last executing test programs: 51.310090386s ago: executing program 0 (id=341): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x3, 0x400000, 0x6fa, 0xffffffffffffffff, 0xfffffc25, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x0, 0xf, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbc, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0xd, "8475be675de6a70a05a0dc"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "24a6"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 41.650032788s ago: executing program 0 (id=341): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x3, 0x400000, 0x6fa, 0xffffffffffffffff, 0xfffffc25, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x0, 0xf, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbc, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0xd, "8475be675de6a70a05a0dc"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "24a6"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 32.402746676s ago: executing program 0 (id=341): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x3, 0x400000, 0x6fa, 0xffffffffffffffff, 0xfffffc25, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x0, 0xf, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbc, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0xd, "8475be675de6a70a05a0dc"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "24a6"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23.79177972s ago: executing program 0 (id=341): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x3, 0x400000, 0x6fa, 0xffffffffffffffff, 0xfffffc25, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x0, 0xf, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbc, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0xd, "8475be675de6a70a05a0dc"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "24a6"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13.461204663s ago: executing program 0 (id=341): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x3, 0x400000, 0x6fa, 0xffffffffffffffff, 0xfffffc25, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x0, 0xf, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbc, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0xd, "8475be675de6a70a05a0dc"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "24a6"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 7.046028767s ago: executing program 2 (id=861): socket$inet6(0xa, 0x3, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780"], 0x64}}, 0x24002800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1}]}]}, {0x0, [0x5f, 0x3d]}}, 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x77eb488a, 0x5}}]}, 0x48}}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r10, &(0x7f00000004c0)={&(0x7f00000003c0), 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x2, 0x100, 0xc15, {}, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "9a067f98d0d35662"}}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="85b600007b2b573967a9e9620e5c0ce0d645431dce25b25da83cad6607041434715a099c186505183da0a2511b56caed1c0f167fe69809ca7f7163a8200592bcfcb026b6a59209009bf7b99212dc9f4a68974b", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYRES64=r6, @ANYRES32=r11, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r13, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r14, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc0000080009000500000008000700980100002000"], 0x234}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x45}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r15 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10) setsockopt$inet_mtu(r15, 0x0, 0xa, &(0x7f0000000100)=0x1, 0x4) 5.997792699s ago: executing program 2 (id=870): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x10}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x3c}}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x114, r9, 0xfe12482fe0801d65, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0xfffffffffffffff9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x6}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) r10 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r9, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x800) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSLABEL(r12, 0x81009431, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x10001, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x2}, 0x0, 0x0) write(r2, &(0x7f0000000000)="fc00", 0x2) socket$nl_generic(0x10, 0x3, 0x10) 5.045643244s ago: executing program 2 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r7, @ANYBLOB="08001180040008000a0006"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 4.921202314s ago: executing program 2 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x9c, &(0x7f0000000c40)=""/156, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d720800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$ax25(0x3, 0x3, 0x7) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000007200a143000000000000000007"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f0000000340)) r10 = socket$inet6(0xa, 0x4, 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000d00)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400bc0002379c89d271f8463a9099af06028879635d2c5f9e26c9f0fc472212dc86c9ec9414b664c13c14a4a6d0d8d0934df014f6aada2f4d0ddc6ef3a1c6891d84eda26dd18063615cac7a328404a74fec1b6b473d25c95401b097a39931365fefd9a13ac8c53fc90ecb8f961910f2b3a7d01581a8abed5a7536c4900ab12968971aaf460a6b21aff1cbb56554680f3546f2013cbf82c8c7a7bafeba2e614af4d3f67c9507c58393dd6c562d6796e0e526dd5b57f7e16cc9328bfed13389ab"], 0xc4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r11, 0x29, 0x36, &(0x7f0000000240)=@dstopts={0x87}, 0x8) getsockopt$inet6_opts(r11, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000840)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c250000000000f120207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a40000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.898505677s ago: executing program 0 (id=341): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x3, 0x400000, 0x6fa, 0xffffffffffffffff, 0xfffffc25, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x0, 0xf, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbc, &(0x7f0000000500)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0xd, "8475be675de6a70a05a0dc"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "24a6"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2.680846579s ago: executing program 2 (id=895): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{}, {0x34}]}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x8, 0x5, 0x4, 0xefd, 0x0, 0xbc, 0x7, {0x0, @in={{0x2, 0x4e24, @multicast2}}, 0xdc, 0x1, 0x4, 0x6, 0x60}}, &(0x7f0000000280)=0xb0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={r3, 0x7}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x5}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r8, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="241eab00222c380a7c41d7e8ed1fd727a31e08dc2e9bb0640c1180961edee4e9947d8bcdba1093df5d91b2b9fc98790e91733e83fd8f33334060642d5e67542ee2451d9c77143e31b1201e435cf1eec825114554004a0135bef99c325a28797fb213308879e73fe9dff11ef7208413ea14f5f6ae04d9b7d68c9280853b53bc6cb1ae0391804b22fd4de26c89824f4793ab623e6972b338eb4c6936bd85d5ac47b087d2ad6a18402661812231693ba2930e249c5946", @ANYRES16=r8, @ANYBLOB="10032bbd7000fcdbdf250f0000000c00990002000000510000000400e200"], 0x24}, 0x1, 0x0, 0x0, 0xda5ef032f9565ffb}, 0x0) 2.659834244s ago: executing program 3 (id=896): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000440)={r1, r3, 0x8, 0x0, 0x0, 0xb, 0x3, 0x46d, 0xfff9, 0x3, 0x0, 0x13f7, 'syz0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x5}]}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r4, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0x0, &(0x7f0000000440), &(0x7f0000000500)='GPL\x00', 0x111, 0x32, &(0x7f0000000540)=""/50, 0x41100, 0x31, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (async) unshare(0x8000480) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r10, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000040)={@any, 0x7}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) 2.184377352s ago: executing program 3 (id=898): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @broadcast}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2.183624598s ago: executing program 2 (id=899): socket$netlink(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xf, 0x8, 0x1c, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0xff98, 0x1, 0xffffffff}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) close(r5) socket(0x28, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000675646295c8411495c5452a6ad1be1b48755804cd5687fb9717260cf621a390631f7a1163c563389102cf36d2504f3cd4d3f768dd08aa7e34a4bc234292bb5bc9f7cc48124b59ccac9ad30aa3327b0de8fa7a67e007f586937f37c2e4f1c96c0f15b4e98af1206404ec83c411585fefd75423e869d1dfa7428737438d703f19e4c5b43a1", @ANYRES8=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT], 0x50) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.730729182s ago: executing program 4 (id=901): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040040}, 0x91) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r7, 0x11, 0x6}, 0x10) close(0x3) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000020000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000000008000140000008150500020000000000080006400000000408000440000000190900010073797a30000000000900020073797a32"], 0x94}}, 0x0) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000000)="7c24c67d7f463f427b7c9d403f5686ebeb65af11b46aa1984a130b18901ea47c285ec977accc94764f25387906fc9d066a26fb54d3345304c80c01940767da0d6456644fbfebeea30ae289afb1fb1eba9786cb559029b43d6c0721c6e64c920a7eba6fa17d8cf4f408ee11e578db0351f75846b945ef435d4ccb52effac48244ff25f67d1eb55641fa1981053e853e5ecc96be5415fbeec8ab45762733491ef565a9fe161da284a649145a7b0d44c334f6ceab330bdebd23eb48fd0b5a0122733d638f449f1c0725463872daee", 0xcd}], 0x1) pipe(&(0x7f0000000140)) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040040}, 0x91) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r7, 0x11, 0x6}, 0x10) (async) close(0x3) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000020000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000000008000140000008150500020000000000080006400000000408000440000000190900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000000)="7c24c67d7f463f427b7c9d403f5686ebeb65af11b46aa1984a130b18901ea47c285ec977accc94764f25387906fc9d066a26fb54d3345304c80c01940767da0d6456644fbfebeea30ae289afb1fb1eba9786cb559029b43d6c0721c6e64c920a7eba6fa17d8cf4f408ee11e578db0351f75846b945ef435d4ccb52effac48244ff25f67d1eb55641fa1981053e853e5ecc96be5415fbeec8ab45762733491ef565a9fe161da284a649145a7b0d44c334f6ceab330bdebd23eb48fd0b5a0122733d638f449f1c0725463872daee", 0xcd}], 0x1) (async) 1.729707371s ago: executing program 3 (id=902): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/178, 0xb2}], 0x2) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0xbdedcf1edc81f385}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0xae) (async) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0xbdedcf1edc81f385}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0xae) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "3571a6", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x2c}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "3571a6", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x2c}]}}}}}}}, 0x0) 1.729109689s ago: executing program 4 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0x0, 0x0}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) 1.721523504s ago: executing program 1 (id=905): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a3200fa1f0014000000110001"], 0x78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x19, r3, 0x1, 0x6}, 0x14) 1.707848348s ago: executing program 4 (id=906): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48d0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x4, [@typedef={0xf}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @datasec={0x3, 0x4, 0x0, 0xf, 0x1, [{0x2, 0x1, 0x5}, {0x2, 0x3, 0x9d0}, {0x5, 0x1, 0x6}, {0x1, 0x8000, 0x2}], "d1"}, @typedef={0x9, 0x0, 0x0, 0x8, 0x2}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xb, 0x5}, {0x3, 0x1}, {0x1, 0x4}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000380)=""/4096, 0xbc, 0x1000, 0x0, 0xc, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x2, 0x0, 0x7d3, 0x2a203, 0xffffffffffffffff, 0x6f8, '\x00', r2, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x0, @value=r3, @void, @void, @value}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='blkio.bfq.time\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x10, &(0x7f0000001400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000001480)='syzkaller\x00', 0x0, 0x99, &(0x7f00000014c0)=""/153, 0x40f00, 0x20, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x4, 0xa, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001600)=[r4, r4, r4], 0x0, 0x10, 0xdc8, @void, @value}, 0x94) r7 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001700)={{{@in6=@remote, @in=@remote, 0x4e22, 0x10, 0x4e20, 0x2b, 0xa, 0x20, 0xa0, 0x2c, r2, r7}, {0x7, 0x6, 0x9, 0x0, 0xec6, 0x4, 0x3, 0x9}, {0x0, 0x8001, 0x2, 0x8000}, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@remote, 0x4d2, 0xff}, 0xa, @in6=@loopback, 0x3502, 0x3, 0x0, 0x81, 0x2e, 0x2969, 0x8001}}, 0xe8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x3c, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x3c}}, 0x4004) r9 = socket$unix(0x1, 0x5, 0x0) close(r4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000001940)={0xfffffffffffffffb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "18e43b095f6d63"}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000002940)={{r10, 0x8, 0x80, 0xffff, 0x9, 0x644, 0x9, 0x10001, 0x9, 0x5, 0x0, 0x6, 0x4, 0x7, 0x24b9}}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003980), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000003a40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x34, r11, 0x700, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4804) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003a80)) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000003c80), &(0x7f0000003cc0)=0x4) sendmsg$nl_generic(r5, &(0x7f0000004200)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x8008200}, 0xc, &(0x7f00000041c0)={&(0x7f0000003d40)={0x464, 0x34, 0x20c, 0x70bd2d, 0x25dfdbfe, {0x1b}, [@typed={0xd, 0x103, 0x0, 0x0, @str='mptcp_pm\x00'}, @generic="6d0ab5dd1c57ed15a558bcf7d8fbd23a2e8514726e871fa1be0f0c00948f279e36fac0572f344a87e49997968ab87e4cd8ec507490f7877705e9baeee1219d5384091938d09480ff7328fd0563ea91b130deca25148e0547a2727c2792d48f692a494d8a0b65dfafddeb3befa8f4448c84471fe4005ddbe9d922a29729fa835c515d5cb398f705ea1015025a6bf183af55d9f406fa33103a1ec4819320996ce4d5d905b1e0323f73ee41f8b69f4ed8a0b168be370b8934780d951b9b275c2562b134cddbf8c2", @nested={0xfd, 0x8b, 0x0, 0x1, [@nested={0x4, 0x10c}, @typed={0xc, 0x5d, 0x0, 0x0, @str='ethtool\x00'}, @generic="f0a1dd4e7ee4d479ff233d821276ff42fd87638535015e7a0da2fc587912039410c22b9ccf8cbb61f0693d2d1fdbd117b0bbeae06186da20691349c0bda799516931c262d1a277f9f3d472fd3147426b40f4dd67cc54dc603a8ac17edd2751b6373384fbb45ae614c81d2a401ffcc187c667037a916b943fd887cf820042d5ff96f919526040b293b67fc2c05a5225fd16356c68cefd1898f7e029f80148ad98c1b1f51ac23b3f4a511065ad89e135b689a592c2add36b29c8320bda657f5ceb88", @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x33}, @typed={0x7, 0x119, 0x0, 0x0, @str=')}\x00'}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x120, 0x105, 0x0, 0x1, [@nested={0x4, 0x133}, @nested={0x4, 0xe1}, @nested={0x4, 0xb2}, @nested={0x4, 0xde}, @typed={0x8, 0xa7, 0x0, 0x0, @uid}, @typed={0x102, 0x31, 0x0, 0x0, @binary="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"}]}, @nested={0x14, 0x4f, 0x0, 0x1, [@typed={0x8, 0xff, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x102}, @nested={0x4, 0x134}]}, @generic="10d50eadb7e6a3714dc5d006cb4f5981d2bd0073073a37101afe7315984bfdae847b47c532e1413ff6e606775531227557e17eab67320491a711e2013c62417e5d23d71558623e695df97757d464d5116ab18fa2e2c4f7121c7d81e4d02c14cf9178859697f1901b74aae09961fd1bc881063fc7d5405a0ea3baf64b38bbfb47cc30a307", @nested={0xbd, 0xd5, 0x0, 0x1, [@typed={0x4, 0x13b}, @generic="aca4670a5334ead3649a477115f4249a3efbdecf16f37195a33ce940a2e21597c52352d02bd6023f4860df7efe5fcd8fa586bd19b445a3bda9da095cca8d", @typed={0x8, 0x12f, 0x0, 0x0, @u32}, @generic="28252c70c5e5efafe48211156743b4a8ddc6eb484e33f45b3670840506dda87442105998f381cd0d240f39705763437bde2367661ca4d7c8e47796a66c0d420967d0384622c5b0c454ef94527694d5dcc44274446b712a6fbe77a0", @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$inet(r5, &(0x7f0000004740)={&(0x7f0000004240)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004680)=[{&(0x7f0000004280)="70f2672427f1abdc7d0eca561aeee4d416c2ea48c166b1c77246b5d60942fcb436b69ccc4f19e533f273549018162a2e3b4c8baa07c57429330119955d4f75f0f4b4662a6e6d804b1b2946eda05d33a74ac94e5aba492768f52573f339c50259fff6d3c8cdee82e5859d194b9d7fd09db97be22889e93770d389fc4b11dabe8352abc01a20aef7943bf539fe722ea8e052eabd3ae36e9cd55ded20907983364d32d30990899c19c757390f0e7e68591199ded3bbc57706722f22356233f280f7e7ac98", 0xc3}, {&(0x7f0000004380)="8d2f21c7251ad951f8d4fbc3ea92974807be7493dc167ba0548fbcce99b8ff1cdfe2c303ccfa809b9fff21c760a62aa467a0e8f737e4c09a97b6a80e", 0x3c}, {&(0x7f00000043c0)="d02ca24f39f59eb92675e126af5cc51e9e497f4052", 0x15}, {&(0x7f0000004400)="aa90c7990dd506", 0x7}, {&(0x7f0000004440)="81f48716474e8fd993a5c7d2107630b347300d3bd69758ddff6e955a2f64fd10ade42e49e5c50157fd90197d526126c810614076534a02a2e08b4b76390a51c0378234d1185a44193643d3", 0x4b}, {&(0x7f00000044c0)="3e0477091fdb15296c96c30f4e1f1e", 0xf}, {&(0x7f0000004500)="1a866a4e1f9ee206958591f321f99fac5761ca9abfbb8ce3ee84109398443f392a229bc51705b2ce9163b9c6c4191e2cf6a35dcea53dd9917f3e0aa3b8aa745b888444897817dcd046e22ffacbfce972feb427ce03c24d93082e93b66c60a56d17f8e4eb4059f77e77f623eb3e90c70157786a6fd93d8902703767ea2657eef856353b6ecbb99c5fda2bed79", 