][T14989] geneve2: entered allmulticast mode [ 304.452272][T14997] sctp: [Deprecated]: syz.4.2604 (pid 14997) Use of int in max_burst socket option. [ 304.452272][T14997] Use struct sctp_assoc_value instead [ 304.622313][T15007] netlink: 'syz.4.2608': attribute type 1 has an invalid length. [ 304.645295][T15007] netlink: 'syz.4.2608': attribute type 2 has an invalid length. [ 304.702322][T15012] netlink: 'syz.3.2607': attribute type 21 has an invalid length. [ 304.711012][T15012] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 304.790246][T15015] netlink: 'syz.2.2609': attribute type 9 has an invalid length. [ 305.314814][T15044] tipc: Enabling of bearer rejected, failed to enable media [ 305.480877][T15059] IPVS: set_ctl: invalid protocol: 255 172.30.0.1:20004 [ 306.858607][T15078] __nla_validate_parse: 6 callbacks suppressed [ 306.858628][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'. [ 306.925646][T15084] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2627'. [ 307.028134][T15092] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 307.049545][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 307.070883][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 307.086527][T15094] netlink: 'syz.1.2631': attribute type 6 has an invalid length. [ 307.434479][T15119] unsupported nla_type 52263 [ 307.573524][T15131] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2641'. [ 307.610496][T15131] ip6gretap0: entered promiscuous mode [ 307.728464][T15140] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2642'. [ 307.729422][T15142] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2643'. [ 307.812739][T15155] netlink: 'syz.4.2645': attribute type 10 has an invalid length. [ 307.958724][T15162] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:21 [ 307.963420][T15164] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 308.176454][T15178] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 308.200939][T15178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2654'. [ 308.233864][T15178] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 308.244911][T15178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2654'. [ 308.315948][T15182] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 308.326329][T15182] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2656'. [ 308.356516][T15186] netlink: 'syz.4.2657': attribute type 10 has an invalid length. [ 308.439270][T15186] bridge0: port 1(team0) entered blocking state [ 308.446510][T15186] bridge0: port 1(team0) entered disabled state [ 308.455507][T15186] team0: entered allmulticast mode [ 308.467918][T15186] team0: entered promiscuous mode [ 309.111407][T15233] tipc: Failed to remove unknown binding: 66,1,1/0:3019868659/3019868661 [ 309.897850][T15283] netlink: 'syz.4.2687': attribute type 10 has an invalid length. [ 309.921611][T15281] netlink: 'syz.1.2686': attribute type 1 has an invalid length. [ 309.938427][T15283] bond0: (slave wlan1): Opening slave failed [ 309.952922][T15285] netlink: 'syz.2.2688': attribute type 32 has an invalid length. [ 310.030435][T15285] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 310.419361][T15298] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 310.646418][T15308] openvswitch: netlink: Flow key attr not present in new flow. [ 311.216499][T15333] netlink: 'syz.3.2705': attribute type 7 has an invalid length. [ 311.242254][T15333] netlink: 'syz.3.2705': attribute type 8 has an invalid length. [ 311.621906][T15363] sctp: [Deprecated]: syz.2.2710 (pid 15363) Use of int in maxseg socket option. [ 311.621906][T15363] Use struct sctp_assoc_value instead [ 311.926668][T15383] syzkaller1: entered promiscuous mode [ 311.948064][T15383] syzkaller1: entered allmulticast mode [ 312.130895][T15398] netlink: 'syz.2.2724': attribute type 10 has an invalid length. [ 312.168501][T15398] bond0: (slave wlan1): Opening slave failed [ 312.336680][T15420] netlink: 'syz.2.2731': attribute type 23 has an invalid length. [ 312.338090][T15417] netlink: 'syz.1.2730': attribute type 21 has an invalid length. [ 312.375115][T15417] __nla_validate_parse: 8 callbacks suppressed [ 312.375133][T15417] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2730'. [ 312.407036][T15417] netlink: 'syz.1.2730': attribute type 4 has an invalid length. [ 312.416015][T15417] netlink: 'syz.1.2730': attribute type 5 has an invalid length. [ 312.426570][T15417] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2730'. [ 312.671732][T15437] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2736'. [ 312.936108][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 313.035576][T15465] gtp0: entered promiscuous mode [ 313.043594][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'. [ 313.075497][T15465] gtp0: entered allmulticast mode [ 313.101536][T15476] openvswitch: netlink: Message has 4 unknown bytes. [ 313.141157][T15474] bond12: entered allmulticast mode [ 313.149491][T15474] 8021q: adding VLAN 0 to HW filter on device bond12 [ 313.157837][T15470] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 313.166698][T15470] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 313.245847][T15487] xt_socket: unknown flags 0x50 [ 313.277217][T15484] pimreg3: entered allmulticast mode [ 313.449135][T15493] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2752'. [ 313.459628][T15499] vlan4: entered allmulticast mode [ 313.465403][T15499] bridge_slave_0: entered allmulticast mode [ 313.506053][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2756'. [ 314.072583][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'. [ 314.099028][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'. [ 314.430741][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 314.749062][T15573] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 314.771590][T15573] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.879523][T15573] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 314.921815][T15573] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.004058][T15573] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 315.034718][T15573] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.090302][T15586] lo: entered promiscuous mode [ 315.097809][T15586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.147519][ T5991] lo speed is unknown, defaulting to 1000 [ 315.153362][ T5991] syz0: Port: 1 Link DOWN [ 315.195832][T15573] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 315.226946][T15573] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.314583][ T9] lo speed is unknown, defaulting to 1000 [ 315.638365][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 315.667235][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.714786][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 315.738396][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.786761][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 315.795317][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.815236][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 315.847232][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.993872][T15630] validate_nla: 2 callbacks suppressed [ 315.993891][T15630] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 316.008264][T15630] netlink: 'syz.4.2792': attribute type 2 has an invalid length. [ 316.224020][T15640] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 316.241946][T15640] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 316.545087][T15670] netlink: 'syz.0.2791': attribute type 10 has an invalid length. [ 316.580632][T15670] wlan1: mtu less than device