last executing test programs: 3.504308465s ago: executing program 2 (id=2034): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='veth0_to_team\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 3.038706717s ago: executing program 4 (id=2042): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001200375ffcff07000700000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 2.957930436s ago: executing program 4 (id=2044): socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711213000000000095b62a05189bade2418b0da54c656ef79e647423016e98068adcbbbbbd937a4970aa10350aae35f157ea5ff44df1f502883679828c34b27d758ccfe69b7b6419753af4f30983cd529dfa5a1142af73dae8c0c5c5b4a843420400565a04e1d715e8f73d2c2a6d459ee85a11d8c49bb3e961de12ac67f82ccfdc9702bdbba0bcb2dc413a7cbb24e3e876eeaa18eaf4e4b8fd034ef9f4408da40303a44a867d34e5f4be61820397f733cb7ba2e1a83c"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="08000800e000000106000a004e200000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="2c00000042843aefe7a6919bbf2ef9e118179375a7e86d11b4220aeaf5b496457f2666eeb58fc03c26bdb1ff1ea0bf57255a3669f611f37450e81ca80cf5aa51fc198bfd7cb2c2d11888627daed03d2d82479ff63177b7627b89d99772"], 0x2c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) write$cgroup_subtree(r4, 0x0, 0x9) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x2, 0x0, 0x0, 0xfffd}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r9) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r11, 0x0, 0x3, &(0x7f0000000540)=""/225, &(0x7f00000001c0)=0xe1) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r10, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000100)={r12, 0xe03}, 0x8) r13 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x29, 0x4, 0xa, 0x480, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18ed1e5f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x769302c7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a1a64c3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x579e76e9}, @NFTA_HOOK_DEV={0x0, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x22b3236a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000038}, 0x8c801) recvmmsg(r13, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xf6c8}], 0x1, 0x120, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={r12, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) 2.57162505s ago: executing program 2 (id=2052): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8104}], 0x1, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xa9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xac}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x40015) connect$unix(r1, &(0x7f00000012c0)=@file={0x0, './file1\x00'}, 0x6e) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffe, 0x8, 0x1000}, {0x0, 0x1, 0x1}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x5ed, 0x4, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x355}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r9, 0x1, 0x6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14b1379e2ef4cbe8c4ce9ee9fc955e203d000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.027591857s ago: executing program 4 (id=2061): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.945503916s ago: executing program 4 (id=2062): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='veth0_to_team\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 1.611904774s ago: executing program 1 (id=2070): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x3, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x6, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x7, 0x7, 0x8, 0xb, {{0x1f, 0x4, 0x1, 0x9, 0x7c, 0x64, 0x0, 0x10, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@end, @noop, @timestamp_prespec={0x44, 0x24, 0x8d, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x9}, {@remote, 0x40}, {@local}]}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x5, [{@remote, 0x10001}]}, @timestamp_addr={0x44, 0x34, 0xbe, 0x1, 0x0, [{@multicast2, 0x8fde994b}, {@multicast2, 0x7f}, {@private=0xa010101}, {@multicast1, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xcdca}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000200)='syzkaller\x00', 0x710e1a09, 0x0, 0x0, 0x41000, 0x62, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x7, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x1, 0x3, 0xe, 0x15}, {0x3, 0x5, 0x0, 0xb}, {0x3, 0x1, 0xa, 0xa}, {0x1, 0x4, 0x3, 0x3}, {0x1, 0x1, 0x10, 0x7}], 0x10, 0xf4d5, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x56, &(0x7f0000000500)={@remote, @random="1c0a658ffedb", @void, {@canfd={0xd, {{0x4, 0x0, 0x1, 0x1}, 0xd, 0x0, 0x0, 0x0, "fb8066eb9ef085d50e4547fb199f02e9d4b70e8875aedd7516be0d46d8c88473e58839b53f1e7bfeb34115d32ca5bc48c65755aad01ef292819237a30d201f90"}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x6c, r5, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8001}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20040802) r6 = syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8ca}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000980)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x7a112, r3, 0x7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x5, @value=r7, @void, @value=r8}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x9, 0x9, 0x44, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x20, 0xff, 0xfffffff4}}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup/syz1\x00', 0x200002, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r8, 0x0, 0x6}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', 0x0, 0x18}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000c80)={{0x32, @private=0xa010102, 0x4e22, 0x2, 'dh\x00', 0x14, 0x5, 0x6a}, {@rand_addr=0x64010102, 0x4e20, 0x1, 0xe, 0x1ff, 0xa75}}, 0x44) r11 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000d00)={0xe45c93f923b621df}) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000000d40)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000d80)={{r10}, r12, 0xef435c9c20d3c5b4, @unused=[0x1ff, 0x6, 0x7, 0xd], @subvolid=0x80000001}) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20003000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x68, 0x5, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) 1.574485937s ago: executing program 2 (id=2072): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.478783623s ago: executing program 1 (id=2075): socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711213000000000095b62a05189bade2418b0da54c656ef79e647423016e98068adcbbbbbd937a4970aa10350aae35f157ea5ff44df1f502883679828c34b27d758ccfe69b7b6419753af4f30983cd529dfa5a1142af73dae8c0c5c5b4a843420400565a04e1d715e8f73d2c2a6d459ee85a11d8c49bb3e961de12ac67f82ccfdc9702bdbba0bcb2dc413a7cbb24e3e876eeaa18eaf4e4b8fd034ef9f4408da40303a44a867d34e5f4be61820397f733cb7ba2e1a83c"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="08000800e000000106000a004e200000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="2c00000042843aefe7a6919bbf2ef9e118179375a7e86d11b4220aeaf5b496457f2666eeb58fc03c26bdb1ff1ea0bf57255a3669f611f37450e81ca80cf5aa51fc198bfd7cb2c2d11888627daed03d2d82479ff63177b7627b89d99772"], 0x2c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) write$cgroup_subtree(r4, 0x0, 0x9) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x2, 0x0, 0x0, 0xfffd}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r9) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r10, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000100)={r12, 0xe03}, 0x8) r13 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x29, 0x4, 0xa, 