0x8c}, {&(0x7f00000045c0)="8fa443583c38e9d63b94596c82d4c611c384db8410c0158f2c284f380e7ed10fbb519f6b8c6b211bce5fb4560a7000c2e78908beec57c2e6cee7e08f994859caea082525c498454ec5c8eff73ea5440c02461e2c9791412ed6b8a2759338a0bb19327e380adb5b57f84fede09faa87f571f6ea5db0f42b539ad10f9af826e387f2bf1b9f", 0x84}], 0x8, &(0x7f0000004700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}, 0x8004) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004b00)={0x6, 0x29, &(0x7f0000004780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2dc8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000004900)='syzkaller\x00', 0x7152, 0xf1, &(0x7f0000004940)=""/241, 0x41000, 0x10, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000004a40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000004a80)={0x2, 0x6, 0x1, 0xa6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004ac0)=[r4], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004f00)={r12, 0x0, 0xfa, 0x59, &(0x7f0000004bc0)="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", &(0x7f0000004cc0)=""/89, 0x0, 0x0, 0x8f, 0xc6, &(0x7f0000004d40)="005a536c832a8b9fa979a0883c32137772350d67ac30b8d522636dfc08403d462d2f408e2b8644adff6b8064fd26718de121914022cce9ed170b990d11425053b4d2704854bea5efca8632c8cad10144118560d3668082437632f5ca0e83235fa9deeca5776a96b734ef5ec953c43f1e10fad91f65b00a28f867fc9e378cdfb0721abf9b08e46d3f7055fe7b9ea092", &(0x7f0000004e00)="9aa98b5c3b57ebe19169bb85c7902c15c156012a65f598f262b2873931a67f5d7ac2d8b285343704a992c997de96bb8b587653c7e75996180494dc8f0132a7cd56143d513f3e2a2063355fe04c51f12e99e191fe5ab59148de5208628e29bbb3f25644593c924585039e6e51ca91e785eeafcbaa93483e74c130bc85435e064c17b0af11b7cf38e8da3fc30e28833deab267e3976dc68fb8e3c5673d2bdb5ded21566865c3e7b1259fc8b207797af44bebee641600c1db7c905fbbd853b3687b108ed1ad48f2", 0x2, 0x0, 0xfffffc01}, 0x50) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004fc0), r1) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000005080)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005040)={&(0x7f0000005000)={0x14, r13, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x10) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f00000050c0)={0x0, @private}, &(0x7f0000005100)=0xc) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000005140)={'wlan0\x00'}) bind$inet(r5, &(0x7f0000005180)={0x2, 0x4e24, @empty}, 0x10) 1.644579496s ago: executing program 1 (id=907): unshare(0x24020400) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x3e, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}}}, 0x24}}, 0x4c880) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0xd8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xac, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x37}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffb, 0xc}}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x33, 0x10001}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xbe}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xfffffff8}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb4f8, 0x4}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xcb5a0cdbbbab69fe}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400}, 0x14}}, 0x4005) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff2}, {}, {0x1c, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff, 0xffffff00, 0xffffffff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = epoll_create1(0x0) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r8, 0x0) (async) connect$vsock_stream(r7, &(0x7f0000000440), 0x10) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) (async) r9 = accept4$unix(r8, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000600)=""/194, 0xc2, 0x40020042, 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) tee(r10, r10, 0x10001, 0x5) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000fc0)) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000030038000008000100ac1414"], 0x24}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.524271236s ago: executing program 4 (id=908): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$packet(0x11, 0xa, 0x300) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r5 = getuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@empty, 0x4e21, 0xfff7, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0x2f, r4, r5}, {0xd, 0x101, 0x3, 0x5, 0x6, 0x4, 0x3, 0x1}, {0x6, 0x800, 0x4, 0x4}, 0x2, 0x0, 0x1, 0x1, 0x2}, {{@in=@multicast2, 0x4d6, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3504, 0x3, 0x3, 0x5b, 0x8, 0x6, 0x4}}, 0xe8) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) socket(0x1a, 0x1, 0x2) 1.502225476s ago: executing program 1 (id=909): r0 = epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x10001}, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, r4, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) recvfrom(r2, &(0x7f00000014c0)=""/4096, 0x1000, 0x40000003, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x2, @multicast, 'ip6erspan0\x00'}}, 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6}, {0x0, 0x8, 0x2, 0x5}, {0x0, 0x0, 0x65, 0x2}]}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f00000004c0)={{r3}, r4, 0x1a, @unused=[0xeb0, 0x9, 0x3ff, 0xffff], @subvolid=0xcd}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"1f7f7f57976e04265d0f6bedbe2280c9", r1, r4, {0x1ff, 0x7}, {0x9260, 0x9}, 0x8, [0x9, 0x4, 0x118, 0x2, 0xd9b4, 0x8, 0x5, 0x1, 0x1, 0xc48, 0xffffffffffffffff, 0x4, 0x9, 0x6, 0x80000000, 0x9]}) 1.294231673s ago: executing program 1 (id=910): r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r2, &(0x7f0000000080)=""/16, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000050a000000000000000000000006001d000000000008001e80"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8081) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}]}, 0x34}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x528}}, 0xc000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r10, r10, 0x8, 0x0, 0x0, 0x9, 0x52, 0xb54, 0x422c, 0x65, 0x4, 0xd, 'syz0\x00'}) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000400)=""/10, &(0x7f00000004c0)=0xa) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0xc804) 1.08010751s ago: executing program 3 (id=911): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000064dfcffffff17eded84", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r4) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r6, 0x42a, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 651.162474ms ago: executing program 4 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000000201040000000000000000020000002400028014000180080001000000000008000200000000000c000280050001000000000024000380140001800800010000000000080002000c000280fbff0000010000000400018000000000"], 0x60}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002040)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d616300"], 0x5c}}, 0x20000000) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) r6 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006100), 0x49f, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x5, 0x401) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000140)) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r9, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x801) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 498.354656ms ago: executing program 4 (id=913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair(0xa, 0x80005, 0x0, &(0x7f00000002c0)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b00010062"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) recvmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="ffff00"}) recvmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r7], 0x48}}, 0x0) close(r2) syz_emit_ethernet(0xe9, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001700), 0x10000218, &(0x7f0000000240), 0x20}, 0x40) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r12, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000025000000", 0xfe60) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r11], 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4044000) 328.285044ms ago: executing program 1 (id=914): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x20004010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000280)="9e7e213824bc8981c4785ab7cb454d6ab7f5a59d99b6cb3c0d4fb801cd7ca891134e9e684da7423f7f04ec94a175ea9d6e990bfd0cacd6319a1a77c23271f30c95c40e1905ef57b58fb6c03412dfbd3661ff021079e43ba5bea4bd3ef5ca49123d8a23913d0e76a409b4e50c979bbfda80d898053eb19e30caf4045cea5150a7d614b8181833d873e627676900fde39ef12f5049ff54dbfe7ceedc264099d95ef765a809734ad8718cdff25e8d825cfc471092d1c1378352e8b3dc4eba2c485f9e42599b003ea37097f5413558b3376936f409d46c94f10df43a", 0xda) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb}, [@generic={0xdc, 0xe, 0x6, 0x101, 0x7fff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xc}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x32, &(0x7f00000001c0)=""/50, 0x40f00, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x9, 0x7c1, 0x3da}, 0x10, 0x22b67, r5, 0x1, 0x0, &(0x7f0000000240)=[{0x0, 0x2, 0x5, 0xb}], 0x10, 0xfffffffc, @void, @value}, 0x94) 129.045294ms ago: executing program 3 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) (async) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="b4", 0x1}], 0x1, 0x3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0xcb, 0x8, 0xb, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x7, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0xa, 0x8, 0x7, 0x2, @private0, @remote, 0x7, 0x8000, 0xff, 0x81}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @broadcast, 0x0}, &(0x7f0000000340)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x624, r5, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x52}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x42b}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbe2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfa4, 0x9, 0x0, 0x7}, {0x0, 0x3, 0x4, 0x5}, {0xe, 0x40, 0x7, 0x81}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7e}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x100, 0x5, 0x7, 0x4}, {0x7, 0x1, 0xff, 0xfff}]}}}]}}]}, 0x624}, 0x1, 0x0, 0x0, 0x20004040}, 0x40080) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) 74.801418ms ago: executing program 3 (id=916): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x20) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000001240)=""/53}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x1, r3, 0x3, r4}, 0x10) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 0s ago: executing program 1 (id=917): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="06976afae92581f89c252d96953ae8c8b167f0b4b02286ade37da577f8b3b8050670692db1f7d9aecacb854895c1fecfc7a8209e1b11bce657ead69fb8dde2790dba4a7ae0ef9fc54a69ee3738b276af89b220281768619343240c", 0x5b}, {&(0x7f0000000080)="9f71a96e90efed2bccd3ab95cbf95895a345c801e714dbb461d959eb58a9bf55d976401ffb9374689f98096183cc7a5e974cab0643afff9fa47391ddf0fa85fba983ed0dcc7ccf42bc222284ad05259c194e4987e23ed22e887f4bd00968a4c0b8dcc67ec5ca5203ee011a08552e50eacdba73880992bf0e7fcaeb43dff2195710c8b0f1aa55ed3a6d8932c9bc53ddd432ea6dec2bf0d6ff8755f19f039530039860641ffa7f00396bd6031923abb7c0d4429920", 0xb4}, {&(0x7f0000000140)="a72c44c2d6027ca1844d176f346c6755bb5a025e882792a762cc7fc41afb7a8f19d518f25f17d542624e940b86be203751966e03958786a8fed41136ef5171ddcb87903564ea50ce8167fd1fe9b4083b239441", 0x53}, {&(0x7f00000001c0)="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", 0xfc}, {&(0x7f00000002c0)="fb808ab7491964109d642bc1d077bf27fdf5f9a2b40899893a19933c828c63d4bfb1126b7492fa28a409dff510570d3269b2eff5c2819bee9e4918d5650572e481a722b1f5d6b29b7e0a049d67d5e72842d3ab5521743d1863c091e53691ebb42c00", 0x62}, {&(0x7f0000000340)="ae090e0314558dc6ab6d5485b5dfd35d61cc6a7ce63ba62201f85c601b276d55019bf329a070a5c9769fac29dc55d654dfdd52789dfdfdf89b6fd38dc6a654980159d850b09ff7984a57012065fe7980c84fb7a2785c36baf8e6188b468ee08d39645179ad3e67bdd103a6000ba78b68977734d5f9dee70b874a1eab52408dc6884d53b54a043aa219a7b0b4feb7bf2c4f42925b7db818ed671d8e309d59a378f3fb19aa3de2c3a286fab8df9c04d8ceb94dd178f32086c32f00e6baa457c621792294", 0xc3}], 0x6, &(0x7f00000004c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @iv={0x78, 0x117, 0x2, 0x60, "ff7f19b849db5a756414ec95b911b0c306f970ed607b14a0669b695d3550298aae15bf66a4ba2e98dfe95ae36f2c82ad7e4180a5b5c694537d8408070599a51fafcbb4f7dc3c3e54b02275676598ff53b402863694b286f5af184b68cd9b6273"}, @assoc={0x18, 0x117, 0x4, 0xb}], 0xa8, 0x4004012}, 0x40004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000005c0)={{0x2, 0x4e24, @loopback}, {0x6, @multicast}, 0x2, {0x2, 0x5, @rand_addr=0x64010101}, 'sit0\x00'}) sendfile(r1, r0, &(0x7f0000000640)=0x7f, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000700)=0x60, 0x80800) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000740)={0x0, 0x4, 0x7}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000b40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x20) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_proto_private(r5, 0x89e2, &(0x7f0000000b80)="b2a9f45800bc314eacbe55df19548dc1d550f1247fad88ebfb") r6 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r6, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000bc0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/53, 0x35}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/53, 0x35}, {&(0x7f0000002c80)=""/148, 0x94}], 0x6, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/171, 0xab}, {&(0x7f0000004e80)=""/237, 0xed}, {&(0x7f0000004f80)=""/244, 0xf4}, {&(0x7f0000005080)=""/168, 0xa8}, {&(0x7f0000005140)=""/36, 0x24}], 0x6, &(0x7f0000005200)=""/238, 0xee}, 0xfffffff7}, {{&(0x7f0000005300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005380)=""/40, 0x28}, {&(0x7f00000053c0)=""/4, 0x4}, {&(0x7f0000005400)=""/56, 0x38}], 0x3, &(0x7f0000005480)=""/237, 0xed}, 0xff}, {{&(0x7f0000005580)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000005600)=""/98, 0x62}, {&(0x7f0000005680)=""/77, 0x4d}, {&(0x7f0000005700)=""/242, 0xf2}, {&(0x7f0000005800)=""/240, 0xf0}, {&(0x7f0000005900)=""/224, 0xe0}], 0x5, &(0x7f0000005a80)=""/72, 0x48}}], 0x4, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000005d80)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005d40)={&(0x7f0000005cc0)={0x50, r8, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x13}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "cb623d345b32966299530ff1ca1894bb"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="657f321e397a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f0000005e80)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005e40)={&(0x7f0000005e00)={0x24, 0xd, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000000) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000005ec0)={0xfff, 0x7f, 0x81}, 0xc) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000005f00)=0x2, 0x4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000005f40), r12) r13 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r13, 0x942e, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_SCRUB(r13, 0xc400941b, &(0x7f0000005f80)={r3, 0x8, 0x5}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000063c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xe) kernel console output (not intermixed with test programs): mmand tx timeout [ 77.470405][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 77.511350][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 77.595877][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 77.648450][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 78.184867][ T5993] "syz.1.16" (5993) uses obsolete ecb(arc4) skcipher [ 78.734170][ T5980] syz.1.16 (5980) used greatest stack depth: 19280 bytes left [ 79.325404][ T6068] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 79.485366][ T6078] Zero length message leads to an empty skb [ 79.586431][ T9] IPVS: starting estimator thread 0... [ 79.595881][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 79.678188][ T6082] IPVS: using max 27 ests per chain, 64800 per kthread [ 79.735991][ T6081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.820158][ T6083] netlink: 'syz.4.23': attribute type 10 has an invalid length. [ 79.878861][ T6083] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.921120][ T6083] bond0: (slave team0): Enslaving as an active interface with an up link [ 79.965452][ T6092] netlink: 'syz.3.28': attribute type 2 has an invalid length. [ 79.978966][ T6092] netlink: 'syz.3.28': attribute type 9 has an invalid length. [ 80.020875][ T6083] syz.4.23 (6083) used greatest stack depth: 19248 bytes left [ 80.063906][ T6081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.276114][ T6081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.431507][ T6105] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 80.487748][ T8] cfg80211: failed to load regulatory.db [ 80.575167][ T6081] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.666509][ T6084] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 80.770136][ T6084] tipc: Started in network mode [ 80.775189][ T6084] tipc: Node identity ac1414aa, cluster identity 4711 [ 80.814039][ T6084] tipc: Enabled bearer , priority 10 [ 80.891573][ T6081] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.953652][ T6123] __nla_validate_parse: 1 callbacks suppressed [ 80.953672][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'. [ 80.989112][ T6081] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.048368][ T6081] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.065409][ T6081] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.256414][ T6120] lo speed is unknown, defaulting to 1000 [ 81.407321][ T6120] lo speed is unknown, defaulting to 1000 [ 81.415898][ T6120] lo speed is unknown, defaulting to 1000 [ 81.511219][ T6120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.620688][ T6120] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 81.813217][ T6120] lo speed is unknown, defaulting to 1000 [ 81.848576][ T6120] lo speed is unknown, defaulting to 1000 [ 81.855416][ T6120] lo speed is unknown, defaulting to 1000 [ 81.902654][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 81.919640][ T5915] tipc: Node number set to 2886997162 [ 81.978333][ T6120] lo speed is unknown, defaulting to 1000 [ 