minimum [ 316.586056][T15670] `: (slave wlan1): Error -22 calling dev_set_mtu [ 316.633141][T15674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.860884][T15688] netlink: 'syz.0.2809': attribute type 10 has an invalid length. [ 316.940038][T15676] delete_channel: no stack [ 316.964217][T15690] syzkaller1: entered promiscuous mode [ 317.006626][T15690] syzkaller1: entered allmulticast mode [ 317.325707][T15707] geneve3: entered promiscuous mode [ 317.350817][T15707] geneve3: entered allmulticast mode [ 317.408911][T15708] __nla_validate_parse: 12 callbacks suppressed [ 317.408933][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2815'. [ 317.512069][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.582262][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.591504][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 317.612082][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 318.251379][T15725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 318.420608][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.430826][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.440188][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.450410][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.458507][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.476733][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.486789][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.496834][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.509060][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.517657][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.587179][T15736] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2825'. [ 318.740896][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2825'. [ 318.942677][T15731] lo speed is unknown, defaulting to 1000 [ 319.145427][T15759] !: renamed from dummy0 [ 319.290155][T15707] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 319.363389][T15707] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 319.432899][T15707] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 319.579095][ T7954] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 319.633291][T10479] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 319.647252][T15731] chnl_net:caif_netlink_parms(): no params data found [ 319.692628][ T7954] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 319.789302][T10479] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 319.892624][T15731] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.911319][T15731] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.924879][T15731] bridge_slave_0: entered allmulticast mode [ 319.933622][T15731] bridge_slave_0: entered promiscuous mode [ 319.948706][T15731] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.956108][T15731] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.957922][T15788] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2835'. [ 319.969753][T15731] bridge_slave_1: entered allmulticast mode [ 319.983553][T15731] bridge_slave_1: entered promiscuous mode [ 320.081571][T15731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.111590][T15731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.150748][T15795] tipc: Enabling of bearer rejected, failed to enable media [ 320.193680][T15731] team0: Port device team_slave_0 added [ 320.211558][T15731] team0: Port device team_slave_1 added [ 320.281355][T15731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.289368][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.316605][T15731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.340437][T15731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.357495][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.383156][T15801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.409221][T15731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.510844][T15731] hsr_slave_0: entered promiscuous mode [ 320.527777][T15731] hsr_slave_1: entered promiscuous mode [ 320.597335][ T51] Bluetooth: hci3: command tx timeout [ 320.616427][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2842'. [ 320.883064][T15731] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.927163][T15731] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.958311][T15731] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 320.979591][T15731] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.060646][T15731] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.092195][T15731] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.121037][T15731] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.151001][T15731] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.243582][T15835] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2849'. [ 321.277019][T15835] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2849'. [ 321.296800][T15731] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.311617][T15731] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.328898][T15731] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.344957][T15731] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.372601][T15831] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 321.458495][T15843] ipvlan0: entered promiscuous mode [ 321.463900][T15843] ipvlan0: entered allmulticast mode [ 321.467443][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2851'. [ 321.499357][T15731] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.525859][T15731] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.541782][T15731] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.565318][T15731] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.658657][T15858] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 321.674671][T15858] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 321.965208][T15868] netlink: 'syz.3.2856': attribute type 10 has an invalid length. [ 322.039430][T15868] team0: Port device geneve0 added [ 322.282572][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.292348][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.679543][ T51] Bluetooth: hci3: command tx timeout [ 323.532389][T15731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.559037][T15731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.600538][T15731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.632882][T15731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.741696][T15908] __nla_validate_parse: 2 callbacks suppressed [ 323.741711][T15908] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2867'. [ 323.902294][T15731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.971640][T15731] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.996890][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.004102][T10476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.052125][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.059349][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.205035][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 324.285394][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2872'. [ 324.294996][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2872'. [ 324.305997][T15926] team0: left allmulticast mode [ 324.315035][T15926] team0: left promiscuous mode [ 324.335749][T15926] bridge0: port 1(team0) entered disabled state [ 324.481195][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2874'. [ 324.575226][T15945] netlink: 'syz.1.2874': attribute type 10 has an invalid length. [ 324.709182][T15950] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2876'. [ 324.761626][ T51] Bluetooth: hci3: command tx timeout [ 