0x480, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18ed1e5f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x769302c7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a1a64c3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x579e76e9}, @NFTA_HOOK_DEV={0x0, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x22b3236a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000038}, 0x8c801) recvmmsg(r13, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xf6c8}], 0x1, 0x120, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={r12, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) 1.422378411s ago: executing program 2 (id=2076): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) pipe(0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x80}, 0x1, 0x7}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.087844062s ago: executing program 3 (id=2081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x800, 0x14, 0x16}, @ipv4=@tcp={{0x7, 0x4, 0x3, 0x3, 0xfbf, 0x65, 0x0, 0xa2, 0x6, 0x0, @local, @remote, {[@generic={0x94, 0x5, "a61698"}]}}, {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x5, 0x0, 0x6}, {"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"}}}}, 0xfcd) 1.0232587s ago: executing program 4 (id=2082): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x24}, 0x18) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000280)=0x1041044) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0xb120501) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x108, 0xe, 0x34, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000009c0)=""/215, 0xfffffefc}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000780)=""/18, 0x12}], 0x5}, 0x6}], 0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000780)=[@in6={0xa, 0x4e21, 0xf430, @ipv4={'\x00', '\xff\xff', @remote}, 0x3a}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x18, &(0x7f0000000080)={r7}, 0x8) 975.96002ms ago: executing program 0 (id=2083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0xe1, 0x6, 0x3b, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7826, 0x20, 0x4, 0x8}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x20000000000003c7, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xd, 0xff, {{0x21, 0x4, 0x2, 0x8, 0x84, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @empty, {[@generic={0x83, 0xe, "5406b8945087cdde24089b71"}, @ssrr={0x89, 0xf, 0xb3, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0xc}]}, @timestamp_prespec={0x44, 0x34, 0x91, 0x3, 0x4, [{@multicast1, 0x10000}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x100}, {@rand_addr=0x64010101, 0x8}, {@local, 0x3ff}]}, @lsrr={0x83, 0x1b, 0x31, [@dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @local]}, @end, @noop]}}}}}) r5 = socket$netlink(0x10, 0x3, 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="43bdb4c7", 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="8610be1cf3c98fe388e23040d39a1957c101c43795c1"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0xe, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0}}, @rdma_map={0x30, 0x114, 0x2, {{0x0}, 0x0}}], 0x60}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}]}, 0x70}}, 0x80) 783.969415ms ago: executing program 4 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8104}], 0x1, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xa9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xac}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x40015) connect$unix(r1, &(0x7f00000012c0)=@file={0x0, './file1\x00'}, 0x6e) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffe, 0x8, 0x1000}, {0x0, 0x1, 0x1}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x5ed, 0x4, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x355}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r9, 0x1, 0x6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14b1379e2ef4cbe8c4ce9ee9fc955e203d000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) 736.560046ms ago: executing program 0 (id=2085): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x3, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x6, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x7, 0x7, 0x8, 0xb, {{0x1f, 0x4, 0x1, 0x9, 0x7c, 0x64, 0x0, 0x10, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@end, @noop, @timestamp_prespec={0x44, 0x24, 0x8d, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x9}, {@remote, 0x40}, {@local}]}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x5, [{@remote, 0x10001}]}, @timestamp_addr={0x44, 0x34, 0xbe, 0x1, 0x0, [{@multicast2, 0x8fde994b}, {@multicast2, 0x7f}, {@private=0xa010101}, {@multicast1, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xcdca}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000200)='syzkaller\x00', 0x710e1a09, 0x0, 0x0, 0x41000, 0x62, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x7, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x1, 0x3, 0xe, 0x15}, {0x3, 0x5, 0x0, 0xb}, {0x3, 0x1, 0xa, 0xa}, {0x1, 0x4, 0x3, 0x3}, {0x1, 0x1, 0x10, 0x7}], 0x10, 0xf4d5, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x56, &(0x7f0000000500)={@remote, @random="1c0a658ffedb", @void, {@canfd={0xd, {{0x4, 0x0, 0x1, 0x1}, 0xd, 0x0, 0x0, 0x0, "fb8066eb9ef085d50e4547fb199f02e9d4b70e8875aedd7516be0d46d8c88473e58839b53f1e7bfeb34115d32ca5bc48c65755aad01ef292819237a30d201f90"}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x6c, r5, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8001}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20040802) r6 = syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8ca}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000980)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x7a112, r3, 0x7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x5, @value=r7, @void, @value=r8}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x9, 0x9, 0x44, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x20, 0xff, 0xfffffff4}}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup/syz1\x00', 0x200002, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r8, 0x0, 0x6}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', 0x0, 0x18}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000c80)={{0x32, @private=0xa010102, 0x4e22, 0x2, 'dh\x00', 0x14, 0x5, 0x6a}, {@rand_addr=0x64010102, 0x4e20, 0x1, 0xe, 0x1ff, 0xa75}}, 0x44) r11 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000d00)={0xe45c93f923b621df}) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000000d40)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000d80)={{r10}, r12, 0xef435c9c20d3c5b4, @unused=[0x1ff, 0x6, 0x7, 0xd], @subvolid=0x80000001}) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20003000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x68, 0x5, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) 726.561701ms ago: executing program 3 (id=2086): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 543.211272ms ago: executing program 3 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) 527.801586ms ago: executing program 0 (id=2088): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x200100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000280)=@can={{0x4}, 0x0, 0x2, 0x0, 0x0, "44b07d1e9b1d900c"}, 0x10}}, 0x0) 488.420939ms ago: executing program 1 (id=2089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000003800)=@newtaction={0x18, 0x30, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xffffffdb, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000009}) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r7) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r10, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040014}, 