81.978422][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.001372][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.029834][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.050831][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.155454][ T6120] lo speed is unknown, defaulting to 1000 [ 82.211355][ T6120] lo speed is unknown, defaulting to 1000 [ 82.245719][ T6120] lo speed is unknown, defaulting to 1000 [ 82.425505][ T6154] lo speed is unknown, defaulting to 1000 [ 82.480865][ T6157] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 82.721067][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 83.591507][ T6152] ip6gre1: entered promiscuous mode [ 83.872882][ T6202] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.886548][ T6202] Cannot find add_set index 0 as target [ 84.842656][ T6266] lo speed is unknown, defaulting to 1000 [ 84.910909][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 84.985141][ T6265] batman_adv: batadv0: Adding interface: dummy0 [ 84.997339][ T6265] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.060770][ T6265] batman_adv: batadv0: Interface activated: dummy0 [ 85.075640][ T6275] net_ratelimit: 4 callbacks suppressed [ 85.075659][ T6275] batadv0: mtu less than device minimum [ 85.094871][ T6275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.108179][ T6275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.120769][ T6275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.133267][ T6275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.145918][ T6275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.159102][ T6275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.171572][ T6275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.184084][ T6275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.196662][ T6275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.466591][ T6298] : entered promiscuous mode [ 85.514835][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.69'. [ 85.539066][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.69'. [ 85.584636][ T6304] bond0: (slave team0): Releasing backup interface [ 85.604083][ T6304] bridge_slave_0: left allmulticast mode [ 85.628788][ T6304] bridge_slave_0: left promiscuous mode [ 85.650790][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.731478][ T6304] bridge_slave_1: left allmulticast mode [ 85.741834][ T6304] bridge_slave_1: left promiscuous mode [ 85.760465][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.801494][ T6304] bond0: (slave bond_slave_0): Releasing backup interface [ 85.834786][ T6304] bond0: (slave bond_slave_1): Releasing backup interface [ 85.913687][ T6304] team0: Port device team_slave_0 removed [ 85.926048][ T6304] team0: Port device team_slave_1 removed [ 85.934828][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.943178][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.962327][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.974278][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.129976][ T6327] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.198205][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 86.400708][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 86.440952][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 86.443687][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 86.649838][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.85'. [ 86.673583][ T6352] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.687896][ T6352] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.699464][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 86.699642][ T6352] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.718604][ T6352] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.755631][ T6352] geneve2: entered allmulticast mode [ 87.100386][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 87.291795][ T6389] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 87.310092][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 87.334046][ T6389] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 87.354086][ T6389] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 87.441720][ T25] IPVS: starting estimator thread 0... [ 87.537261][ T6401] IPVS: using max 22 ests per chain, 52800 per kthread [ 87.580136][ T6409] tipc: Trying to set illegal importance in message [ 87.586553][ T6400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.641334][ T6400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.689495][ T6412] netlink: 52 bytes leftover after parsing attributes in process `syz.3.100'. [ 87.802338][ T6400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.829867][ T6400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.856052][ T6418] netlink: 'syz.4.103': attribute type 3 has an invalid length. [ 87.900074][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 88.343733][ T6417] bond0 (unregistering): Released all slaves [ 88.385834][ T6400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.404576][ T6400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.445323][ T6407] tipc: Started in network mode [ 88.466062][ T6407] tipc: Node identity ac1414aa, cluster identity 4711 [ 88.474099][ T6407] tipc: Enabled bearer , priority 10 [ 88.480388][ T6427] netlink: 'syz.2.106': attribute type 15 has an invalid length. [ 88.591597][ T6441] netlink: 'syz.4.108': attribute type 10 has an invalid length. [ 88.615002][ T6400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.630525][ T6400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.646500][ T6448] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 88.684446][ T6441] veth0_vlan: left promiscuous mode [ 88.701988][ T6441] veth0_vlan: entered promiscuous mode [ 88.721308][ T6441] team0: Device veth0_vlan failed to register rx_handler [ 88.740878][ T6448] syz.3.109 (6448) used greatest stack depth: 18992 bytes left [ 88.785273][ T6444] lo speed is unknown, defaulting to 1000 [ 88.841224][ T6400] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.861762][ T6400] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 88.886303][ T6400] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.910407][ T6400] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 88.924252][ T6449] lo speed is unknown, defaulting to 1000 [ 88.948446][ T6400] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.957292][ T6400] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 89.056214][ T6400] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 89.097226][ T6400] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 89.369608][ T6465] xt_TCPMSS: Only works on TCP SYN packets [ 89.467149][ T5915] tipc: Node number set to 2886997162 [ 89.520119][ T6473] pim6reg1: entered promiscuous mode [ 89.532946][ T6473] pim6reg1: entered allmulticast mode [ 89.903921][ T6490] can: request_module (can-proto-5) failed. [ 89.968778][ T6495] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 90.051521][ T6500] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 90.063085][ T6495] Bluetooth: MGMT ver 1.23 [ 90.407418][ C1] net_ratelimit: 19 callbacks suppressed [ 90.407454][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 90.781684][ T6534] lo speed is unknown, defaulting to 1000 [ 90.842953][ T6537] xt_hashlimit: max too large, truncated to 1048576 [ 90.921358][ T6542] lo speed is unknown, defaulting to 1000 [ 91.076368][ T6545] pim6reg1: entered promiscuous mode [ 91.101362][ T6545] pim6reg1: entered allmulticast mode [ 91.247722][ T6555] __nla_validate_parse: 6 callbacks suppressed [ 91.247740][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'. [ 91.433695][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 91.447174][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 91.812682][ T6567] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 91.898034][ T6567] team0: Device veth1_macvtap failed to register rx_handler [ 92.011044][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 92.020415][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 92.152239][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 92.164084][ T6593] IPVS: length: 78 != 422621984 [ 92.300873][ T6587] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 92.307250][ T5884] IPVS: starting estimator thread 0... [ 92.322190][ T6597] netlink: 68 bytes leftover after parsing attributes in process `syz.1.152'. [ 92.342203][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 92.407231][ T6598] IPVS: using max 38 ests per chain, 91200 per kthread [ 92.487224][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 92.975344][ T6637] netlink: 'syz.3.160': attribute type 2 has an invalid length. [ 92.988480][ T6639] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 93.085557][ T6641] lo speed is unknown, defaulting to 1000 [ 93.098974][ T6641] lo speed is unknown, defaulting to 1000 [ 93.105347][ T6641] lo speed is unknown, defaulting to 1000 [ 93.170164][ T6641] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.194711][ T6641] lo speed is unknown, defaulting to 1000 [ 93.202941][ T6641] lo speed is unknown, defaulting to 1000 [ 93.225151][ T6641] lo speed is unknown, defaulting to 1000 [ 93.241185][ T6641] lo speed is unknown, defaulting to 1000 [ 93.277267][ T6641] lo speed is unknown, defaulting to 1000 [ 93.529390][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 93.549364][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 93.588334][ T6678] bond_slave_0: entered promiscuous mode [ 93.594382][ T6678] bond_slave_1: entered promiscuous mode [ 93.649221][ T6678] macvlan2: entered promiscuous mode [ 93.657097][ T6678] bond0: entered promiscuous mode [ 93.664359][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 93.675967][ T6678] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.049043][ T6708] lo speed is unknown, defaulting to 1000 [ 94.056143][ T6708] lo speed is unknown, defaulting to 1000 [ 94.470362][ T6721] lo speed is unknown, defaulting to 1000 [ 94.511301][ T6721] lo speed is unknown, defaulting to 1000 [ 94.550266][ T6728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.567282][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 94.638375][ T6736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.179'. [ 94.928749][ T6748] delete_channel: no stack [ 95.011226][ T6747] delete_channel: no stack [ 95.073650][ T6708] IPVS: set_ctl: invalid protocol: 60 172.20.20.47:20000 [ 95.208725][ T6763] netlink: 'syz.4.187': attribute type 1 has an invalid length. [ 95.255601][ T6763] nbd: must specify a size in bytes for the device [ 95.296717][ T6721] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 95.354498][ T6766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.594322][ T6766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.617163][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 95.675728][ T6783] x_tables: duplicate underflow at hook 2 [ 95.766408][ T6766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.826805][ T6798] vlan2: entered promiscuous mode [ 95.840372][ T6798] batman_adv: batadv0: Adding interface: vlan2 [ 95.851620][ T6798] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.892539][ T6798] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 96.039199][ T6766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.235088][ T6817] warning: `syz.2.200' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.277775][ T6818] __nla_validate_parse: 7 callbacks suppressed [ 96.277793][ T6818] netlink: 56 bytes leftover after parsing attributes in process `syz.2.200'. [ 96.284326][ T6766] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.352592][ T6766] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.382164][ T6766] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.412535][ T6766] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.657186][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 96.812491][ T6841] netlink: 'syz.2.207': attribute type 11 has an invalid length. [ 96.826365][ T6841] netlink: 48 bytes leftover after parsing attributes in process `syz.2.207'. [ 96.846605][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 96.856034][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.208'. [ 97.051662][ T6846] netlink: 104 bytes leftover after parsing attributes in process `syz.3.210'. [ 97.089872][ T6851] netlink: 'syz.2.211': attribute type 11 has an invalid length. [ 97.214783][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.209'. [ 97.247428][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 97.257007][ T6860] Cannot find del_set index 65534 as target [ 97.310181][ T29] audit: type=1107 audit(1739889632.668:2): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 97.337527][ T6863] Bluetooth: MGMT ver 1.23 [ 97.341050][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.213'. [ 97.687146][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 97.738209][ T6878] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 97.797253][ T6878] netlink: 'syz.4.217': attribute type 11 has an invalid length. [ 97.822273][ T6878] netlink: 220 bytes leftover after parsing attributes in process `syz.4.217'. [ 98.123104][ T6893] netlink: 'syz.1.222': attribute type 10 has an invalid length. [ 98.168294][ T5850] Bluetooth: hci4: command tx timeout [ 98.261217][ T6893] veth0_vlan: left promiscuous mode [ 98.291945][ T6893] veth0_vlan: entered promiscuous mode [ 98.348842][ T6893] team0: Device veth0_vlan failed to register rx_handler [ 98.727124][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 98.973005][ T6918] lo speed is unknown, defaulting to 1000 [ 98.996652][ T6918] lo speed is unknown, defaulting to 1000 [ 99.362158][ T6933] x_tables: duplicate underflow at hook 1 [ 99.425364][ T6935] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 99.693713][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.233'. [ 99.767155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 99.953700][ T6940] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.965870][ T6940] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.978640][ T6940] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.990195][ T6940] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.033569][ T5915] lo speed is unknown, defaulting to 1000 [ 100.251043][ T5145] Bluetooth: hci4: command tx timeout [ 100.425856][ T6978] vxlan0: entered allmulticast mode [ 100.487345][ T6980] vlan2: entered promiscuous mode [ 100.492561][ T6980] team0: entered promiscuous mode [ 100.498805][ T6980] team_slave_0: entered promiscuous mode [ 100.506508][ T6980] team_slave_1: entered promiscuous mode [ 100.513880][ T6980] vlan2: entered allmulticast mode [ 100.519599][ T6980] team0: entered allmulticast mode [ 100.524929][ T6980] team_slave_0: entered allmulticast mode [ 100.530811][ T6980] team_slave_1: entered allmulticast mode [ 100.817121][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 100.898964][ T7003] sock: sock_set_timeout: `syz.2.249' (pid 7003) tries to set negative timeout [ 101.038967][ T7008] netlink: 'syz.2.251': attribute type 6 has an invalid length. [ 101.093034][ T7014] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 101.113981][ T7014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.138732][ T7014] bond1: (slave veth3): Enslaving as an active interface with a down link [ 101.398091][ T7032] raw_sendmsg: syz.2.256 forgot to set AF_INET. Fix it! [ 101.413632][ T7032] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 101.419883][ T7032] syzkaller0: linktype set to 6 [ 101.533021][ T7035] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 101.691472][ T7044] __nla_validate_parse: 6 callbacks suppressed [ 101.691485][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 101.710167][ T7044] vlan2: entered promiscuous mode [ 101.838737][ T7054] syzkaller0: entered allmulticast mode [ 101.847529][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 102.240277][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 102.287568][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 102.349354][ T7062] netlink: 'syz.2.265': attribute type 29 has an invalid length. [ 102.360469][ T7063] netlink: 'syz.2.265': attribute type 29 has an invalid length. [ 102.370053][ T7062] netlink: 'syz.2.265': attribute type 29 has an invalid length. [ 102.380567][ T7063] netlink: 516 bytes leftover after parsing attributes in process `syz.2.265'. [ 102.498208][ T7069] lo speed is unknown, defaulting to 1000 [ 102.506474][ T7069] lo speed is unknown, defaulting to 1000 [ 102.887247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 103.008170][ T7101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.141124][ T7110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 103.163742][ T7110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.291420][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 103.302392][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'. [ 103.439064][ T7120] netlink: 60 bytes leftover after parsing attributes in process `syz.0.280'. [ 103.449702][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.280'. [ 103.494328][ T7121] rdma_op ffff888027a8f1f0 conn xmit_rdma 0000000000000000 [ 103.514889][ T7125] netlink: 830 bytes leftover after parsing attributes in process `syz.0.282'. [ 103.722026][ T7136] netlink: 'syz.2.287': attribute type 4 has an invalid length. [ 103.755979][ T7136] netlink: 'syz.2.287': attribute type 4 has an invalid length. [ 103.781204][ T7142] tipc: Enabling of bearer rejected, already enabled [ 103.803121][ T7142] tipc: Enabling of bearer rejected, already enabled [ 103.822745][ T7142] tipc: Enabling of bearer rejected, already enabled [ 103.927311][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 103.988780][ T7158] netlink: 'syz.0.293': attribute type 1 has an invalid length. [ 104.156470][ T7172] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 104.367770][ T7184] netlink: 'syz.0.300': attribute type 5 has an invalid length. [ 104.430663][ T7186] lo speed is unknown, defaulting to 1000 [ 104.437307][ T7186] lo speed is unknown, defaulting to 1000 [ 104.881687][ T7206] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 104.967132][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 