324.866373][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'. [ 324.868694][T15953] netlink: 'syz.3.2877': attribute type 1 has an invalid length. [ 324.896150][T15957] hsr_slave_0: left promiscuous mode [ 324.899429][T15953] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2877'. [ 324.911373][T15957] hsr_slave_1: left promiscuous mode [ 325.041504][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2881'. [ 325.052111][T15969] netlink: 'syz.0.2881': attribute type 1 has an invalid length. [ 325.060327][T15731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.071446][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'. [ 325.142944][T15972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.152548][T15972] bond0: (slave bond4): making interface the new active one [ 325.161623][T15972] bond0: (slave bond4): Enslaving as an active interface with an up link [ 325.195018][T15969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.323028][T15731] veth0_vlan: entered promiscuous mode [ 325.360180][T15731] veth1_vlan: entered promiscuous mode [ 325.404577][T15731] veth0_macvtap: entered promiscuous mode [ 325.451875][T15731] veth1_macvtap: entered promiscuous mode [ 325.511144][T15731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.572650][T15731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.617431][T15991] openvswitch: netlink: Message has 4 unknown bytes. [ 325.629648][T10476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.657861][T10476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.703956][T10476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.804707][T10476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.032102][T10479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.081673][T10479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.130418][T10468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.160859][T10468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.370696][T16021] netlink: 'syz.1.2894': attribute type 18 has an invalid length. [ 326.692140][ T30] audit: type=1800 audit(1758042788.972:6): pid=16012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2891" name="memory.events" dev="tmpfs" ino=2963 res=0 errno=0 [ 326.839832][ T51] Bluetooth: hci3: command tx timeout [ 327.729278][T16091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.750018][T16094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.806903][T16055] lo speed is unknown, defaulting to 1000 [ 327.881507][T16089] tc_dump_action: action bad kind [ 328.286404][T16121] vlan3: entered promiscuous mode [ 328.757073][T16061] lo speed is unknown, defaulting to 1000 [ 329.251793][T16154] __nla_validate_parse: 19 callbacks suppressed [ 329.251814][T16154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2937'. [ 329.490396][T16167] netlink: 'syz.0.2942': attribute type 1 has an invalid length. [ 329.694487][T16167] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.706469][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.715584][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.728477][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.739216][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.750581][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.877850][T16175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.891394][T16175] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 329.917808][T16175] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 330.064237][T16179] veth7: entered promiscuous mode [ 330.083316][T16179] bond5: (slave veth7): Enslaving as an active interface with a down link [ 330.106103][T16167] vlan0: entered allmulticast mode [ 330.111775][T16167] bond5: entered allmulticast mode [ 330.182216][T16190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2945'. [ 330.220469][T16191] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2945'. [ 330.436748][T16193] vlan3: entered promiscuous mode [ 330.452881][T16193] vlan3: entered allmulticast mode [ 330.465223][T16193] hsr_slave_1: entered allmulticast mode [ 330.476840][T16196] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 331.143080][T16213] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2953'. [ 331.421764][T16178] lo speed is unknown, defaulting to 1000 [ 331.811993][ T51] Bluetooth: hci2: command tx timeout [ 332.569941][T16252] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2963'. [ 332.610378][T16250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2964'. [ 332.664230][T16178] chnl_net:caif_netlink_parms(): no params data found [ 333.174796][T16178] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.199602][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.217573][T16178] bridge_slave_0: entered allmulticast mode [ 333.234181][T16178] bridge_slave_0: entered promiscuous mode [ 333.255111][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.270095][T16178] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.285523][T16178] bridge_slave_1: entered allmulticast mode [ 333.305403][T16178] bridge_slave_1: entered promiscuous mode [ 333.428460][T16178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.479415][T16178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.660212][T16178] team0: Port device team_slave_0 added [ 333.683890][T16178] team0: Port device team_slave_1 added [ 333.818010][T16178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.831105][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.877055][ T51] Bluetooth: hci2: command tx timeout [ 333.890557][T16178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.914985][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 333.938338][T16178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.965064][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.035044][T16178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.177410][T16178] hsr_slave_0: entered promiscuous mode [ 334.184131][T16178] hsr_slave_1: entered promiscuous mode [ 334.197950][T16178] debugfs: 'hsr0' already exists in 'hsr' [ 334.237800][T16178] Cannot create hsr debugfs directory [ 334.457644][T16304] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 334.496611][T16178] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 334.518120][T16178] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.596602][T16178] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 334.639924][T16178] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.800663][T16178] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 334.828372][T16178] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.868029][T16318] netlink: 'syz.3.2982': attribute type 10 has an invalid length. [ 334.928626][T16318] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 334.956517][T16319] bridge_slave_0: invalid flags given to default FDB implementation [ 334.978205][T16178] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 335.000239][T16178] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.130814][T16328] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 335.152917][T16329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2986'. [ 335.184283][T16329] team0: No ports can be present during mode change [ 335.310284][T16178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 335.401420][T16178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 335.461670][T16178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 335.541527][T16178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 335.878180][T16178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.952274][T16178] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.959469][ T51] Bluetooth: hci2: command tx timeout [ 336.078876][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.086145][T10476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.119993][T10476] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.127236][T10476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.700346][T16379] netlink: 'syz.2.3000': attribute type 12 has an invalid length. [ 337.111171][T16178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.244553][T16178] veth0_vlan: entered promiscuous mode [ 337.265242][T16178] veth1_vlan: entered promiscuous mode [ 337.836743][T16178] veth0_macvtap: entered promiscuous mode [ 337.903754][T16178] veth1_macvtap: entered promiscuous mode [ 337.990935][T16178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.008397][T16424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.037829][ T51] Bluetooth: hci2: command tx timeout [ 338.074728][T16178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.135357][T10469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.175172][T10469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.231038][T10469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.256503][T10469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.389469][T10476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.421131][T10476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.502811][T16442] tipc: Enabled bearer , priority 0 [ 338.553273][T16440] tipc: Disabling bearer [ 338.618134][T10479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.646551][T10479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.086273][T16466] xt_socket: unknown flags 0x50 [ 339.819563][T16492] netlink: 'syz.2.3027': attribute type 1 has an invalid length. [ 339.851932][T16492] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3027'. [ 340.067924][T16495] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3028'. [ 340.194798][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 340.477555][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.504896][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.513487][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.524985][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.534124][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.565682][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 340.633477][T16515] netlink: 'syz.1.3034': attribute type 6 has an invalid length. [ 340.683677][T16522] netlink: 'syz.1.3034': attribute type 6 has an invalid length. [ 340.774419][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3038'. [ 341.014813][T16510] lo speed is unknown, defaulting to 1000 [ 341.372914][T16539] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 341.464061][T16541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3043'. [ 341.781661][T16551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.833185][T16547] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 342.211394][T16538] lo speed is unknown, defaulting to 1000 [ 342.294013][T16510] chnl_net:caif_netlink_parms(): no params data found [ 342.597198][ T5871] Bluetooth: hci4: command tx timeout [ 342.908727][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.919809][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.955557][T16510] bridge_slave_0: entered allmulticast mode [ 342.974457][T16510] bridge_slave_0: entered promiscuous mode [ 342.999685][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.014042][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.021685][T16510] bridge_slave_1: entered allmulticast mode [ 343.036401][T16510] bridge_slave_1: entered promiscuous mode [ 343.142544][T16584] tipc: Enabled bearer , priority 0 [ 343.151794][T16581] syzkaller0: entered promiscuous mode [ 343.157923][T16581] syzkaller0: entered allmulticast mode [ 343.178426][T16549] lo speed is unknown, defaulting to 1000 [ 343.242900][T16586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3055'. [ 343.257399][T16579] tipc: Resetting bearer [ 343.308932][T16579] tipc: Disabling bearer [ 343.356135][T16510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.412842][T16510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.590206][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'. [ 343.664883][T16510] team0: Port device team_slave_0 added [ 343.701503][T16510] team0: Port device team_slave_1 added [ 343.841156][T16598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3058'. [ 343.953279][T16510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.967797][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.051084][T16510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.097922][T16510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.104905][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.217999][T16510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.348972][T16608] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 344.655998][T16510] hsr_slave_0: entered promiscuous mode [ 344.678041][T16510] hsr_slave_1: entered promiscuous mode [ 344.684408][T16510] debugfs: 'hsr0' already exists in 'hsr' [ 344.693013][ T5871] Bluetooth: hci4: command tx timeout [ 344.698496][T16613] netlink: 780 bytes leftover after parsing attributes in process `syz.2.3063'. [ 344.711874][T16510] Cannot create hsr debugfs directory [ 344.894061][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3066'. [ 345.582273][T16635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3070'. [ 345.591406][T16631] netlink: 'syz.2.3068': attribute type 26 has an invalid length. [ 345.897707][T16510] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.958670][T16510] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.272356][T16510] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.278816][T16663] netlink: 'syz.0.3078': attribute type 32 has an invalid length. [ 346.301189][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3078'. [ 346.306614][T16510] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.399988][T16663] (unnamed net_device) (uninitialized): option coupled_control: invalid value (73) [ 346.452180][T16671] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 346.623339][T16510] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.648704][T16510] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.768413][ T5871] Bluetooth: hci4: command tx timeout [ 346.879520][T16696] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3086'. [ 347.240833][T16510] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.302109][T16510] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.344310][T16510] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.407675][T16510] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.496423][T16732] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 347.776144][T16510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.902300][T16752] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 348.083174][T16510] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.175713][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.183019][T10468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.305500][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.312774][T10468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.383521][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3100'. [ 348.420005][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 348.838049][ T5871] Bluetooth: hci4: command tx timeout [ 348.849340][T16780] team0: Device wireguard0 is of different type [ 349.033300][T16775] netlink: 