0x4040011) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r13, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r12, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a000100", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 472.488206ms ago: executing program 2 (id=2090): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x4e22, 0xfffd, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x2, @in6=@private0, 0x0, 0x1, 0x2}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0) 394.034166ms ago: executing program 3 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x24, r2, 0x413, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x24}}, 0x0) 357.252862ms ago: executing program 2 (id=2092): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='veth0_to_team\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 356.410576ms ago: executing program 0 (id=2093): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$tipc(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x8800) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0xfea2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x108, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0xf7, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x1, 0x0, 0x0, @u32}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0xf8}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, 0x0, 0x4048084) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x70, r5, 0x203, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 313.353766ms ago: executing program 1 (id=2094): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r0, &(0x7f0000000200)=[{}, {}, {}], 0x3, 0xfffffffa, &(0x7f00000002c0)={[0x381]}, 0x8) shutdown(r1, 0x0) 240.084642ms ago: executing program 3 (id=2095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x34}}, 0x0) 168.008194ms ago: executing program 0 (id=2096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x2, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0x12, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x4248}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x457d7800}, {@multicast2, 0x7}, {@private=0xa010101, 0x7}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) 122.639756ms ago: executing program 3 (id=2097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x2000, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x88}}, 0x0) 122.304021ms ago: executing program 1 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000040000900fffffffffddbdf250200000004"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 40.483213ms ago: executing program 0 (id=2099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250b0000006c000580"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) 0s ago: executing program 1 (id=2100): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) write$ppp(r0, &(0x7f0000000400)="11", 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 62.623175][ T5820] cgroup: Unknown subsys name 'net' [ 62.747439][ T5820] cgroup: Unknown subsys name 'cpuset' [ 62.755255][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.012779][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.146641][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.157098][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.166302][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.175505][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.184153][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.192048][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.200733][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.216281][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.217282][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.230932][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.244226][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.249853][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.252292][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.260840][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.268751][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.273412][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.280453][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.286920][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.301825][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.304615][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.310042][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.325014][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.332416][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.340537][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.349939][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.357488][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.369779][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.377414][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.384883][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.392179][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.755906][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 66.820453][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 66.899980][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 66.940170][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 66.993247][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.003100][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.010736][ T5838] bridge_slave_0: entered allmulticast mode [ 67.020165][ T5838] bridge_slave_0: entered promiscuous mode [ 67.056723][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.063840][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.071359][ T5838] bridge_slave_1: entered allmulticast mode [ 67.078012][ T5838] bridge_slave_1: entered promiscuous mode [ 67.094771][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 67.150414][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.160849][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.168450][ T5837] bridge_slave_0: entered allmulticast mode [ 67.175335][ T5837] bridge_slave_0: entered promiscuous mode [ 67.199612][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.212452][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.238136][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.245413][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.252617][ T5837] bridge_slave_1: entered allmulticast mode [ 67.259937][ T5837] bridge_slave_1: entered promiscuous mode [ 67.266467][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.273733][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.281442][ T5830] bridge_slave_0: entered allmulticast mode [ 67.288358][ T5830] bridge_slave_0: entered promiscuous mode [ 67.296471][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.303622][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.311785][ T5830] bridge_slave_1: entered allmulticast mode [ 67.318767][ T5830] bridge_slave_1: entered promiscuous mode [ 67.368053][ T5838] team0: Port device team_slave_0 added [ 67.411442][ T5838] team0: Port device team_slave_1 added [ 67.417632][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.425134][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.432344][ T5836] bridge_slave_0: entered allmulticast mode [ 67.439073][ T5836] bridge_slave_0: entered promiscuous mode [ 67.455281][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.466745][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.483585][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.491118][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.498703][ T5836] bridge_slave_1: entered allmulticast mode [ 67.506190][ T5836] bridge_slave_1: entered promiscuous mode [ 67.512814][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.521242][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.528799][ T5835] bridge_slave_0: entered allmulticast mode [ 67.536121][ T5835] bridge_slave_0: entered promiscuous mode [ 67.545447][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.554931][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.562020][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.569502][ T5835] bridge_slave_1: entered allmulticast mode [ 67.576726][ T5835] bridge_slave_1: entered promiscuous mode [ 67.584438][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.647097][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.654117][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.680221][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.695677][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.715411][ T5837] team0: Port device team_slave_0 added [ 67.733465][ T5830] team0: Port device team_slave_0 added [ 67.748059][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.755590][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.782069][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.795655][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.813383][ T5837] team0: Port device team_slave_1 added [ 67.825562][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.839882][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.851536][ T5830] team0: Port device team_slave_1 added [ 67.881152][ T5836] team0: Port device team_slave_0 added [ 67.910661][ T5835] team0: Port device team_slave_0 added [ 67.918958][ T5835] team0: Port device team_slave_1 added [ 67.946689][ T5836] team0: Port device team_slave_1 added [ 67.952926][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.960533][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.986848][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.008597][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.015999][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.042385][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.069017][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.076103][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.102357][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.126275][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.133247][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.159615][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.176071][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.183067][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.209287][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.238920][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.246138][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.272548][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.286691][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.293673][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.319645][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.334118][ T5838] hsr_slave_0: entered promiscuous mode [ 68.341512][ T5838] hsr_slave_1: entered promiscuous mode [ 68.375985][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.382970][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.409589][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.409624][ T5853] Bluetooth: hci2: command tx timeout [ 68.431974][ T5846] Bluetooth: hci0: command tx timeout [ 68.442336][ T5830] hsr_slave_0: entered promiscuous mode [ 68.448547][ T5830] hsr_slave_1: entered promiscuous mode [ 68.454662][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.462539][ T5830] Cannot create hsr debugfs directory [ 68.484779][ T5846] Bluetooth: hci4: command tx timeout [ 68.487254][ T5853] Bluetooth: hci3: command tx timeout [ 68.491403][ T5851] Bluetooth: hci1: command tx timeout [ 68.560204][ T5837] hsr_slave_0: entered promiscuous mode [ 68.569595][ T5837] hsr_slave_1: entered promiscuous mode [ 68.576759][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.585548][ T5837] Cannot create hsr debugfs directory [ 68.597439][ T5835] hsr_slave_0: entered promiscuous mode [ 68.603650][ T5835] hsr_slave_1: entered promiscuous mode [ 68.609933][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.617551][ T5835] Cannot create hsr debugfs directory [ 68.649004][ T5836] hsr_slave_0: entered promiscuous mode [ 68.655520][ T5836] hsr_slave_1: entered promiscuous mode [ 68.661537][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.669244][ T5836] Cannot create hsr debugfs directory [ 68.985759][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.998701][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.011035][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.033111][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.077077][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.097799][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.113302][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.123471][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.167814][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.180928][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.193117][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.203902][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.280243][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.308062][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.318938][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.340247][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.366415][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.380206][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.422563][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.447733][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.502315][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.549897][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.571157][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.593444][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.607182][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.614609][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.631438][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.638623][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.656807][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.669007][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.686811][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.693916][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.729894][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.737149][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.760477][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.783505][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.797904][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.805061][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.833729][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.840867][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.871661][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.878801][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.898350][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.905480][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.922324][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.933485][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.069401][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.200485][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.235916][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.243060][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.286977][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.294100][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.408960][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.417880][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.447590][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.485599][ T5846] Bluetooth: hci0: command tx timeout [ 70.491186][ T5851] Bluetooth: hci2: command tx timeout [ 70.493046][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.565722][ T5851] Bluetooth: hci3: command tx timeout [ 70.575304][ T5846] Bluetooth: hci1: command tx timeout [ 70.575347][ T5853] Bluetooth: hci4: command tx timeout [ 70.607718][ T5830] veth0_vlan: entered promiscuous mode [ 70.618036][ T5838] veth0_vlan: entered promiscuous mode [ 70.639550][ T5835] veth0_vlan: entered promiscuous mode [ 70.671116][ T5838] veth1_vlan: entered promiscuous mode [ 70.691542][ T5830] veth1_vlan: entered promiscuous mode [ 70.712364][ T5835] veth1_vlan: entered promiscuous mode [ 70.799515][ T5830] veth0_macvtap: entered promiscuous mode [ 70.828176][ T5835] veth0_macvtap: entered promiscuous mode [ 70.862622][ T5830] veth1_macvtap: entered promiscuous mode [ 70.871520][ T5835] veth1_macvtap: entered promiscuous mode [ 70.898734][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.910717][ T5838] veth0_macvtap: entered promiscuous mode [ 70.936744][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.946611][ T5838] veth1_macvtap: entered promiscuous mode [ 70.969309][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.981001][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.992317][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.014105][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.027881][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.038838][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.052125][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.060566][ T5837] veth0_vlan: entered promiscuous mode [ 71.079167][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.088214][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.097946][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.108244][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.131722][ T5837] veth1_vlan: entered promiscuous mode [ 71.141309][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.151344][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.160636][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.169584][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.180304][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.193054][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.203467][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.216012][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.227595][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.238297][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.248842][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.259462][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.270061][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.282177][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.297643][ T5836] veth0_vlan: entered promiscuous mode [ 71.314296][ T5836] veth1_vlan: entered promiscuous mode [ 71.346673][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.356592][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.366702][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.376480][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.471859][ T5837] veth0_macvtap: entered promiscuous mode [ 71.498535][ T5837] veth1_macvtap: entered promiscuous mode [ 71.527149][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.537926][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.572767][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.583628][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.594298][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.605292][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.616999][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.628686][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.641010][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.655171][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.661184][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.666446][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.683721][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.694328][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.705657][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.715636][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.726110][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.737160][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.763071][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.777281][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.783752][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.783874][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.792692][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.806833][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.820496][ T5836] veth0_macvtap: entered promiscuous mode [ 71.833983][ T5836] veth1_macvtap: entered promiscuous mode [ 71.841358][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.851737][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.885981][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.893993][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.933548][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.949183][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.959535][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.974896][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.985632][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.996184][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.008607][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.019938][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.032001][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.060180][ T4958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.072411][ T4958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.098537][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.110346][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.120851][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.121260][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.131443][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.157659][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.169037][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.181771][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.192608][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.203700][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.242188][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.267918][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.282059][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.293834][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.338532][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.349654][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.416828][ T746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.451287][ T746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.505893][ T5920] Zero length message leads to an empty skb [ 72.574221][ T5920] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 72.584966][ T5853] Bluetooth: hci2: command tx timeout [ 72.590413][ T5853] Bluetooth: hci0: command tx timeout [ 72.611939][ T5920] bridge0: port 3(batadv1) entered blocking state [ 72.622204][ T5920] bridge0: port 3(batadv1) entered disabled state [ 72.638534][ T5920] batadv1: entered allmulticast mode [ 72.644981][ T5853] Bluetooth: hci4: command tx timeout [ 72.646433][ T5920] batadv1: entered promiscuous mode [ 72.655905][ T5853] Bluetooth: hci3: command tx timeout [ 72.655943][ T5853] Bluetooth: hci1: command tx timeout [ 72.678648][ T5920] bridge0: port 3(batadv1) entered blocking state [ 72.685428][ T5920] bridge0: port 3(batadv1) entered forwarding state [ 72.726504][ T4958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.734343][ T4958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.752391][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.822906][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.842127][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 72.844098][ T4958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.893900][ T4958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.992935][ T5928] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.092927][ T35] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 73.103207][ T35] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 73.299958][ T5933] IPVS: set_ctl: invalid protocol: 168 255.255.255.255:20000 [ 73.555901][ T5937] xt_HMARK: spi-set and port-set can't be combined [ 73.579766][ T5939] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.6'. [ 73.707440][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 73.748345][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 73.806464][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 73.970783][ T5955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.140726][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 74.165952][ T5942] infiniband syz2: set active [ 74.170971][ T5942] infiniband syz2: added vxcan1 [ 74.183312][ T5915] vxcan1 speed is unknown, defaulting to 1000 [ 74.210802][ T5955] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9'. [ 74.275043][ T5942] RDS/IB: syz2: added [ 74.307643][ T5942] smc: adding ib device syz2 with port count 1 [ 74.350071][ T5942] smc: ib device syz2 port 1 has pnetid [ 74.380356][ T46] vxcan1 speed is unknown, defaulting to 1000 [ 74.407173][ T5965] netlink: 'syz.4.10': attribute type 1 has an invalid length. [ 74.411371][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 74.425284][ T5965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10'. [ 74.645201][ T5851] Bluetooth: hci0: command tx timeout [ 74.650673][ T5851] Bluetooth: hci2: command tx timeout [ 74.725163][ T5851] Bluetooth: hci1: command tx timeout [ 74.730666][ T5851] Bluetooth: hci3: command tx timeout [ 74.736706][ T5853] Bluetooth: hci4: command tx timeout [ 75.041527][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 75.433583][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 75.672122][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 75.824355][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 76.019788][ T5962] lo speed is unknown, defaulting to 1000 [ 76.027264][ T5962] lo speed is unknown, defaulting to 1000 [ 76.033496][ T5962] lo speed is unknown, defaulting to 1000 [ 76.395020][ T5995] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 76.432344][ T5962] infiniband syz0: set active [ 76.443014][ T5843] lo speed is unknown, defaulting to 1000 [ 76.457709][ T5962] infiniband syz0: added lo [ 76.463122][ T5962] syz0: rxe_create_cq: returned err = -12 [ 76.470186][ T5962] infiniband syz0: Couldn't create ib_mad CQ [ 76.489441][ T5962] infiniband syz0: Couldn't open port 1 [ 76.509557][ T6005] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.16'. [ 76.596583][ T5962] RDS/IB: syz0: added [ 76.635093][ T6009] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 76.648360][ T5962] smc: adding ib device syz0 with port count 1 [ 76.665157][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 76.694698][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18'. [ 76.712551][ T5962] smc: ib device syz0 port 1 has pnetid [ 76.743741][ T5962] lo speed is unknown, defaulting to 1000 [ 76.762378][ T9] lo speed is unknown, defaulting to 1000 [ 76.763730][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 77.134981][ T6026] syz.4.21 uses obsolete (PF_INET,SOCK_PACKET) [ 77.291586][ T5962] lo speed is unknown, defaulting to 1000 [ 77.584802][ T6038] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 77.933711][ T5962] lo speed is unknown, defaulting to 1000 [ 77.970302][ T6052] __nla_validate_parse: 3 callbacks suppressed [ 77.970321][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 78.131140][ T6057] netlink: 96 bytes leftover after parsing attributes in process `syz.4.30'. [ 78.159317][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 78.181868][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 78.409921][ T5962] lo speed is unknown, defaulting to 1000 [ 78.561057][ T6067] netlink: 'syz.4.32': attribute type 4 has an invalid length. [ 78.614060][ T6063] netlink: 'syz.4.32': attribute type 4 has an invalid length. [ 78.673244][ T6063] netlink: 2 bytes leftover after parsing attributes in process `syz.4.32'. [ 78.690508][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.711630][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.737591][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.759724][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.782516][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.810953][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.834946][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.845734][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.922012][ T6063] batadv_slave_1: entered promiscuous mode [ 78.955502][ T5962] lo speed is unknown, defaulting to 1000 [ 78.999363][ T6074] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 79.055215][ T6075] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.076451][ T6074] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.35'. [ 79.139965][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 79.317619][ T6080] veth0_to_bridge: entered promiscuous mode [ 79.340814][ T6076] veth0_to_bridge: left promiscuous mode [ 79.518846][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.41'. [ 79.529665][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.41'. [ 79.575406][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 79.942196][ T6114] netlink: 'syz.0.46': attribute type 10 has an invalid length. [ 80.083155][ T6114] team0: Device veth1_macvtap failed to register rx_handler [ 80.183273][ T6113] vxcan1 speed is unknown, defaulting to 1000 [ 80.854050][ T6113] lo speed is unknown, defaulting to 1000 [ 81.529952][ T6167] vxcan1 speed is unknown, defaulting to 1000 [ 81.815539][ T6179] sctp: [Deprecated]: syz.3.62 (pid 6179) Use of int in maxseg socket option. [ 81.815539][ T6179] Use struct sctp_assoc_value instead [ 82.045093][ T2023] cfg80211: failed to load regulatory.db [ 82.180594][ T6167] lo speed is unknown, defaulting to 1000 [ 82.435073][ T6197] syzkaller0: entered promiscuous mode [ 82.457958][ T6197] syzkaller0: entered allmulticast mode [ 82.555926][ T6205] warning: `syz.3.