105.366106][ T7231] lo speed is unknown, defaulting to 1000 [ 105.463927][ T7235] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 105.529772][ T7240] netlink: 'syz.0.318': attribute type 2 has an invalid length. [ 106.007204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 106.331023][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 107.057169][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 107.323171][ T7231] lo speed is unknown, defaulting to 1000 [ 107.365693][ T7235] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 107.422854][ T7243] lo speed is unknown, defaulting to 1000 [ 107.452828][ T7243] lo speed is unknown, defaulting to 1000 [ 107.561953][ T7267] lo speed is unknown, defaulting to 1000 [ 107.614748][ T7267] lo speed is unknown, defaulting to 1000 [ 107.975477][ T7293] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 108.087218][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 108.749832][ T7320] syzkaller0: entered promiscuous mode [ 108.755497][ T7320] syzkaller0: entered allmulticast mode [ 108.848213][ T6058] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 108.874086][ T7332] __nla_validate_parse: 17 callbacks suppressed [ 108.874104][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 108.878832][ T6058] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 109.009004][ T6058] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 109.023738][ T6058] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 109.094172][ T6058] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 109.117090][ T6058] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 109.127176][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 109.232287][ T6058] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 109.283991][ T6058] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 109.500312][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 109.630680][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.647788][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.656195][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.664167][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.671951][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.685915][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.181606][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 111.081519][ T7359] netlink: 'syz.1.348': attribute type 12 has an invalid length. [ 111.092431][ T7359] netlink: 'syz.1.348': attribute type 29 has an invalid length. [ 111.100727][ T7359] netlink: 148 bytes leftover after parsing attributes in process `syz.1.348'. [ 111.110939][ T7359] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 111.118672][ T7359] netlink: 47 bytes leftover after parsing attributes in process `syz.1.348'. [ 111.189458][ T7355] lo speed is unknown, defaulting to 1000 [ 111.213897][ T7355] lo speed is unknown, defaulting to 1000 [ 111.213925][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 111.219893][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 111.258433][ T7363] lo speed is unknown, defaulting to 1000 [ 111.268818][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 111.282119][ T7363] lo speed is unknown, defaulting to 1000 [ 111.376961][ T6058] bridge_slave_1: left allmulticast mode [ 111.385843][ T6058] bridge_slave_1: left promiscuous mode [ 111.393895][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.405171][ T6058] bridge_slave_0: left allmulticast mode [ 111.411161][ T6058] bridge_slave_0: left promiscuous mode [ 111.417079][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.761672][ T6058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.767465][ T5850] Bluetooth: hci1: command tx timeout [ 111.781056][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.791751][ T6058] bond0 (unregistering): Released all slaves [ 111.883600][ T7378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.919900][ T7369] lo speed is unknown, defaulting to 1000 [ 111.928707][ T6058] tipc: Disabling bearer [ 111.936564][ T6058] tipc: Left network mode [ 111.973451][ T7369] lo speed is unknown, defaulting to 1000 [ 111.996192][ T7378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.110776][ T7378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.208353][ T7378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.334633][ T6058] hsr_slave_0: left promiscuous mode [ 112.341014][ T6058] hsr_slave_1: left promiscuous mode [ 112.350187][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.358919][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.368063][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.375615][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.392709][ T6058] veth1_macvtap: left promiscuous mode [ 112.400018][ T6058] veth0_macvtap: left promiscuous mode [ 112.697311][ T6058] team0 (unregistering): Port device team_slave_1 removed [ 112.735007][ T6058] team0 (unregistering): Port device team_slave_0 removed [ 113.078182][ T7392] lo speed is unknown, defaulting to 1000 [ 113.089715][ T7392] lo speed is unknown, defaulting to 1000 [ 113.110804][ T7363] chnl_net:caif_netlink_parms(): no params data found [ 113.249184][ T7378] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.266591][ T7378] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.332262][ T7398] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 113.349477][ T7378] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.369803][ T7378] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.495768][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.513021][ T3077] IPVS: starting estimator thread 0... [ 113.520786][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.528512][ T7363] bridge_slave_0: entered allmulticast mode [ 113.535618][ T7363] bridge_slave_0: entered promiscuous mode [ 113.547844][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.555169][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.572773][ T7363] bridge_slave_1: entered allmulticast mode [ 113.586036][ T7363] bridge_slave_1: entered promiscuous mode [ 113.607243][ T7404] IPVS: using max 26 ests per chain, 62400 per kthread [ 113.634145][ T7406] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 113.650176][ T7406] batman_adv: batadv0: Adding interface: gretap1 [ 113.651232][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 113.656678][ T7406] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.692094][ T7406] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 113.852613][ T5850] Bluetooth: hci1: command tx timeout [ 113.871865][ T7363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.892312][ T6058] IPVS: stop unused estimator thread 0... [ 113.898361][ T7363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.949396][ T7363] team0: Port device team_slave_0 added [ 113.962990][ T7363] team0: Port device team_slave_1 added [ 114.002610][ T7413] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.014734][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.022976][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.049406][ T7363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.071084][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.078549][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.104702][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.113975][ T7363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.225690][ T7363] hsr_slave_0: entered promiscuous mode [ 114.234234][ T7363] hsr_slave_1: entered promiscuous mode [ 114.249474][ T7363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.267767][ T7363] Cannot create hsr debugfs directory [ 114.363461][ T7423] lo speed is unknown, defaulting to 1000 [ 114.388279][ T7423] lo speed is unknown, defaulting to 1000 [ 114.442257][ T7429] x_tables: unsorted underflow at hook 3 [ 114.608012][ T7432] netlink: 112 bytes leftover after parsing attributes in process `syz.3.366'. [ 114.905549][ T7363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.959398][ T7363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.980990][ T7363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.994052][ T7363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.124767][ T7363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.131518][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 115.158206][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.170677][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.177852][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.197840][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.205033][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.289902][ T7363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.520182][ T7363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.595373][ T7363] veth0_vlan: entered promiscuous mode [ 115.614773][ T7363] veth1_vlan: entered promiscuous mode [ 115.621548][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'. [ 115.668446][ T7363] veth0_macvtap: entered promiscuous mode [ 115.679361][ T7363] veth1_macvtap: entered promiscuous mode [ 115.707679][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.725566][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.744998][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.760432][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.773417][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.784782][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.796075][ T7363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.810617][ T7363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.820919][ T7363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.834578][ T7363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.927849][ T5850] Bluetooth: hci1: command tx timeout [ 115.945394][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.959993][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.986797][ T6038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.000542][ T6038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.098554][ T7475] netlink: 'syz.3.381': attribute type 39 has an invalid length. [ 116.111477][ T7476] netlink: 'syz.3.381': attribute type 39 has an invalid length. [ 116.167232][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 116.456984][ T7479] lo speed is unknown, defaulting to 1000 [ 116.464431][ T7479] lo speed is unknown, defaulting to 1000 [ 116.486830][ T7483] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 116.514122][ T7483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.531339][ T7483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.541483][ T7483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.559312][ T7483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.820637][ T7496] syz.2.386 (7496) used greatest stack depth: 18192 bytes left [ 116.926429][ T7503] Cannot find add_set index 2 as target [ 116.983493][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 117.129662][ T7515] netlink: 'syz.2.390': attribute type 10 has an invalid length. [ 117.138394][ T7515] bridge0: port 3(team0) entered blocking state [ 117.145407][ T7515] bridge0: port 3(team0) entered disabled state [ 117.169381][ T7515] bridge0: port 3(team0) entered blocking state [ 117.176699][ T7515] bridge0: port 3(team0) entered forwarding state [ 117.207301][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 117.520100][ T7547] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 117.539818][ T7547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.680631][ T5983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.708573][ T7552] xt_nfacct: accounting object `syz1' does not exists [ 117.833028][ T7558] lo speed is unknown, defaulting to 1000 [ 117.842047][ T7558] lo speed is unknown, defaulting to 1000 [ 118.247239][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 118.249023][ T7569] lo speed is unknown, defaulting to 1000 [ 118.278254][ T7569] lo speed is unknown, defaulting to 1000 [ 118.552557][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.565150][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.597457][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.598107][ T7588] openvswitch: netlink: Message has 12 unknown bytes. [ 118.643508][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.659225][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.667636][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.729717][ T7584] lo speed is unknown, defaulting to 1000 [ 118.736496][ T7584] lo speed is unknown, defaulting to 1000 [ 119.016334][ T7584] chnl_net:caif_netlink_parms(): no params data found [ 119.287234][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 119.349177][ T5983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.370681][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.378226][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.385679][ T7584] bridge_slave_0: entered allmulticast mode [ 119.394625][ T7584] bridge_slave_0: entered promiscuous mode [ 119.404219][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.412941][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.420887][ T7584] bridge_slave_1: entered allmulticast mode [ 119.428406][ T7584] bridge_slave_1: entered promiscuous mode [ 119.463942][ T5983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.615843][ T5983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.665717][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.673202][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 119.695719][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.781841][ T7584] team0: Port device team_slave_0 added [ 119.799819][ T7584] team0: Port device team_slave_1 added [ 119.856517][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 119.952845][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.974691][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.031497][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.063924][ T7650] netlink: 'syz.1.424': attribute type 10 has an invalid length. [ 120.271425][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.278892][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.309356][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.327260][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 120.385789][ T7667] openvswitch: netlink: Flow key attr not present in new flow. [ 120.402647][ T5983] bridge_slave_1: left allmulticast mode [ 120.413066][ T5983] bridge_slave_1: left promiscuous mode [ 120.419374][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.432933][ T5983] bridge_slave_0: left allmulticast mode [ 120.441088][ T5983] bridge_slave_0: left promiscuous mode [ 120.448524][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.729167][ T5850] Bluetooth: hci1: command tx timeout [ 120.872442][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.884501][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.895783][ T5983] bond0 (unregistering): Released all slaves [ 121.043675][ T7584] hsr_slave_0: entered promiscuous mode [ 121.046858][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 121.061914][ T7584] hsr_slave_1: entered promiscuous mode [ 121.069716][ T7584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.079502][ T7584] Cannot create hsr debugfs directory [ 121.144922][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 121.367185][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 121.517484][ T7696] ieee802154 phy0 wpan0: encryption failed: -90 [ 121.618949][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.626486][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.718997][ T7677] batman_adv: batadv0: Interface deactivated: dummy0 [ 122.113230][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.152070][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.333753][ T7677] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.347088][ T7677] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.355484][ T7677] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.368836][ T7677] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.417218][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 122.494309][ T7671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.502463][ T7671] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.511885][ T7671] batman_adv: batadv0: Interface activated: dummy0 [ 122.521067][ T7671] batadv0: mtu less than device minimum [ 122.529228][ T7671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.541817][ T7671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.553417][ T7671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.564962][ T7671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.576534][ T7671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.589108][ T7671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.600811][ T7671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.613297][ T7671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.669577][ T7706] nbd: must specify a size in bytes for the device [ 122.807196][ T5850] Bluetooth: hci1: command tx timeout [ 122.860266][ T7718] netlink: 9 bytes leftover after parsing attributes in process `syz.2.439'. [ 122.918349][ T5983] hsr_slave_0: left promiscuous mode [ 122.924425][ T5983] hsr_slave_1: left promiscuous mode [ 122.936563][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.946051][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.965998][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.981126][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.023159][ T5983] veth1_macvtap: left promiscuous mode [ 123.030456][ T5983] veth0_macvtap: left promiscuous mode [ 123.036411][ T5983] veth1_vlan: left promiscuous mode [ 123.043707][ T5983] veth0_vlan: left promiscuous mode [ 123.118730][ T7738] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.437'. [ 123.141325][ T7737] netlink: 92 bytes leftover after parsing attributes in process `syz.1.444'. [ 123.571734][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 123.616023][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 124.041550][ T7718] gretap0: entered promiscuous mode [ 124.055764][ T7733] nicvf0: tun_chr_ioctl cmd 1074025676 [ 124.062282][ T7733] nicvf0: owner set to 0 [ 124.094956][ T7745] bridge0: port 1(veth0_to_bridge) entered blocking state [ 124.116759][ T7745] bridge0: port 1(veth0_to_bridge) entered disabled state [ 124.151130][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 124.167362][ T7745] veth0_to_bridge: entered allmulticast mode [ 124.174474][ T7745] veth0_to_bridge: entered promiscuous mode [ 124.376569][ T7752] can: request_module (can-proto-3) failed. [ 124.402064][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 124.804588][ T7779] netlink: 92 bytes leftover after parsing attributes in process `syz.2.454'. [ 124.820759][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.454'. [ 124.838146][ T7782] Bluetooth: MGMT ver 1.23 [ 124.890381][ T5850] Bluetooth: hci1: command tx timeout [ 125.118916][ T7794] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 125.171608][ T7584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.193033][ T7584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.220869][ T7584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.270286][ T7584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.429277][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.464062][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.485956][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.493218][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.520451][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.527639][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.759982][ T7824] lo speed is unknown, defaulting to 1000 [ 125.799717][ T7824] lo speed is unknown, defaulting to 1000 [ 125.924310][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.344883][ T7840] batman_adv: batadv0: Interface deactivated: dummy0 [ 126.370483][ T7840] vxlan0: left allmulticast mode [ 126.472058][ T7845] syz.3.471: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.495985][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.3.471 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 126.496012][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 126.496027][ T7845] Call Trace: [ 126.496033][ T7845] [ 126.496041][ T7845] dump_stack_lvl+0x241/0x360 [ 126.496075][ T7845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.496093][ T7845] ? __pfx__printk+0x10/0x10 [ 126.496115][ T7845] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 126.496135][ T7845] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 126.496158][ T7845] warn_alloc+0x278/0x410 [ 126.496180][ T7845] ? __pfx_warn_alloc+0x10/0x10 [ 126.496204][ T7845] ? xp_create_and_assign_umem+0x17b/0xc50 [ 126.496221][ T7845] ? __get_vm_area_node+0x1c8/0x2d0 [ 126.496243][ T7845] ? __get_vm_area_node+0x25c/0x2d0 [ 126.496272][ T7845] __vmalloc_node_range_noprof+0x62f/0x1380 [ 126.496296][ T7845] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 126.496341][ T7845] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.496365][ T7845] ? rcu_is_watching+0x15/0xb0 [ 126.496384][ T7845] ? trace_kmalloc+0x1f/0xd0 [ 126.496402][ T7845] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 126.496421][ T7845] ? __kvmalloc_node_noprof+0x72/0x190 [ 126.496447][ T7845] __kvmalloc_node_noprof+0x142/0x190 [ 126.496470][ T7845] ? xp_create_and_assign_umem+0x17b/0xc50 [ 126.496489][ T7845] xp_create_and_assign_umem+0x17b/0xc50 [ 126.496520][ T7845] ? dev_get_by_index+0x23/0x2d0 [ 126.496548][ T7845] xsk_bind+0x388/0xfe0 [ 126.496579][ T7845] __sys_bind+0x1e4/0x290 [ 126.496601][ T7845] ? __pfx___sys_bind+0x10/0x10 [ 126.496632][ T7845] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.496662][ T7845] ? do_syscall_64+0x100/0x230 [ 126.496686][ T7845] __x64_sys_bind+0x7a/0x90 [ 126.496705][ T7845] do_syscall_64+0xf3/0x230 [ 126.496720][ T7845] ? clear_bhb_loop+0x35/0x90 [ 126.496745][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.496765][ T7845] RIP: 0033:0x7f9ad898cde9 [ 126.496788][ T7845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.496801][ T7845] RSP: 002b:00007f9ad67d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 126.496819][ T7845] RAX: ffffffffffffffda RBX: 00007f9ad8ba6080 RCX: 00007f9ad898cde9 [ 126.496831][ T7845] RDX: 0000000000000010 RSI: 0000400000000100 RDI: 0000000000000004 [ 126.496842][ T7845] RBP: 00007f9ad8a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.496852][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.496861][ T7845] R13: 0000000000000000 R14: 00007f9ad8ba6080 R15: 00007ffefc40d438 [ 126.496889][ T7845] [ 126.496895][ T7845] Mem-Info: [ 126.722198][ T7851] sctp: [Deprecated]: syz.1.472 (pid 7851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.722198][ T7851] Use struct sctp_sack_info instead [ 126.747232][ T7845] active_anon:4759 inactive_anon:0 isolated_anon:0 [ 126.747232][ T7845] active_file:1525 inactive_file:38320 isolated_file:0 [ 126.747232][ T7845] unevictable:768 dirty:237 writeback:0 [ 126.747232][ T7845] slab_reclaimable:10751 slab_unreclaimable:96373 [ 126.747232][ T7845] mapped:29486 shmem:1434 pagetables:754 [ 126.747232][ T7845] sec_pagetables:0 bounce:0 [ 126.747232][ T7845] kernel_misc_reclaimable:0 [ 126.747232][ T7845] free:1315926 free_pcp:1358 free_cma:0 [ 126.833715][ T7845] Node 0 active_anon:19036kB inactive_anon:0kB active_file:6100kB inactive_file:153204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117944kB dirty:944kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11476kB pagetables:3016kB sec_pagetables:0kB all_unreclaimable? no [ 126.872679][ T7845] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 126.904538][ T7845] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.936855][ T7845] lowmem_reserve[]: 0 2490 2490 0 0 [ 126.942831][ T7845] Node 0 DMA32 free:1341408kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:18996kB inactive_anon:0kB active_file:6100kB inactive_file:152888kB unevictable:1536kB writepending:940kB present:3129332kB managed:2549864kB mlocked:0kB bounce:0kB free_pcp:5312kB local_pcp:452kB free_cma:0kB [ 126.981481][ T7845] lowmem_reserve[]: 0 0 0 0 0 [ 126.986285][ T7845] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 126.996089][ T5850] Bluetooth: hci1: command tx timeout [ 127.013519][ T7845] lowmem_reserve[]: 0 0 0 0 0 [ 127.023324][ T7845] Node 1 Normal free:3906236kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.054218][ T7845] lowmem_reserve[]: 0 0 0 0 0 [ 127.059139][ T7845] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.072277][ T7845] Node 0 DMA32: 16*4kB (UME) 162*8kB (ME) 205*16kB (ME) 110*32kB (ME) 66*64kB (UME) 37*128kB (ME) 28*256kB (M) 34*512kB (UM) 47*1024kB (UME) 11*2048kB (UM) 300*4096kB (M) = 1341152kB [ 127.091172][ T7845] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.103502][ T7845] Node 1 Normal: 181*4kB (UM) 45*8kB (UME) 34*16kB (UME) 199*32kB (UME) 86*64kB (UME) 36*128kB (UME) 18*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 944*4096kB (M) = 3906236kB [ 127.122493][ T7845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.132184][ T7845] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.141862][ T7845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.167177][ T7845] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.176631][ T7845] 41279 total pagecache pages [ 127.197686][ T7845] 0 pages in swap cache [ 127.201920][ T7845] Free swap = 124996kB [ 127.206170][ T7845] Total swap = 124996kB [ 127.247097][ T7845] 2097051 pages RAM [ 127.251007][ T7845] 0 pages HighMem/MovableOnly [ 127.255721][ T7845] 427863 pages reserved [ 127.277146][ T7845] 0 pages cma reserved [ 127.419326][ T7584] veth0_vlan: entered promiscuous mode [ 127.462175][ T7584] veth1_vlan: entered promiscuous mode [ 127.607213][ C1] net_ratelimit: 25 callbacks suppressed [ 127.607232][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 127.621392][ T7584] veth0_macvtap: entered promiscuous mode [ 127.640750][ T7863] syz_tun: entered allmulticast mode [ 127.647132][ T7866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'. [ 127.679392][ T7584] veth1_macvtap: entered promiscuous mode [ 127.706028][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.728177][ T7863] syz_tun: left allmulticast mode [ 127.742010][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.761672][ T7584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.772562][ T7584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.785108][ T7584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.798963][ T7584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.914629][ T6047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.931242][ T6047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.944867][ T7875] netlink: 'syz.4.479': attribute type 10 has an invalid length. [ 127.969771][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.973411][ T7875] netlink: 'syz.4.479': attribute type 10 has an invalid length. [ 127.979485][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.023442][ T7875] netlink: 2 bytes leftover after parsing attributes in process `syz.4.479'. [ 128.154801][ T7885] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.479'. [ 128.251236][ T7889] netlink: 'syz.1.483': attribute type 8 has an invalid length. [ 128.302986][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 128.657224][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 128.893360][ T6056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.091804][ T7931] netlink: 'syz.1.492': attribute type 4 has an invalid length. [ 129.150552][ T7935] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 129.204059][ T7935] netlink: 224 bytes leftover after parsing attributes in process `syz.2.493'. [ 129.297216][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 129.361822][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 129.404280][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 129.456658][ T6056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.683363][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.697249][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 129.698746][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.714166][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.729363][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.738166][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.745482][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.831781][ T6056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.878143][ T7982] trusted_key: syz.4.504 sent an empty control message without MSG_MORE. [ 129.911548][ T7979] netlink: 'syz.4.504': attribute type 2 has an invalid length. [ 129.939416][ T7970] lo speed is unknown, defaulting to 1000 [ 129.958370][ T7970] lo speed is unknown, defaulting to 1000 [ 129.980030][ T7979] Tq: entered promiscuous mode [ 130.074784][ T7987] __nla_validate_parse: 1 callbacks suppressed [ 130.074804][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 130.091807][ T7987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 130.135219][ T6056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.237666][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 130.265003][ T8001] netlink: 'syz.1.511': attribute type 21 has an invalid length. [ 130.463587][ T6056] bridge_slave_1: left allmulticast mode [ 130.543476][ T6056] bridge_slave_1: left promiscuous mode [ 130.556680][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.600871][ T6056] bridge_slave_0: left allmulticast mode [ 130.606671][ T6056] bridge_slave_0: left promiscuous mode [ 130.617391][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.654683][ T8020] netlink: 252 bytes leftover after parsing attributes in process `syz.2.515'. [ 130.682933][ T8020] openvswitch: netlink: Flow key attr not present in new flow. [ 130.727125][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 130.842560][ T8026] Bluetooth: MGMT ver 1.23 [ 131.399988][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.412724][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.425782][ T6056] bond0 (unregistering): Released all slaves [ 131.440539][ T8024] netlink: 'syz.4.517': attribute type 29 has an invalid length. [ 131.453481][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.518'. [ 131.464615][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.518'. [ 131.476713][ T8047] netlink: 'syz.1.521': attribute type 12 has an invalid length. [ 131.516366][ T8035] netlink: 'syz.4.517': attribute type 29 has an invalid length. [ 131.545440][ T7970] chnl_net:caif_netlink_parms(): no params data found [ 131.766502][ T8052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.522'. [ 131.775548][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 131.783701][ T5850] Bluetooth: hci1: command tx timeout [ 132.007704][ T8069] ieee802154 phy1 wpan1: encryption failed: -90 [ 132.171916][ T8076] lo speed is unknown, defaulting to 1000 [ 132.266184][ T6056] hsr_slave_0: left promiscuous mode [ 132.282952][ T6056] hsr_slave_1: left promiscuous mode [ 132.290689][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.301709][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.333933][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.345134][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.474622][ T6056] veth1_macvtap: left promiscuous mode [ 132.505514][ T6056] veth0_macvtap: left promiscuous mode [ 132.583828][ T6056] veth1_vlan: left promiscuous mode [ 132.589475][ T6056] veth0_vlan: left promiscuous mode [ 132.613885][ T8095] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.817117][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 133.218637][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.275007][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 133.326396][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 133.756042][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.756058][ T8076] lo speed is unknown, defaulting to 1000 [ 133.769469][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.776672][ T7970] bridge_slave_0: entered allmulticast mode [ 133.783543][ T7970] bridge_slave_0: entered promiscuous mode [ 133.798955][ T8112] validate_nla: 1 callbacks suppressed [ 133.798973][ T8112] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 133.843288][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.850748][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 133.857275][ T5145] Bluetooth: hci1: command tx timeout [ 133.875443][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.883179][ T7970] bridge_slave_1: entered allmulticast mode [ 133.900293][ T7970] bridge_slave_1: entered promiscuous mode [ 133.912148][ T8090] lo speed is unknown, defaulting to 1000 [ 133.976884][ T8090] lo speed is unknown, defaulting to 1000 [ 133.999960][ T7970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.037954][ T7970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.226853][ T7970] team0: Port device team_slave_0 added [ 134.253166][ T7970] team0: Port device team_slave_1 added [ 134.349479][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.361559][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.389142][ T7970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.409046][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.416173][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.442452][ T7970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.585315][ T7970] hsr_slave_0: entered promiscuous mode [ 134.607620][ T7970] hsr_slave_1: entered promiscuous mode [ 134.617673][ T7970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.636375][ T7970] Cannot create hsr debugfs directory [ 134.761810][ T8145] lo speed is unknown, defaulting to 1000 [ 134.788375][ T8145] lo speed is unknown, defaulting to 1000 [ 134.887556][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 135.510666][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 135.573795][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 135.633609][ T7970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.678650][ T7970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.815973][ T7970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.863446][ T7970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.927119][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 135.927234][ T5145] Bluetooth: hci1: command 0x040f tx timeout [ 136.006342][ T8191] netlink: 104 bytes leftover after parsing attributes in process `syz.2.561'. [ 136.022902][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 136.145401][ T7970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.181742][ T7970] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.205675][ T8198] bridge_tlave_0: renamed from lo (while UP) [ 136.233891][ T8198] bridge_tlave_0: entered promiscuous mode [ 136.243703][ T8198] bridge_tlave_0: entered allmulticast mode [ 136.256412][ T9] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 136.269018][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.276185][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.296941][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.304135][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.321138][ T8200] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.334319][ T8200] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.360721][ T8200] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.375473][ T8200] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.384536][ T8200] geneve2: entered promiscuous mode [ 136.390145][ T8200] geneve2: entered allmulticast mode [ 136.401303][ T8200] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.412754][ T8200] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.424313][ T8200] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.433102][ T8200] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.877399][ T8224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.573'. [ 136.879183][ T8226] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 136.951252][ T7970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.959121][ T8224] xt_CT: No such helper "pptp" [ 136.967354][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 136.987406][ T8231] netlink: 25 bytes leftover after parsing attributes in process `syz.1.573'. [ 137.014312][ T7970] veth0_vlan: entered promiscuous mode [ 137.034338][ T8231] gretap0: entered promiscuous mode [ 137.042007][ T8224] netlink: 5 bytes leftover after parsing attributes in process `syz.1.573'. [ 137.093644][ T7970] veth1_vlan: entered promiscuous mode [ 137.107495][ T8224] 0XD: renamed from gretap0 [ 137.118233][ T8224] 0XD: left promiscuous mode [ 137.123881][ T8224] 0XD: entered allmulticast mode [ 137.165664][ T7970] veth0_macvtap: entered promiscuous mode [ 137.176878][ T7970] veth1_macvtap: entered promiscuous mode [ 137.211741][ T7970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.238915][ T7970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.260854][ T7970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.279957][ T7970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.299121][ T7970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.308394][ T7970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.416846][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.442108][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.489141][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.498069][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.530638][ T8254] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.978644][ T8285] ip6gretap0: entered promiscuous mode [ 137.985722][ T8285] batadv_slave_1: entered promiscuous mode [ 138.007284][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 138.066280][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 138.080948][ T8281] gtp0: entered allmulticast mode [ 138.121496][ T8281] lo speed is unknown, defaulting to 1000 [ 138.132828][ T8281] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 138.491738][ T8309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.594'. [ 138.551713][ T8309] netlink: 'syz.2.594': attribute type 2 has an invalid length. [ 138.618686][ T8311] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 138.657948][ T8306] IPVS: length: 1701314577 != 422621984 [ 138.896220][ T6038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.047094][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 139.324198][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 139.349525][ T8320] gtp0: entered promiscuous mode [ 139.364879][ T8320] gtp0: entered allmulticast mode [ 139.616816][ T8329] netlink: 'syz.2.603': attribute type 10 has an invalid length. [ 139.624788][ T6038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.669716][ T8329] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 139.714870][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.725344][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.734343][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.742636][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.750502][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.758151][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.797421][ T8333] lo speed is unknown, defaulting to 1000 [ 139.801589][ T8336] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.804088][ T8333] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 139.920221][ T6038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.984071][ T8341] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 140.007468][ T6038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.017211][ T8341] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 140.087127][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 140.089022][ T8333] chnl_net:caif_netlink_parms(): no params data found [ 140.165698][ T8354] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.174389][ T8354] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.183920][ T8354] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.192415][ T8354] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.368471][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.391765][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.399907][ T8333] bridge_slave_0: entered allmulticast mode [ 140.413939][ T8333] bridge_slave_0: entered promiscuous mode [ 140.421690][ T6038] bridge_slave_1: left allmulticast mode [ 140.427834][ T6038] bridge_slave_1: left promiscuous mode [ 140.434776][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.447734][ T6038] bridge_slave_0: left allmulticast mode [ 140.454609][ T6038] bridge_slave_0: left promiscuous mode [ 140.460700][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.710803][ T8378] __nla_validate_parse: 7 callbacks suppressed [ 140.710821][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 141.069415][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.081611][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.122765][ T6038] bond0 (unregistering): Released all slaves [ 141.128941][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 141.190497][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.197783][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.205021][ T8333] bridge_slave_1: entered allmulticast mode [ 141.225008][ T8333] bridge_slave_1: entered promiscuous mode [ 141.449263][ T8383] ipt_rpfilter: unknown options [ 141.479128][ T8382] lo speed is unknown, defaulting to 1000 [ 141.487504][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.508706][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.531101][ T8382] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 141.602196][ T8389] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 141.620558][ T8389] netlink: 'syz.4.615': attribute type 39 has an invalid length. [ 141.677564][ T8333] team0: Port device team_slave_0 added [ 141.713520][ T8333] team0: Port device team_slave_1 added [ 141.720357][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 141.729499][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 141.830617][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.846286][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.872708][ T5145] Bluetooth: hci1: command tx timeout [ 141.886973][ T8333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.912373][ T6038] hsr_slave_0: left promiscuous mode [ 141.921995][ T6038] hsr_slave_1: left promiscuous mode [ 141.930101][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.937981][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.946877][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.955132][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.981895][ T6038] veth1_macvtap: left promiscuous mode [ 141.987774][ T6038] veth0_macvtap: left promiscuous mode [ 141.993941][ T6038] veth1_vlan: left promiscuous mode [ 141.999493][ T6038] veth0_vlan: left promiscuous mode [ 142.167346][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 142.588401][ T6038] team0 (unregistering): Port device team_slave_1 removed [ 142.630562][ T6038] team0 (unregistering): Port device team_slave_0 removed [ 143.001102][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.008210][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.036722][ T8333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.076530][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 143.086063][ T8420] tc_dump_action: action bad kind [ 143.127307][ T8333] hsr_slave_0: entered promiscuous mode [ 143.139534][ T8333] hsr_slave_1: entered promiscuous mode [ 143.149162][ T8333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.167500][ T8333] Cannot create hsr debugfs directory [ 143.207184][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 143.509570][ T8440] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 143.597549][ T8436] lo speed is unknown, defaulting to 1000 [ 143.641298][ T8436] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 143.880103][ T8450] netlink: 332 bytes leftover after parsing attributes in process `syz.3.632'. [ 143.889459][ T8450] netlink: 104 bytes leftover after parsing attributes in process `syz.3.632'. [ 143.901150][ T8450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.632'. [ 143.906462][ T8455] netlink: 'syz.4.633': attribute type 21 has an invalid length. [ 143.927860][ T5145] Bluetooth: hci1: command tx timeout [ 143.935583][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.633'. [ 143.949114][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 144.082123][ T8333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.107368][ T8461] netlink: 68 bytes leftover after parsing attributes in process `syz.3.635'. [ 144.116475][ T8333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.135538][ T8333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.156346][ T8333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.247188][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 144.437468][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.514679][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.540302][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.547531][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.582915][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.590105][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.025900][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.123411][ T8333] veth0_vlan: entered promiscuous mode [ 145.212173][ T8333] veth1_vlan: entered promiscuous mode [ 145.287218][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 145.382840][ T8333] veth0_macvtap: entered promiscuous mode [ 145.424154][ T8333] veth1_macvtap: entered promiscuous mode [ 145.489278][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.524213][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.600529][ T8333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.645578][ T8333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.668197][ T8333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.676944][ T8333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.786373][ T8531] __nla_validate_parse: 3 callbacks suppressed [ 145.786391][ T8531] netlink: 60 bytes leftover after parsing attributes in process `syz.4.650'. [ 145.905568][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.967984][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.011683][ T5145] Bluetooth: hci1: command tx timeout [ 146.116660][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.148213][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.254548][ T8556] netlink: 468 bytes leftover after parsing attributes in process `syz.2.653'. [ 146.327219][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 146.776015][ T8576] x_tables: duplicate underflow at hook 1 [ 146.823575][ T8576] lo speed is unknown, defaulting to 1000 [ 146.838421][ T8576] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 146.865664][ T8583] netlink: 'syz.2.662': attribute type 1 has an invalid length. [ 146.907553][ T8582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.662'. [ 147.065154][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'. [ 147.095723][ T8586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.663'. [ 147.239231][ T8595] netlink: 'syz.1.666': attribute type 4 has an invalid length. [ 147.367109][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 147.557385][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 147.792765][ T6058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.379701][ T6058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.407172][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.428566][ T8520] Set syz1 is full, maxelem 65536 reached [ 148.454783][ T6058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.603475][ T6058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.652113][ T8615] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.661321][ T8615] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.670102][ T8615] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.678931][ T8615] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.854989][ T6058] bridge_slave_1: left allmulticast mode [ 148.871539][ T6058] bridge_slave_1: left promiscuous mode [ 148.884281][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.909695][ T6058] bridge_slave_0: left allmulticast mode [ 148.923193][ T6058] bridge_slave_0: left promiscuous mode [ 148.929876][ T8630] netlink: 332 bytes leftover after parsing attributes in process `syz.2.676'. [ 148.944413][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.953027][ T8630] netlink: 104 bytes leftover after parsing attributes in process `syz.2.676'. [ 148.970929][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.676'. [ 149.055028][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.066883][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.082773][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.093209][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.102125][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.109557][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.449138][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 149.826035][ T6058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.837990][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.852498][ T6058] bond0 (unregistering): Released all slaves [ 149.995628][ T8635] lo speed is unknown, defaulting to 1000 [ 150.018853][ T8635] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 150.024193][ T8636] lo speed is unknown, defaulting to 1000 [ 150.102708][ T8630] lo speed is unknown, defaulting to 1000 [ 150.117422][ T8636] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 150.210386][ T8630] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 150.308242][ T8650] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 150.330579][ T8650] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 150.360125][ T6058] hsr_slave_0: left promiscuous mode [ 150.387315][ T6058] hsr_slave_1: left promiscuous mode [ 150.398184][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.412354][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.421816][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.433634][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.458700][ T6058] veth1_macvtap: left promiscuous mode [ 150.464273][ T6058] veth0_macvtap: left promiscuous mode [ 150.469930][ T6058] veth1_vlan: left promiscuous mode [ 150.475181][ T6058] veth0_vlan: left promiscuous mode [ 150.487708][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 150.564126][ T8655] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 150.951087][ T6058] team0 (unregistering): Port device team_slave_1 removed [ 150.990763][ T6058] team0 (unregistering): Port device team_slave_0 removed [ 151.208856][ T5850] Bluetooth: hci1: command tx timeout [ 151.395881][ T8650] lo speed is unknown, defaulting to 1000 [ 151.476282][ T8650] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 151.537136][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 151.677367][ T8636] chnl_net:caif_netlink_parms(): no params data found [ 151.892665][ T8636] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.908386][ T8636] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.916693][ T8636] bridge_slave_0: entered allmulticast mode [ 151.924262][ T8636] bridge_slave_0: entered promiscuous mode [ 151.934564][ T8636] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.942588][ T8636] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.950115][ T8636] bridge_slave_1: entered allmulticast mode [ 151.957368][ T8636] bridge_slave_1: entered promiscuous mode [ 152.050072][ T8636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.069988][ T8636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.206331][ T8636] team0: Port device team_slave_0 added [ 152.226796][ T8636] team0: Port device team_slave_1 added [ 152.288837][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.296142][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.323179][ T8636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.346360][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.360277][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.416406][ T8636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.563358][ T8636] hsr_slave_0: entered promiscuous mode [ 152.569231][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 152.597246][ T8636] hsr_slave_1: entered promiscuous mode [ 152.603572][ T8636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.611931][ T8636] Cannot create hsr debugfs directory [ 152.629008][ T8685] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.285981][ T8713] netlink: 92 bytes leftover after parsing attributes in process `syz.3.694'. [ 153.299923][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.694'. [ 153.302371][ T5850] Bluetooth: hci1: command 0x041b tx timeout [ 153.326228][ T8705] lo speed is unknown, defaulting to 1000 [ 153.362655][ T8705] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 153.485995][ T8720] netlink: 'syz.2.697': attribute type 4 has an invalid length. [ 153.617090][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 153.625293][ T8636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.664464][ T8636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.678648][ T8636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.699160][ T8636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.844264][ T8636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.926789][ T8636] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.936142][ T8731] netlink: 128 bytes leftover after parsing attributes in process `syz.2.699'. [ 153.963928][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.971161][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.039314][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.046890][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.148958][ T8738] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 154.463698][ T8636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.551705][ T8760] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 154.560508][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 154.590357][ T8636] veth0_vlan: entered promiscuous mode [ 154.618043][ T8636] veth1_vlan: entered promiscuous mode [ 154.657261][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 154.661252][ T8636] veth0_macvtap: entered promiscuous mode [ 