'syz.2.3102': attribute type 1 has an invalid length. [ 349.480042][T16510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.683876][T16510] veth0_vlan: entered promiscuous mode [ 349.785874][T16510] veth1_vlan: entered promiscuous mode [ 349.860181][T16510] veth0_macvtap: entered promiscuous mode [ 349.916235][T16822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.995415][T16510] veth1_macvtap: entered promiscuous mode [ 350.080020][T16510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.145360][T16510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.210441][T10476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.263097][T10476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.301603][T10476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.332718][T16841] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3117'. [ 350.394310][T10476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.496781][T16845] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3119'. [ 350.563002][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3119'. [ 350.589434][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'. [ 350.683642][T10472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.728743][T10472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.765204][T16856] pimreg: entered allmulticast mode [ 350.924014][T10476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.968793][T10476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.172067][T16866] netlink: 'syz.3.3022': attribute type 1 has an invalid length. [ 351.195762][T16866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3022'. [ 351.214069][T16866] netlink: 'syz.3.3022': attribute type 15 has an invalid length. [ 351.222746][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 351.321304][T16866] netlink: 'syz.3.3022': attribute type 15 has an invalid length. [ 351.334966][T10476] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 351.368958][T10476] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 351.385150][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 351.424505][T10476] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 351.457014][T10476] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 351.697113][T16876] tipc: Started in network mode [ 351.702127][T16876] tipc: Node identity 261a921dd1ca, cluster identity 4711 [ 351.747441][T16876] tipc: Enabled bearer , priority 0 [ 352.053056][T16883] syzkaller0: entered promiscuous mode [ 352.074391][T16883] syzkaller0: entered allmulticast mode [ 352.095321][T16883] tipc: Resetting bearer [ 352.101118][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.102898][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.118307][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.130302][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.139202][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.195829][T10479] tipc: Resetting bearer [ 352.259444][T16885] IPv6: sit3: Disabled Multicast RS [ 352.265503][T16885] sit3: entered allmulticast mode [ 352.322356][T16873] tipc: Resetting bearer [ 352.427718][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3135'. [ 352.672916][T16896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3136'. [ 352.757629][ T43] tipc: Node number set to 4157641245 [ 353.000967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.891839][T16873] tipc: Disabling bearer [ 354.211105][ T51] Bluetooth: hci0: command tx timeout [ 354.450357][T16917] netlink: 'syz.1.3139': attribute type 4 has an invalid length. [ 355.354544][T16905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.510872][T10479] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 355.613778][T10479] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 355.662917][T16925] tipc: Started in network mode [ 355.674405][T16925] tipc: Node identity 76201678ac7a, cluster identity 4711 [ 355.682861][T16925] tipc: Enabled bearer , priority 0 [ 355.697950][T16928] syzkaller0: entered promiscuous mode [ 355.726934][T16928] syzkaller0: entered allmulticast mode [ 355.754343][T10479] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 355.781393][T16927] tipc: Enabled bearer , priority 0 [ 355.793384][T16928] tipc: Resetting bearer [ 355.835752][T16930] syzkaller0: entered promiscuous mode [ 355.856909][T16930] syzkaller0: entered allmulticast mode [ 355.875826][T16924] tipc: Resetting bearer [ 355.921157][T16924] tipc: Disabling bearer [ 355.961129][T10479] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 356.090500][T16948] tipc: Resetting bearer [ 356.101464][T16941] netlink: 'syz.3.3146': attribute type 5 has an invalid length. [ 356.131024][T16926] tipc: Resetting bearer [ 356.149865][T16954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3149'. [ 356.196707][T16926] tipc: Disabling bearer [ 356.209796][T16955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3149'. [ 356.270530][T16947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 356.287036][ T51] Bluetooth: hci0: command tx timeout [ 356.296974][T16947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.334723][T16889] lo speed is unknown, defaulting to 1000 [ 356.480326][T16947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 356.516203][T16947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.715461][T16947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 356.758060][T16947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.005372][T16947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 357.052949][T16947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.156174][T10479] batadv1: left allmulticast mode [ 357.170716][T10479] batadv1: left promiscuous mode [ 357.177948][T10479] bridge0: port 3(batadv1) entered disabled state [ 357.194066][T10479] bridge_slave_1: left allmulticast mode [ 357.203713][T10479] bridge_slave_1: left promiscuous mode [ 357.214004][T10479] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.231313][T10479] bridge_slave_0: left allmulticast mode [ 357.249810][T10479] bridge_slave_0: left promiscuous mode [ 357.256482][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.435971][T10479] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 357.456623][T10479] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 2a:d3:f0:ba:67:86 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 357.732417][T10479] bond2 (unregistering): (slave geneve2): Releasing active interface [ 358.232735][T10479] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.242522][T10479] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.252697][T10479] ` (unregistering): Released all slaves [ 358.270451][T10479] bond1 (unregistering): (slave veth5): Releasing backup interface [ 358.279584][T10479] bond1 (unregistering): Released all slaves [ 358.357052][ T51] Bluetooth: hci0: command tx timeout [ 358.392887][T10479] bond2 (unregistering): Released all slaves [ 358.408099][T10479] bond3 (unregistering): Released all slaves [ 358.526575][T10479] bond0 (unregistering): (slave bond4): Releasing backup interface [ 358.535576][T10479] bond0 (unregistering): Released all slaves [ 358.647337][T10479] bond4 (unregistering): Released all slaves [ 358.751034][T10479] bond5 (unregistering): (slave veth7): Releasing active interface [ 358.763071][T10479] bond5 (unregistering): Released all slaves [ 358.813334][T16981] : entered promiscuous mode [ 358.915153][T16995] netlink: 'syz.1.3161': attribute type 18 has an invalid length. [ 359.013863][T16984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.022341][T16997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3162'. [ 