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.600716][ T6222] netlink: 'syz.3.77': attribute type 21 has an invalid length. [ 84.152728][ T6209] __nla_validate_parse: 10 callbacks suppressed [ 84.152744][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 84.474619][ T6234] netlink: 'syz.4.81': attribute type 10 has an invalid length. [ 84.537306][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.588079][ T6234] bond0: (slave team0): Enslaving as an active interface with an up link [ 84.687247][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 84.884681][ T5851] Bluetooth: hci4: command tx timeout [ 85.151788][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 85.363857][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 85.668781][ T6269] vxcan1 speed is unknown, defaulting to 1000 [ 85.984729][ T6269] lo speed is unknown, defaulting to 1000 [ 86.054667][ T9] IPVS: starting estimator thread 0... [ 86.154710][ T6288] IPVS: using max 24 ests per chain, 57600 per kthread [ 86.180024][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 86.490242][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 86.623531][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 86.804903][ T6323] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 86.812604][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.110'. [ 86.966584][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 87.250117][ T6338] netlink: 44 bytes leftover after parsing attributes in process `syz.3.113'. [ 87.791174][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 88.046382][ T6376] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 88.140614][ T6375] vlan2: entered promiscuous mode [ 88.191967][ T6375] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 88.258314][ T6384] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 88.292128][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.301225][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.383677][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.391055][ T6375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.399743][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.406944][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.436193][ T6375] bridge0: entered promiscuous mode [ 88.452224][ T6375] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 88.580333][ T6375] syz.1.122 (6375) used greatest stack depth: 16272 bytes left [ 89.226861][ T6426] syzkaller0: entered allmulticast mode [ 89.245782][ T6433] __nla_validate_parse: 5 callbacks suppressed [ 89.245799][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 89.296322][ T6435] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.141'. [ 89.629212][ T6449] netlink: 'syz.3.146': attribute type 2 has an invalid length. [ 89.653257][ T6449] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 89.754697][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'. [ 90.027233][ T6462] netlink: 84 bytes leftover after parsing attributes in process `syz.3.150'. [ 90.175443][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.154'. [ 90.472019][ T6477] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.155'. [ 90.785380][ T6491] netlink: 'syz.1.160': attribute type 2 has an invalid length. [ 90.793194][ T6491] netlink: 'syz.1.160': attribute type 1 has an invalid length. [ 90.845057][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 91.045617][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 91.253328][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 91.264036][ T6514] ip6gretap0: entered promiscuous mode [ 91.331572][ T6514] macsec1: entered promiscuous mode [ 91.374810][ T6514] macsec1: entered allmulticast mode [ 91.380496][ T6514] ip6gretap0: entered allmulticast mode [ 91.501778][ T6523] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.171'. [ 91.643146][ T6527] netlink: 'syz.4.173': attribute type 1 has an invalid length. [ 91.905443][ T6539] netlink: 'syz.0.176': attribute type 2 has an invalid length. [ 91.949541][ T6539] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 92.246644][ T6556] netlink: 'syz.3.181': attribute type 2 has an invalid length. [ 92.265542][ T6556] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 92.597337][ T6574] lo: entered promiscuous mode [ 92.624736][ T5885] lo speed is unknown, defaulting to 1000 [ 93.243061][ T6603] netlink: 'syz.3.196': attribute type 2 has an invalid length. [ 93.250968][ T6603] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 93.591309][ T6619] ÿÿÿÿÿÿ7: renamed from vlan1 (while UP) [ 93.786920][ T6625] geneve2: entered promiscuous mode [ 93.792183][ T6625] geneve2: entered allmulticast mode [ 93.879083][ T6634] netlink: 'syz.2.208': attribute type 2 has an invalid length. [ 93.894847][ T6634] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 94.159716][ T6643] xt_TCPMSS: Only works on TCP SYN packets [ 94.175855][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.186375][ T6639] team0: Port device bond1 added [ 94.483929][ T6653] __nla_validate_parse: 11 callbacks suppressed [ 94.483949][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 94.607687][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 94.897586][ T6668] netlink: 'syz.2.224': attribute type 2 has an invalid length. [ 94.923323][ T6668] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 95.093612][ T6676] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.226'. [ 95.387213][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 95.636308][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 95.678767][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 95.858765][ T6711] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.899771][ T6715] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.241'. [ 95.912710][ T6711] bridge0: port 3(batadv1) entered blocking state [ 95.924359][ T6711] bridge0: port 3(batadv1) entered disabled state [ 95.936896][ T6711] batadv1: entered allmulticast mode [ 95.953941][ T6711] batadv1: entered promiscuous mode [ 95.959914][ T6711] bridge0: port 3(batadv1) entered blocking state [ 95.966534][ T6711] bridge0: port 3(batadv1) entered forwarding state [ 96.050513][ T6721] vxcan1 speed is unknown, defaulting to 1000 [ 96.349022][ T3557] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 96.358562][ T3557] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 96.673304][ T6721] lo speed is unknown, defaulting to 1000 [ 96.935901][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 97.014790][ T6752] validate_nla: 4 callbacks suppressed [ 97.014809][ T6752] netlink: 'syz.1.255': attribute type 2 has an invalid length. [ 97.049835][ T6752] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 97.287669][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 97.346410][ T6767] ipt_REJECT: TCP_RESET invalid for non-tcp [ 97.806172][ T6788] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.267'. [ 98.138568][ T6798] netlink: 'syz.1.271': attribute type 2 has an invalid length. [ 98.188658][ T6798] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 98.433828][ T6804] xt_nfacct: accounting object `syz1' does not exists [ 98.445963][ T6807] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 99.793333][ T6854] __nla_validate_parse: 4 callbacks suppressed [ 99.793351][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.293'. [ 99.846523][ T6854] netlink: 'syz.4.293': attribute type 18 has an invalid length. [ 99.889343][ T6859] netlink: 'syz.1.295': attribute type 2 has an invalid length. [ 99.897163][ T6859] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 100.206568][ T6872] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 