154.681150][ T8636] veth1_macvtap: entered promiscuous mode [ 154.697276][ T8765] pim6reg1: entered promiscuous mode [ 154.703526][ T8765] pim6reg1: entered allmulticast mode [ 154.874645][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.904713][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.924634][ T8636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.934082][ T8636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.943133][ T8636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.959634][ T8636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.135441][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.157413][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.233497][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.257284][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.367402][ T5145] Bluetooth: hci1: command 0x041b tx timeout [ 155.687188][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 156.737106][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 157.417950][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.466487][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.481179][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.501037][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.520967][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.536937][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.684286][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 157.767132][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 157.813487][ T6038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.884078][ T8841] netlink: 9 bytes leftover after parsing attributes in process `syz.3.726'. [ 157.931143][ T6038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.996700][ T8841] gretap0: entered promiscuous mode [ 158.079775][ T8829] lo speed is unknown, defaulting to 1000 [ 158.103137][ T8829] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 158.320682][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.730'. [ 158.443332][ T8829] chnl_net:caif_netlink_parms(): no params data found [ 158.497865][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.733'. [ 158.574425][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.583323][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.590691][ T8829] bridge_slave_0: entered allmulticast mode [ 158.602508][ T8829] bridge_slave_0: entered promiscuous mode [ 158.684731][ T6038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.705160][ T8884] siw: device registration error -23 [ 158.711337][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.724401][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.732817][ T8829] bridge_slave_1: entered allmulticast mode [ 158.752618][ T8829] bridge_slave_1: entered promiscuous mode [ 158.817174][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 158.912354][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.994747][ T8894] netlink: 'syz.1.736': attribute type 39 has an invalid length. [ 159.035341][ T6038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.086195][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.138163][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.739'. [ 159.148767][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 159.158110][ T8905] Unknown options in mask 1f4 [ 159.162928][ T8905] Unknown options in mask 1f4 [ 159.194128][ T8829] team0: Port device team_slave_0 added [ 159.263323][ T8829] team0: Port device team_slave_1 added [ 159.393676][ T8918] netlink: 'syz.3.740': attribute type 10 has an invalid length. [ 159.401889][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.417285][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.504432][ T8829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.538696][ T8912] lo speed is unknown, defaulting to 1000 [ 159.540447][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.568460][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.609193][ T8930] xt_TCPMSS: Only works on TCP SYN packets [ 159.616586][ T8829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.617531][ T5145] Bluetooth: hci1: command tx timeout [ 159.642785][ T8918] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 159.655447][ T8912] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 159.663440][ T8930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.744'. [ 159.695157][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 159.704148][ T8931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.744'. [ 159.798142][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 159.813495][ T8829] hsr_slave_0: entered promiscuous mode [ 159.845215][ T8829] hsr_slave_1: entered promiscuous mode [ 159.853325][ T8829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.858530][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 159.870047][ T8829] Cannot create hsr debugfs directory [ 159.951273][ T6038] bridge_slave_1: left allmulticast mode [ 159.959389][ T6038] bridge_slave_1: left promiscuous mode [ 159.965158][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.981434][ T6038] bridge_slave_0: left allmulticast mode [ 159.990080][ T6038] bridge_slave_0: left promiscuous mode [ 159.995824][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.492010][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.505259][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.516184][ T6038] bond0 (unregistering): Released all slaves [ 160.885809][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.753'. [ 160.894966][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 160.941671][ T6038] hsr_slave_0: left promiscuous mode [ 160.959230][ T6038] hsr_slave_1: left promiscuous mode [ 160.965823][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.973647][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.984068][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.993718][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.030524][ T6038] veth1_macvtap: left promiscuous mode [ 161.036583][ T6038] veth0_macvtap: left promiscuous mode [ 161.042984][ T6038] veth1_vlan: left promiscuous mode [ 161.063009][ T6038] veth0_vlan: left promiscuous mode [ 161.589823][ T6038] team0 (unregistering): Port device team_slave_1 removed [ 161.642091][ T6038] team0 (unregistering): Port device team_slave_0 removed [ 161.687343][ T5145] Bluetooth: hci1: command 0x041b tx timeout [ 161.927301][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 162.111899][ T8968] 0XD: left allmulticast mode [ 162.135751][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.144415][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.162207][ T8968] batman_adv: batadv0: Interface activated: dummy0 [ 162.169187][ T8968] batadv0: mtu less than device minimum [ 162.175950][ T8968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 162.188126][ T8968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 162.199628][ T8968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 162.211190][ T8968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 162.223784][ T8968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 162.445956][ T8988] netlink: 'syz.1.760': attribute type 4 has an invalid length. [ 162.477659][ T8986] netlink: 'syz.4.759': attribute type 2 has an invalid length. [ 162.500907][ T8994] netlink: 'syz.1.760': attribute type 4 has an invalid length. [ 162.511906][ T8986] netlink: 1 bytes leftover after parsing attributes in process `syz.4.759'. [ 162.795579][ T9007] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 162.823123][ T8829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.844716][ T8829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.856749][ T9008] netlink: 'syz.4.765': attribute type 15 has an invalid length. [ 162.880466][ T8829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.900423][ T9010] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 162.913749][ T9012] netlink: 'syz.2.766': attribute type 39 has an invalid length. [ 162.924784][ T8829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.930139][ T29] audit: type=1107 audit(1739889698.278:3): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='tT,d?a8~1|퇄U'ṅ}mpW(Tq* e˸.C{o;3mNH1Vѧ' [ 163.187148][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.216206][ T8829] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.235452][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.242685][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.302939][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.310131][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.359551][ T9025] vlan4: entered promiscuous mode [ 163.393939][ T9025] ip6gretap0: entered promiscuous mode [ 163.440139][ T9034] __nla_validate_parse: 4 callbacks suppressed [ 163.440157][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.771'. [ 163.573613][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 163.711687][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 163.741288][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 163.768754][ T5145] Bluetooth: hci1: command 0x041b tx timeout [ 163.794074][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 163.804968][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.833009][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 163.851113][ T8829] veth0_vlan: entered promiscuous mode [ 163.853735][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 163.870135][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 163.909670][ T8829] veth1_vlan: entered promiscuous mode [ 163.980669][ T9062] lo speed is unknown, defaulting to 1000 [ 164.007144][ C1] net_ratelimit: 18 callbacks suppressed [ 164.007165][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 164.022376][ T8829] veth0_macvtap: entered promiscuous mode [ 164.044462][ T8829] veth1_macvtap: entered promiscuous mode [ 164.055327][ T9062] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 164.068637][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 164.082307][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.100588][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.189054][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.780'. [ 164.206383][ T8829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.223798][ T8829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.232827][ T8829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.241794][ T8829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.392005][ T9083] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 164.402821][ T9083] NCSI netlink: No device for ifindex 813332851 [ 164.673576][ T9097] netlink: 'syz.4.783': attribute type 9 has an invalid length. [ 164.704642][ T9098] netlink: 'syz.4.783': attribute type 9 has an invalid length. [ 164.870732][ T6038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.903784][ T6038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.945676][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.954234][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.047123][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 165.186870][ T9121] FAULT_INJECTION: forcing a failure. [ 165.186870][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.247187][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.1.790 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 165.247216][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 165.247226][ T9121] Call Trace: [ 165.247232][ T9121] [ 165.247239][ T9121] dump_stack_lvl+0x241/0x360 [ 165.247266][ T9121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.247281][ T9121] ? __pfx__printk+0x10/0x10 [ 165.247302][ T9121] ? snprintf+0xda/0x120 [ 165.247328][ T9121] should_fail_ex+0x40a/0x550 [ 165.247353][ T9121] _copy_to_user+0x31/0xb0 [ 165.247374][ T9121] simple_read_from_buffer+0xca/0x150 [ 165.247398][ T9121] proc_fail_nth_read+0x1e9/0x250 [ 165.247421][ T9121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.247443][ T9121] ? rw_verify_area+0x243/0x630 [ 165.247475][ T9121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.247495][ T9121] vfs_read+0x1f8/0xb40 [ 165.247512][ T9121] ? fdget_pos+0x254/0x320 [ 165.247532][ T9121] ? __pfx___mutex_lock+0x10/0x10 [ 165.247551][ T9121] ? __pfx_vfs_read+0x10/0x10 [ 165.247570][ T9121] ? __fget_files+0x2a/0x410 [ 165.247591][ T9121] ? __fget_files+0x395/0x410 [ 165.247609][ T9121] ? __fget_files+0x2a/0x410 [ 165.247639][ T9121] ksys_read+0x18f/0x2b0 [ 165.247658][ T9121] ? __pfx_ksys_read+0x10/0x10 [ 165.247675][ T9121] ? do_syscall_64+0x100/0x230 [ 165.247698][ T9121] ? do_syscall_64+0xb6/0x230 [ 165.247719][ T9121] do_syscall_64+0xf3/0x230 [ 165.247738][ T9121] ? clear_bhb_loop+0x35/0x90 [ 165.247763][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.247782][ T9121] RIP: 0033:0x7f33f758b7fc [ 165.247798][ T9121] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 165.247812][ T9121] RSP: 002b:00007f33f84c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.247831][ T9121] RAX: ffffffffffffffda RBX: 00007f33f77a5fa0 RCX: 00007f33f758b7fc [ 165.247844][ T9121] RDX: 000000000000000f RSI: 00007f33f84c20a0 RDI: 0000000000000004 [ 165.247854][ T9121] RBP: 00007f33f84c2090 R08: 0000000000000000 R09: 0000000000000000 [ 165.247864][ T9121] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.247875][ T9121] R13: 0000000000000000 R14: 00007f33f77a5fa0 R15: 00007ffdf19d0678 [ 165.247903][ T9121] [ 165.684086][ T9135] pimreg: entered allmulticast mode [ 165.696335][ T9135] pimreg: left allmulticast mode [ 165.957666][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 165.972297][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.983322][ T9160] sctp: [Deprecated]: syz.4.801 (pid 9160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.983322][ T9160] Use struct sctp_sack_info instead [ 165.983837][ T9158] vlan3: entered allmulticast mode [ 166.087146][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 167.127160][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 167.347190][ T6038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.426887][ T6038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.522877][ T6038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.587239][ T6038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.753136][ T6038] bridge_slave_1: left allmulticast mode [ 167.768246][ T9184] netlink: 'syz.2.808': attribute type 11 has an invalid length. [ 167.791859][ T6038] bridge_slave_1: left promiscuous mode [ 167.798082][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.847819][ T6038] bridge_slave_0: left allmulticast mode [ 167.860809][ T6038] bridge_slave_0: left promiscuous mode [ 167.866610][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.167083][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.236276][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.247430][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.264862][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.276887][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.286051][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.300391][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.522603][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.533620][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.543709][ T6038] bond0 (unregistering): Released all slaves [ 168.582312][ T9211] lo speed is unknown, defaulting to 1000 [ 168.594532][ T9211] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 168.685612][ T9216] lo speed is unknown, defaulting to 1000 [ 168.760725][ T9216] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 168.795971][ T9227] __nla_validate_parse: 7 callbacks suppressed [ 168.796051][ T9227] netlink: 96 bytes leftover after parsing attributes in process `syz.1.817'. [ 168.834747][ T9227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 169.106456][ T6038] hsr_slave_0: left promiscuous mode [ 169.121919][ T6038] hsr_slave_1: left promiscuous mode [ 169.128552][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.136020][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.171000][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.189972][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.207273][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.246870][ T6038] veth1_macvtap: left promiscuous mode [ 169.262421][ T6038] veth0_macvtap: left promiscuous mode [ 169.272729][ T6038] veth1_vlan: left promiscuous mode [ 169.286169][ T6038] veth0_vlan: left promiscuous mode [ 169.994418][ T6038] team0 (unregistering): Port device team_slave_1 removed [ 170.037509][ T6038] team0 (unregistering): Port device team_slave_0 removed [ 170.247182][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.417329][ T5145] Bluetooth: hci1: command tx timeout [ 170.443237][ T9258] lo speed is unknown, defaulting to 1000 [ 170.465995][ T9274] lo speed is unknown, defaulting to 1000 [ 170.471837][ T9258] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 170.507961][ T9274] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 170.593726][ T9216] chnl_net:caif_netlink_parms(): no params data found [ 170.758418][ T9294] lo: entered allmulticast mode [ 170.763792][ T9294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.781272][ T9293] xt_CT: No such helper "netbios-ns" [ 170.899572][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.913716][ T9216] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.926477][ T9216] bridge_slave_0: entered allmulticast mode [ 170.936247][ T9307] sctp: [Deprecated]: syz.3.836 (pid 9307) Use of int in max_burst socket option. [ 170.936247][ T9307] Use struct sctp_assoc_value instead [ 170.951953][ T9216] bridge_slave_0: entered promiscuous mode [ 170.961442][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.968744][ T9216] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.976191][ T9216] bridge_slave_1: entered allmulticast mode [ 170.983401][ T9216] bridge_slave_1: entered promiscuous mode [ 171.071913][ T9216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.112620][ T9310] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.148594][ T9216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.208229][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 