359.053783][T10479] tipc: Left network mode [ 359.079006][T16997] macsec1: entered promiscuous mode [ 359.091014][T16997] macsec1: entered allmulticast mode [ 359.174034][T16998] netlink: 'syz.4.3162': attribute type 1 has an invalid length. [ 359.198392][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 359.328669][T10469] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 359.355251][T10469] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.453588][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3166'. [ 359.463027][ T7954] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 359.471808][ T7954] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.482696][T17011] tipc: Enabling of bearer rejected, failed to enable media [ 359.517583][T17011] ip6tnl0: Caught tx_queue_len zero misconfig [ 359.569951][T10476] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 359.617512][T10476] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.754787][T17018] syzkaller1: entered promiscuous mode [ 359.763374][T17018] syzkaller1: entered allmulticast mode [ 359.865427][T10468] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 359.904425][T10468] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.964248][T17030] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3171'. [ 359.982352][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3172'. [ 360.082616][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3174'. [ 360.141257][T17037] netlink: 'syz.2.3174': attribute type 1 has an invalid length. [ 360.163089][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3174'. [ 360.437107][ T51] Bluetooth: hci0: command tx timeout [ 360.467682][T17030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.528337][T17030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.550295][T17030] bond0 (unregistering): Released all slaves [ 360.575357][T17064] netlink: 'syz.1.3175': attribute type 10 has an invalid length. [ 360.583805][T17064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3175'. [ 360.599170][T17064] batadv0: entered promiscuous mode [ 360.609071][T17064] batadv0: entered allmulticast mode [ 360.615061][T17064] bridge0: port 3(batadv0) entered blocking state [ 360.621769][T17064] bridge0: port 3(batadv0) entered disabled state [ 360.631672][T17064] bridge0: port 3(batadv0) entered blocking state [ 360.638242][T17064] bridge0: port 3(batadv0) entered forwarding state [ 360.649104][T16889] chnl_net:caif_netlink_parms(): no params data found [ 360.675246][T17058] batman_adv: batadv0: Adding interface: dummy0 [ 360.683728][T17058] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.718162][T17058] batman_adv: batadv0: Interface activated: dummy0 [ 360.761417][T17061] batadv0: mtu less than device minimum [ 360.775368][T17061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 360.787668][T17061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 360.799593][T17061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 360.811495][T17061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 360.823417][T17061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 360.835141][T17061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 360.846574][T17061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 360.857841][T17061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 361.050007][T10469] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 361.059455][T10469] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 361.161343][T17074] netlink: 'syz.2.3181': attribute type 11 has an invalid length. [ 361.385141][T16889] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.406785][T16889] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.414214][T16889] bridge_slave_0: entered allmulticast mode [ 361.422194][T16889] bridge_slave_0: entered promiscuous mode [ 361.438850][T16889] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.446028][T16889] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.453625][T16889] bridge_slave_1: entered allmulticast mode [ 361.462820][T16889] bridge_slave_1: entered promiscuous mode [ 361.652704][T10479] batadv_slave_1: left promiscuous mode [ 361.680447][T10479] hsr_slave_1: left promiscuous mode [ 361.691703][T10479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.705694][T10479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.724807][T10479] batman_adv: batadv0: Removing interface: team0 [ 361.747993][T10479] pimreg (unregistering): left allmulticast mode [ 362.075311][T10479] team0 (unregistering): Port device team_slave_1 removed [ 362.118187][T10479] team0 (unregistering): Port device C removed [ 362.492104][T16889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.523150][T16889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.664783][T16889] team0: Port device team_slave_0 added [ 362.714005][T16889] team0: Port device team_slave_1 added [ 362.762878][T17117] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3194'. [ 362.815998][T16889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.823808][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.851594][T16889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.898567][T16889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.925539][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.959633][T16889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.128616][T16889] hsr_slave_0: entered promiscuous mode [ 363.135285][T16889] hsr_slave_1: entered promiscuous mode [ 363.160820][T16889] debugfs: 'hsr0' already exists in 'hsr' [ 363.168443][T16889] Cannot create hsr debugfs directory [ 363.206213][T17138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3199'. [ 363.594986][T17150] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3203'. [ 363.675072][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 363.685339][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3205'. [ 364.012794][T17171] Bluetooth: MGMT ver 1.23 [ 364.210504][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 364.385576][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'. [ 364.431436][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'. [ 364.486127][T17188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.535013][T17183] syzkaller1: entered promiscuous mode [ 364.547009][T17183] syzkaller1: entered allmulticast mode [ 364.637181][T17188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.883289][T17188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.914105][T16889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.952887][T16889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.992617][T16889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.049051][T17188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.082522][T16889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.101543][T17212] net_ratelimit: 13 callbacks suppressed [ 365.101561][T17212] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 365.157634][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-272); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 365.161701][T10479] IPVS: stop unused estimator thread 0... [ 365.344534][ T7954] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.419522][ T7954] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.463650][ T7954] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.523357][ T7954] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.581148][T17226] tipc: Started in network mode [ 365.588537][T17226] tipc: Node identity 2e51b3d00396, cluster identity 4711 [ 365.595902][T17226] tipc: Enabled bearer , priority 0 [ 365.645731][T17226] syzkaller0: entered promiscuous mode [ 365.657889][T17226] syzkaller0: entered allmulticast mode [ 365.704752][T17226] tipc: Resetting bearer [ 365.751688][T16889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.815604][T16889] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.852750][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.860008][T10469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.903863][T10479] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.911141][T10479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.953256][T17234] tipc: Resetting bearer [ 366.019879][T17234] tipc: Disabling bearer [ 366.146896][T17242] tipc: Enabled bearer , priority 0 [ 366.187958][T17242] syzkaller0: entered promiscuous mode [ 366.212137][T17242] syzkaller0: entered allmulticast mode [ 366.263779][T17242] tipc: Resetting bearer [ 366.281744][T17241] tipc: Resetting bearer [ 366.317868][T17241] tipc: Disabling bearer [ 366.765043][T17263] netlink: 'syz.2.3233': attribute type 1 has an invalid length. [ 366.868380][T17263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.963252][T17269] vlan2: entered promiscuous mode [ 366.968984][T17269] bond1: entered promiscuous mode [ 366.974183][T17269] vlan2: entered allmulticast mode [ 367.006942][T17269] bond1: entered allmulticast mode [ 367.074401][T16889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.171794][T17274] bond1: (slave gretap2): making interface the new active one [ 367.185648][T17274] gretap2: entered promiscuous mode [ 367.201853][T17274] gretap2: entered allmulticast mode [ 367.229496][T17274] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 367.430521][T16889] veth0_vlan: entered promiscuous mode [ 367.484622][T16889] veth1_vlan: entered promiscuous mode [ 367.648490][T16889] veth0_macvtap: entered promiscuous mode [ 367.677912][T16889] veth1_macvtap: entered promiscuous mode [ 367.789554][T16889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.811671][T16889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.867109][ T7954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.893015][ T7954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.917154][ T7954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.925899][ T7954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.962327][T17306] syz.3.3245 uses old SIOCAX25GETINFO [ 368.179454][T10479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.226037][T10479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.369907][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-272); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 368.409254][T10479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.427133][T10479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.497698][T17319] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3247'. [ 368.776239][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3250'. [ 368.869738][T17334] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 368.918376][T17334] sctp: [Deprecated]: syz.0.3252 (pid 17334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.918376][T17334] Use struct sctp_sack_info instead [ 368.967903][T17334] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3252'. [ 369.213672][T17299] lo speed is unknown, defaulting to 1000 [ 369.385956][T17350] netlink: 'syz.0.3257': attribute type 1 has an invalid length. [ 369.416021][T17350] netlink: 'syz.0.3257': attribute type 2 has an invalid length. [ 370.201004][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 370.413558][T17369] veth0_to_hsr: entered promiscuous mode [ 370.428234][T17369] macvtap1: entered promiscuous mode [ 370.433855][T17369] macvtap1: entered allmulticast mode [ 370.440205][T17369] veth0_to_hsr: entered allmulticast mode [ 370.712941][T17380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3267'. [ 370.821273][T17381] tipc: Enabled bearer , priority 0 [ 370.874098][T10477] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 370.996515][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.005920][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.019110][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.035560][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.045730][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.076631][T17381] syzkaller0: entered promiscuous mode [ 371.099657][T17381] syzkaller0: entered allmulticast mode [ 371.240591][T10477] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 371.314275][T17387] tipc: Resetting bearer [ 371.388726][T17387] tipc: Disabling bearer [ 371.414978][T10477] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 371.494051][T10477] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 371.536597][T17400] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 371.580623][T17401] veth0_to_team: entered promiscuous mode [ 371.586409][T17401] veth0_to_team: entered allmulticast mode [ 371.720650][T17413] netlink: 'syz.3.3275': attribute type 1 has an invalid length. [ 371.830640][T17416] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 372.423428][T17443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3282'. [ 373.048847][T17456] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3287'. [ 373.078154][ T51] Bluetooth: hci1: command tx timeout [ 373.236613][T10477] bond0 (unregistering): Released all slaves [ 373.253845][T10477] bond1 (unregistering): Released all slaves [ 373.271135][T10477] bond2 (unregistering): Released all slaves [ 373.290979][T10477] bond3 (unregistering): Released all slaves [ 373.396256][T10477] bond4 (unregistering): Released all slaves [ 373.413704][T10477] bond5 (unregistering): Released all slaves [ 373.429583][T10477] bond6 (unregistering): Released all slaves [ 373.445236][T10477] bond7 (unregistering): Released all slaves [ 373.472992][T10477] bond8 (unregistering): Released all slaves [ 373.505671][T17384] lo speed is unknown, defaulting to 1000 [ 373.559433][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 373.973111][T10477] : left promiscuous mode [ 374.143099][T10477] tipc: Disabling bearer [ 374.158786][T10477] tipc: Left network mode [ 374.298118][T17484] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.305902][T17484] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.319973][T17484] bridge0: entered allmulticast mode [ 374.351217][T17487] pim6reg1: entered promiscuous mode [ 374.356667][T17487] pim6reg1: entered allmulticast mode [ 374.524411][T10477] ------------[ cut here ]------------ [ 374.530329][T10477] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 374.568073][T10477] WARNING: CPU: 1 PID: 10477 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 374.578913][T10477] Modules linked in: [ 374.583236][T10477] CPU: 1 UID: 0 PID: 10477 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 374.593981][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.604749][T10477] Workqueue: netns cleanup_net [ 374.611715][T10477] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 374.618493][T10477] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 3f b0 8c e8 86 fa 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 17 5f d7 f6 90 0f 0b 90 42 80 7c 3d [ 374.641705][T10477] RSP: 0018:ffffc9001afcf2a0 EFLAGS: 00010246 [ 374.649235][T10477] RAX: 0cba7e9d200a1800 RBX: 0000000000000000 RCX: ffff88806b260000 [ 374.658187][T10477] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 374.666191][T10477] RBP: ffff8880552fd728 R08: 0000000000000003 R09: 0000000000000004 [ 