171.220451][ T9310] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.274941][ T9216] team0: Port device team_slave_0 added [ 171.287100][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 171.301944][ T9216] team0: Port device team_slave_1 added [ 171.309635][ T9316] netlink: 'syz.1.841': attribute type 2 has an invalid length. [ 171.325370][ T9310] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.454258][ T9310] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.480704][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.507237][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.567099][ T9216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.627336][ T9321] lo speed is unknown, defaulting to 1000 [ 171.634596][ T9321] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 171.680950][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 171.691699][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.709189][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.736296][ T9216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.793798][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 171.825950][ T9310] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.841313][ T9310] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.920478][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 171.948810][ T9310] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.017739][ T9310] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.075800][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 172.158562][ T9216] hsr_slave_0: entered promiscuous mode [ 172.164783][ T9216] hsr_slave_1: entered promiscuous mode [ 172.173254][ T9216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.185138][ T9216] Cannot create hsr debugfs directory [ 172.337187][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 172.439766][ T9366] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 172.492004][ T5145] Bluetooth: hci1: command tx timeout [ 172.645214][ T9372] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 172.917218][ T9216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.918420][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 172.956640][ T9390] macvlan6: entered promiscuous mode [ 172.964895][ T9390] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 172.975003][ T9216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.996871][ T9216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.019021][ T9216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.189650][ T9216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.190050][ T9403] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 173.230633][ T9216] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.261939][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'. [ 173.281699][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.287725][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 173.288919][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.310854][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.318083][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.330540][ T9406] lo speed is unknown, defaulting to 1000 [ 173.337807][ T9406] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 173.367224][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.942746][ T9216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.945364][ T9425] netlink: 'syz.1.867': attribute type 12 has an invalid length. [ 174.065511][ T9216] veth0_vlan: entered promiscuous mode [ 174.125992][ T9216] veth1_vlan: entered promiscuous mode [ 174.146329][ T9438] xt_l2tp: unknown flags: 10 [ 174.235271][ T9216] veth0_macvtap: entered promiscuous mode [ 174.281844][ T9216] veth1_macvtap: entered promiscuous mode [ 174.407181][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 174.475646][ T9216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.495352][ T9216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.510632][ T9216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.523478][ T9216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.534178][ T9216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.552783][ T9216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.567397][ T5145] Bluetooth: hci1: command tx timeout [ 174.623904][ T9455] netlink: 'syz.1.874': attribute type 6 has an invalid length. [ 174.665665][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.684811][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.762793][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.783313][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.844738][ T9460] __nla_validate_parse: 1 callbacks suppressed [ 174.844756][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 174.964866][ T9468] sit0: entered promiscuous mode [ 174.972509][ T9468] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 175.044288][ T9468] netlink: 1 bytes leftover after parsing attributes in process `syz.3.876'. [ 175.139532][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 175.203868][ T9478] netlink: 'syz.1.882': attribute type 10 has an invalid length. [ 175.240908][ T9478] team0: Port device wlan1 added [ 175.241849][ T9481] netlink: 'syz.3.884': attribute type 10 has an invalid length. [ 175.285119][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 175.308086][ T9481] bridge0: port 2(ip6gretap0) entered blocking state [ 175.318209][ T9481] bridge0: port 2(ip6gretap0) entered disabled state [ 175.325149][ T9481] ip6gretap0: entered allmulticast mode [ 175.345417][ T9481] ip6gretap0: entered promiscuous mode [ 175.412808][ T9488] syz.2.883 uses old SIOCAX25GETINFO [ 175.457289][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.502208][ T9491] netlink: 112 bytes leftover after parsing attributes in process `syz.3.886'. [ 175.518852][ T9494] netlink: 'syz.4.887': attribute type 4 has an invalid length. [ 176.165898][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 176.455804][ T6056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.487163][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 177.035770][ T6056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.102746][ T6056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.166064][ T6056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.259627][ T6056] bridge_slave_1: left allmulticast mode [ 177.265325][ T6056] bridge_slave_1: left promiscuous mode [ 177.271736][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.281394][ T6056] bridge_slave_0: left allmulticast mode [ 177.287591][ T6056] bridge_slave_0: left promiscuous mode [ 177.293261][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.471486][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 177.527150][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 177.737556][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.750359][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.763784][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.764099][ T6056] bond0 (unregistering): Released all slaves [ 177.779105][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.788282][ T9531] netlink: 'syz.3.896': attribute type 2 has an invalid length. [ 177.797670][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.805769][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 177.815852][ T9536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'. [ 177.839149][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.844605][ T9536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'. [ 177.871841][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 177.882697][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.956504][ T9539] lo speed is unknown, defaulting to 1000 [ 177.963516][ T9539] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 178.085592][ T9549] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 178.290236][ T9549] lo speed is unknown, defaulting to 1000 [ 178.305927][ T9564] geneve2: entered promiscuous mode [ 178.392963][ T9549] bridge_tlave_0 speed is unknown, defaulting to 1000 [ 178.479457][ T6056] hsr_slave_0: left promiscuous mode [ 178.497216][ T6056] hsr_slave_1: left promiscuous mode [ 178.512516][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.525719][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.559784][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.567202][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.587553][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.619982][ T6056] veth1_macvtap: left promiscuous mode [ 178.625573][ T6056] veth0_macvtap: left promiscuous mode [ 178.631457][ T6056] veth1_vlan: left promiscuous mode [ 178.636791][ T6056] veth0_vlan: left promiscuous mode [ 179.259898][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 179.305288][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 179.607114][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 179.885739][ T9595] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 179.896894][ T9595] batman_adv: batadv0: Adding interface: gretap1 [ 179.903925][ T9595] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.927374][ T5842] Bluetooth: hci1: command tx timeout [ 179.929790][ T9595] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 179.947559][ T9596] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 180.005463][ T9603] syzkaller0: entered promiscuous mode [ 180.024740][ T9603] syzkaller0: entered allmulticast mode [ 180.073752][ T9539] chnl_net:caif_netlink_parms(): no params data found [ 180.650864][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available Connection to 10.128.1.97 closed by remote host. [ 181.687177][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.011775][ T5842] Bluetooth: hci1: command 0x041b tx timeout [ 182.798258][ T6056] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.852929][ T6056] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.923733][ T6056] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.974643][ T6056] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.068253][ T6056] ip6gretap0: left allmulticast mode [ 183.073576][ T6056] ip6gretap0: left promiscuous mode [ 183.079811][ T6056] bridge0: port 2(ip6gretap0) entered disabled state [ 183.087686][ T6056] veth0_to_bridge: left allmulticast mode [ 183.093415][ T6056] veth0_to_bridge: left promiscuous mode [ 183.099437][ T6056] bridge0: port 1(veth0_to_bridge) entered disabled state [ 183.235838][ T6056] batman_adv: batadv0: Removing interface: gretap1 [ 183.420762][ T6056] bond0 (unregistering): Released all slaves [ 183.433492][ T6056] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 183.443871][ T6056] ------------[ cut here ]------------ [ 183.449575][ T6056] WARNING: CPU: 0 PID: 6056 at net/core/dev.c:9832 unregister_netdevice_many_notify+0x1b5c/0x2070 [ 183.460266][ T6056] Modules linked in: [ 183.464174][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: kworker/u8:15 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 183.475319][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 183.485749][ T6056] Workqueue: netns cleanup_net [ 183.490746][ T6056] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 183.498175][ T6056] Code: f5 f7 90 0f 0b 90 e9 49 ff ff ff e8 8e 1d f5 f7 90 0f 0b 90 eb 97 e8 83 1d f5 f7 90 0f 0b 90 e9 99 f0 ff ff e8 75 1d f5 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 67 1d f5 f7 90 0f 0b 90 e9 71 f3 ff ff [ 183.518142][ T6056] RSP: 0018:ffffc900052ff820 EFLAGS: 00010293 [ 183.524526][ T6056] RAX: ffffffff89cc99eb RBX: 00000000ffffffa1 RCX: ffff88802d4c3c00 [ 183.532715][ T6056] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000 [ 183.540806][ T6056] RBP: ffffc900052ffa10 R08: ffffffff89cc8bf0 R09: fffffbfff1d3a614 [ 183.548888][ T6056] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90040f13000 [ 183.556855][ T6056] R13: 1ffff1100bc2b186 R14: ffff88805e158c30 R15: ffff88805e158c28 [ 183.564971][ T6056] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 183.574068][ T6056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.580790][ T6056] CR2: 00007ffe168ceff8 CR3: 000000000e938000 CR4: 00000000003526f0 [ 183.588976][ T6056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.596956][ T6056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.605069][ T6056] Call Trace: [ 183.608553][ T6056] [ 183.611537][ T6056] ? __warn+0x165/0x4d0 [ 183.615719][ T6056] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 183.622486][ T6056] ? report_bug+0x2b3/0x500 [ 183.627262][ T6056] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 183.634026][ T6056] ? handle_bug+0x60/0x90 [ 183.638584][ T6056] ? exc_invalid_op+0x1a/0x50 [ 183.643311][ T6056] ? asm_exc_invalid_op+0x1a/0x20 [ 183.648459][ T6056] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 183.654954][ T6056] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 183.661659][ T6056] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 183.668468][ T6056] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 183.675264][ T6056] ? __pfx_call_nexthop_notifiers+0x10/0x10 [ 183.681312][ T6056] ? __pfx___might_resched+0x10/0x10 [ 183.686601][ T6056] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 183.693119][ T6056] ? remove_nexthop+0x114/0x180 [ 183.698178][ T6056] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 183.704181][ T6056] cleanup_net+0x76d/0xd60 [ 183.708630][ T6056] ? __pfx_cleanup_net+0x10/0x10 [ 183.713567][ T6056] ? process_scheduled_works+0x9c6/0x18e0 [ 183.719363][ T6056] process_scheduled_works+0xabe/0x18e0 [ 183.725027][ T6056] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.731176][ T6056] ? assign_work+0x364/0x3d0 [ 183.735802][ T6056] worker_thread+0x870/0xd30 [ 183.740447][ T6056] ? __kthread_parkme+0x169/0x1d0 [ 183.745480][ T6056] ? __pfx_worker_thread+0x10/0x10 [ 183.750641][ T6056] kthread+0x7a9/0x920 [ 183.754708][ T6056] ? __pfx_kthread+0x10/0x10 [ 183.759379][ T6056] ? __pfx_worker_thread+0x10/0x10 [ 183.764507][ T6056] ? __pfx_kthread+0x10/0x10 [ 183.769462][ T6056] ? __pfx_kthread+0x10/0x10 [ 183.774061][ T6056] ? __pfx_kthread+0x10/0x10 [ 183.778704][ T6056] ? _raw_spin_unlock_irq+0x23/0x50 [ 183.783935][ T6056] ? lockdep_hardirqs_on+0x99/0x150 [ 183.789223][ T6056] ? __pfx_kthread+0x10/0x10 [ 183.794111][ T6056] ret_from_fork+0x4b/0x80 [ 183.798549][ T6056] ? __pfx_kthread+0x10/0x10 [ 183.803134][ T6056] ret_from_fork_asm+0x1a/0x30 [ 183.808013][ T6056] [ 183.811095][ T6056] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.818385][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: kworker/u8:15 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 183.829326][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 183.839418][ T6056] Workqueue: netns cleanup_net [ 183.844200][ T6056] Call Trace: [ 183.847483][ T6056] [ 183.850441][ T6056] dump_stack_lvl+0x241/0x360 [ 183.855133][ T6056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.860323][ T6056] ? __pfx__printk+0x10/0x10 [ 183.864896][ T6056] ? _printk+0xd5/0x120 [ 183.869050][ T6056] ? __init_begin+0x41000/0x41000 [ 183.874080][ T6056] ? vscnprintf+0x5d/0x90 [ 183.878404][ T6056] panic+0x349/0x880 [ 183.882293][ T6056] ? __warn+0x174/0x4d0 [ 183.886435][ T6056] ? __pfx_panic+0x10/0x10 [ 183.890867][ T6056] ? ret_from_fork_asm+0x1a/0x30 [ 183.895816][ T6056] __warn+0x344/0x4d0 [ 183.899796][ T6056] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 183.906388][ T6056] report_bug+0x2b3/0x500 [ 183.910713][ T6056] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 183.917306][ T6056] handle_bug+0x60/0x90 [ 183.921457][ T6056] exc_invalid_op+0x1a/0x50 [ 183.925961][ T6056] asm_exc_invalid_op+0x1a/0x20 [ 183.930810][ T6056] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 183.938011][ T6056] Code: f5 f7 90 0f 0b 90 e9 49 ff ff ff e8 8e 1d f5 f7 90 0f 0b 90 eb 97 e8 83 1d f5 f7 90 0f 0b 90 e9 99 f0 ff ff e8 75 1d f5 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 67 1d f5 f7 90 0f 0b 90 e9 71 f3 ff ff [ 183.957616][ T6056] RSP: 0018:ffffc900052ff820 EFLAGS: 00010293 [ 183.963681][ T6056] RAX: ffffffff89cc99eb RBX: 00000000ffffffa1 RCX: ffff88802d4c3c00 [ 183.971672][ T6056] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000 [ 183.979648][ T6056] RBP: ffffc900052ffa10 R08: ffffffff89cc8bf0 R09: fffffbfff1d3a614 [ 183.987712][ T6056] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90040f13000 [ 183.995681][ T6056] R13: 1ffff1100bc2b186 R14: ffff88805e158c30 R15: ffff88805e158c28 [ 184.003718][ T6056] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 184.010236][ T6056] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 184.016867][ T6056] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 184.023633][ T6056] ? __pfx_call_nexthop_notifiers+0x10/0x10 [ 184.029613][ T6056] ? __pfx___might_resched+0x10/0x10 [ 184.034901][ T6056] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 184.041187][ T6056] ? remove_nexthop+0x114/0x180 [ 184.046033][ T6056] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 184.052017][ T6056] cleanup_net+0x76d/0xd60 [ 184.056433][ T6056] ? __pfx_cleanup_net+0x10/0x10 [ 184.061418][ T6056] ? process_scheduled_works+0x9c6/0x18e0 [ 184.067136][ T6056] process_scheduled_works+0xabe/0x18e0 [ 184.072721][ T6056] ? __pfx_process_scheduled_works+0x10/0x10 [ 184.078711][ T6056] ? assign_work+0x364/0x3d0 [ 184.083300][ T6056] worker_thread+0x870/0xd30 [ 184.087897][ T6056] ? __kthread_parkme+0x169/0x1d0 [ 184.092923][ T6056] ? __pfx_worker_thread+0x10/0x10 [ 184.098053][ T6056] kthread+0x7a9/0x920 [ 184.102123][ T6056] ? __pfx_kthread+0x10/0x10 [ 184.106710][ T6056] ? __pfx_worker_thread+0x10/0x10 [ 184.111838][ T6056] ? __pfx_kthread+0x10/0x10 [ 184.116425][ T6056] ? __pfx_kthread+0x10/0x10 [ 184.121015][ T6056] ? __pfx_kthread+0x10/0x10 [ 184.125600][ T6056] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.130792][ T6056] ? lockdep_hardirqs_on+0x99/0x150 [ 184.135989][ T6056] ? __pfx_kthread+0x10/0x10 [ 184.140587][ T6056] ret_from_fork+0x4b/0x80 [ 184.144999][ T6056] ? __pfx_kthread+0x10/0x10 [ 184.149589][ T6056] ret_from_fork_asm+0x1a/0x30 [ 184.154358][ T6056] [ 184.157656][ T6056] Kernel Offset: disabled [ 184.162041][ T6056] Rebooting in 86400 seconds..