374.675853][T10477] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff8880552fe9d0 [ 374.684861][T10477] R13: ffff8880552fcd80 R14: 1ffff1100aa5fae5 R15: dffffc0000000000 [ 374.694029][T10477] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 374.704401][T10477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.711628][T10477] CR2: 00007f518df056c0 CR3: 0000000033714000 CR4: 00000000003526f0 [ 374.720549][T10477] Call Trace: [ 374.723860][T10477] [ 374.728058][T10477] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 374.734630][T10477] __ieee80211_link_release_channel+0x33b/0x4a0 [ 374.741473][T10477] ? __pfx_ieee80211_uninit+0x10/0x10 [ 374.747379][T10477] unregister_netdevice_many_notify+0x1953/0x1ff0 [ 374.754741][T10477] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 374.762845][T10477] ? __pfx_call_rcu+0x10/0x10 [ 374.768108][T10477] unregister_netdevice_queue+0x33c/0x380 [ 374.773885][T10477] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 374.781121][T10477] _cfg80211_unregister_wdev+0x165/0x590 [ 374.787316][T10477] ieee80211_remove_interfaces+0x49a/0x6e0 [ 374.793167][T10477] ? __pfx_synchronize_rcu+0x10/0x10 [ 374.798987][T10477] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 374.805404][T10477] ? rcu_is_watching+0x15/0xb0 [ 374.812168][T10477] ieee80211_unregister_hw+0x5d/0x2c0 [ 374.820230][T10477] mac80211_hwsim_del_radio+0x275/0x460 [ 374.825853][T10477] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 374.832781][T10477] hwsim_exit_net+0x584/0x640 [ 374.839242][T10477] ? __pfx_hwsim_exit_net+0x10/0x10 [ 374.844506][T10477] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 374.851473][T10477] ops_undo_list+0x497/0x990 [ 374.856128][T10477] ? __pfx_ops_undo_list+0x10/0x10 [ 374.861552][T10477] ? do_raw_spin_unlock+0x122/0x240 [ 374.866810][T10477] cleanup_net+0x4c5/0x800 [ 374.872207][T10477] ? __pfx_cleanup_net+0x10/0x10 [ 374.877372][T10477] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.882619][T10477] ? process_scheduled_works+0x9ef/0x17b0 [ 374.888410][T10477] ? process_scheduled_works+0x9ef/0x17b0 [ 374.894216][T10477] process_scheduled_works+0xae1/0x17b0 [ 374.901289][T10477] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.908023][T10477] worker_thread+0x8a0/0xda0 [ 374.912848][T10477] kthread+0x70e/0x8a0 [ 374.917289][T10477] ? __pfx_worker_thread+0x10/0x10 [ 374.922449][T10477] ? __pfx_kthread+0x10/0x10 [ 374.927932][T10477] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.933189][T10477] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.938726][T10477] ? __pfx_kthread+0x10/0x10 [ 374.943385][T10477] ret_from_fork+0x436/0x7d0 [ 374.948087][T10477] ? __pfx_ret_from_fork+0x10/0x10 [ 374.953260][T10477] ? __switch_to_asm+0x39/0x70 [ 374.958918][T10477] ? __switch_to_asm+0x33/0x70 [ 374.963740][T10477] ? __pfx_kthread+0x10/0x10 [ 374.968461][T10477] ret_from_fork_asm+0x1a/0x30 [ 374.973316][T10477] [ 374.976364][T10477] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 374.983678][T10477] CPU: 1 UID: 0 PID: 10477 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 374.993307][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.003365][T10477] Workqueue: netns cleanup_net [ 375.008145][T10477] Call Trace: [ 375.011429][T10477] [ 375.014362][T10477] dump_stack_lvl+0x99/0x250 [ 375.018966][T10477] ? __asan_memcpy+0x40/0x70 [ 375.023586][T10477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.028790][T10477] ? __pfx__printk+0x10/0x10 [ 375.033413][T10477] vpanic+0x281/0x750 [ 375.037407][T10477] ? __pfx__printk+0x10/0x10 [ 375.042032][T10477] ? __pfx_vpanic+0x10/0x10 [ 375.046552][T10477] ? is_bpf_text_address+0x26/0x2b0 [ 375.051772][T10477] panic+0xb9/0xc0 [ 375.055589][T10477] ? __pfx_panic+0x10/0x10 [ 375.060029][T10477] __warn+0x31b/0x4b0 [ 375.064014][T10477] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 375.069835][T10477] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 375.075560][T10477] report_bug+0x2be/0x4f0 [ 375.079896][T10477] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 375.085637][T10477] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 375.091394][T10477] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 375.097119][T10477] handle_bug+0x84/0x160 [ 375.101366][T10477] exc_invalid_op+0x1a/0x50 [ 375.105880][T10477] asm_exc_invalid_op+0x1a/0x20 [ 375.110739][T10477] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 375.117081][T10477] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 3f b0 8c e8 86 fa 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 17 5f d7 f6 90 0f 0b 90 42 80 7c 3d [ 375.136779][T10477] RSP: 0018:ffffc9001afcf2a0 EFLAGS: 00010246 [ 375.142962][T10477] RAX: 0cba7e9d200a1800 RBX: 0000000000000000 RCX: ffff88806b260000 [ 375.150949][T10477] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 375.159054][T10477] RBP: ffff8880552fd728 R08: 0000000000000003 R09: 0000000000000004 [ 375.167041][T10477] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff8880552fe9d0 [ 375.175030][T10477] R13: ffff8880552fcd80 R14: 1ffff1100aa5fae5 R15: dffffc0000000000 [ 375.183043][T10477] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 375.189073][T10477] __ieee80211_link_release_channel+0x33b/0x4a0 [ 375.195335][T10477] ? __pfx_ieee80211_uninit+0x10/0x10 [ 375.200722][T10477] unregister_netdevice_many_notify+0x1953/0x1ff0 [ 375.207260][T10477] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 375.214059][T10477] ? __pfx_call_rcu+0x10/0x10 [ 375.218755][T10477] unregister_netdevice_queue+0x33c/0x380 [ 375.224489][T10477] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 375.230761][T10477] _cfg80211_unregister_wdev+0x165/0x590 [ 375.236431][T10477] ieee80211_remove_interfaces+0x49a/0x6e0 [ 375.242251][T10477] ? __pfx_synchronize_rcu+0x10/0x10 [ 375.247546][T10477] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 375.253875][T10477] ? rcu_is_watching+0x15/0xb0 [ 375.258649][T10477] ieee80211_unregister_hw+0x5d/0x2c0 [ 375.264037][T10477] mac80211_hwsim_del_radio+0x275/0x460 [ 375.269608][T10477] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 375.275705][T10477] hwsim_exit_net+0x584/0x640 [ 375.280403][T10477] ? __pfx_hwsim_exit_net+0x10/0x10 [ 375.285622][T10477] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 375.291443][T10477] ops_undo_list+0x497/0x990 [ 375.296053][T10477] ? __pfx_ops_undo_list+0x10/0x10 [ 375.301180][T10477] ? do_raw_spin_unlock+0x122/0x240 [ 375.306404][T10477] cleanup_net+0x4c5/0x800 [ 375.310827][T10477] ? __pfx_cleanup_net+0x10/0x10 [ 375.315781][T10477] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.320996][T10477] ? process_scheduled_works+0x9ef/0x17b0 [ 375.326718][T10477] ? process_scheduled_works+0x9ef/0x17b0 [ 375.332439][T10477] process_scheduled_works+0xae1/0x17b0 [ 375.338022][T10477] ? __pfx_process_scheduled_works+0x10/0x10 [ 375.344023][T10477] worker_thread+0x8a0/0xda0 [ 375.348661][T10477] kthread+0x70e/0x8a0 [ 375.352753][T10477] ? __pfx_worker_thread+0x10/0x10 [ 375.357866][T10477] ? __pfx_kthread+0x10/0x10 [ 375.362467][T10477] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.367679][T10477] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.372877][T10477] ? __pfx_kthread+0x10/0x10 [ 375.377478][T10477] ret_from_fork+0x436/0x7d0 [ 375.382077][T10477] ? __pfx_ret_from_fork+0x10/0x10 [ 375.387206][T10477] ? __switch_to_asm+0x39/0x70 [ 375.392007][T10477] ? __switch_to_asm+0x33/0x70 [ 375.396780][T10477] ? __pfx_kthread+0x10/0x10 [ 375.401395][T10477] ret_from_fork_asm+0x1a/0x30 [ 375.406187][T10477] [ 375.409605][T10477] Kernel Offset: disabled [ 375.413934][T10477] Rebooting in 86400 seconds..