100.284090][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 100.347170][ T6872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.363218][ T6882] lo speed is unknown, defaulting to 1000 [ 100.435389][ T6882] lo speed is unknown, defaulting to 1000 [ 100.443016][ T6882] lo speed is unknown, defaulting to 1000 [ 100.528899][ T6882] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.578364][ T6882] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 100.651911][ T6882] lo speed is unknown, defaulting to 1000 [ 100.690865][ T6882] lo speed is unknown, defaulting to 1000 [ 100.726660][ T6882] lo speed is unknown, defaulting to 1000 [ 100.733480][ T6882] lo speed is unknown, defaulting to 1000 [ 100.781716][ T6882] lo speed is unknown, defaulting to 1000 [ 101.026354][ T6908] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.312'. [ 101.285035][ T6923] netlink: 'syz.2.318': attribute type 9 has an invalid length. [ 101.677436][ T6940] netlink: 288 bytes leftover after parsing attributes in process `syz.2.323'. [ 101.905210][ T6949] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.327'. [ 102.035712][ T6955] tipc: Failed to obtain node identity [ 102.046126][ T6955] tipc: Enabling of bearer rejected, failed to enable media [ 102.098638][ T6956] netlink: 'syz.0.329': attribute type 2 has an invalid length. [ 102.119734][ T6956] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 102.214933][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.332'. [ 102.243653][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.332'. [ 102.256661][ T6965] netlink: 'syz.3.333': attribute type 9 has an invalid length. [ 102.276548][ T6963] veth1: entered promiscuous mode [ 102.290584][ T6963] veth1: left promiscuous mode [ 102.437587][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 102.703567][ T6979] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.341'. [ 102.967929][ T6991] netlink: 'syz.1.345': attribute type 8 has an invalid length. [ 103.167123][ T7003] netlink: 256 bytes leftover after parsing attributes in process `syz.1.349'. [ 103.220482][ T7003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.228166][ T7003] IPv6: NLM_F_CREATE should be set when creating new route [ 103.235504][ T7003] IPv6: NLM_F_CREATE should be set when creating new route [ 103.245818][ T6999] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 103.319894][ T7009] netlink: 'syz.0.350': attribute type 1 has an invalid length. [ 103.345536][ T7004] bond1: (slave gretap1): making interface the new active one [ 103.367202][ T7004] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 103.396795][ T7011] IPVS: length: 78 != 8 [ 103.549135][ T7004] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 103.559079][ T7008] vxcan1 speed is unknown, defaulting to 1000 [ 103.559868][ T9] IPVS: starting estimator thread 0... [ 103.715875][ T7020] IPVS: using max 25 ests per chain, 60000 per kthread [ 104.231049][ T7008] lo speed is unknown, defaulting to 1000 [ 104.296931][ T7046] netlink: 'syz.1.359': attribute type 8 has an invalid length. [ 104.494266][ T7055] vxcan1 speed is unknown, defaulting to 1000 [ 104.576054][ T7056] Bluetooth: MGMT ver 1.23 [ 104.605901][ T7056] batadv0: entered promiscuous mode [ 104.633296][ T7056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.718299][ T7061] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 104.769787][ T7008] lo speed is unknown, defaulting to 1000 [ 104.845402][ T7063] __nla_validate_parse: 10 callbacks suppressed [ 104.845422][ T7063] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.366'. [ 105.273800][ T7066] syzkaller0: entered promiscuous mode [ 105.280429][ T7066] syzkaller0: entered allmulticast mode [ 105.291966][ T7049] batadv0: left promiscuous mode [ 105.335537][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.367'. [ 105.457792][ T7055] lo speed is unknown, defaulting to 1000 [ 105.467781][ T7073] netlink: 'syz.0.369': attribute type 2 has an invalid length. [ 105.761742][ T7087] netlink: 'syz.0.371': attribute type 32 has an invalid length. [ 107.405947][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 107.406099][ T7055] lo speed is unknown, defaulting to 1000 [ 107.722111][ T7106] netlink: 'syz.0.375': attribute type 2 has an invalid length. [ 107.730959][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 107.862708][ T7110] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 107.863834][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 107.880266][ T7110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 107.918444][ T7112] netlink: 596 bytes leftover after parsing attributes in process `syz.3.378'. [ 107.945912][ T7112] trusted_key: syz.3.378 sent an empty control message without MSG_MORE. [ 108.250948][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 108.824378][ T7137] netlink: 'syz.4.389': attribute type 2 has an invalid length. [ 108.842605][ T7139] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 108.854690][ T7137] netlink: 'syz.4.389': attribute type 1 has an invalid length. [ 108.880384][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 109.169319][ T7151] netlink: 'syz.2.396': attribute type 2 has an invalid length. [ 109.177509][ T7151] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 109.230926][ T7149] vxcan1 speed is unknown, defaulting to 1000 [ 109.389190][ T7149] lo speed is unknown, defaulting to 1000 [ 109.457306][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'. [ 109.576873][ T7149] lo speed is unknown, defaulting to 1000 [ 109.750865][ T7171] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 110.147545][ T7188] netlink: 'syz.3.411': attribute type 2 has an invalid length. [ 110.174692][ T7188] netlink: 'syz.3.411': attribute type 1 has an invalid length. [ 110.265212][ T7194] vxcan1 speed is unknown, defaulting to 1000 [ 110.540905][ T7199] IPv6: sit1: Disabled Multicast RS [ 110.641019][ T7199] sit1: entered allmulticast mode [ 110.642667][ T7213] __nla_validate_parse: 2 callbacks suppressed [ 110.642684][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'. [ 110.906894][ T7194] lo speed is unknown, defaulting to 1000 [ 110.927134][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 111.559548][ T7229] vxcan1 speed is unknown, defaulting to 1000 [ 111.868693][ T7264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 112.079894][ T7194] lo speed is unknown, defaulting to 1000 [ 112.861610][ T7301] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.444'. [ 112.876446][ T7299] validate_nla: 4 callbacks suppressed [ 112.876463][ T7299] netlink: 'syz.2.442': attribute type 2 has an invalid length. [ 112.913105][ T7229] lo speed is unknown, defaulting to 1000 [ 112.934657][ T7299] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 113.014751][ T7303] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 113.049173][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.445'. [ 113.218829][ T7311] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.447'. [ 113.231995][ T7194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.414'. [ 113.278115][ T7311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.688931][ T7332] bridge0: entered promiscuous mode [ 113.698523][ T7332] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 113.752004][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.760579][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.824592][ T7229] lo speed is unknown, defaulting to 1000 [ 114.060489][ T7340] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 114.087521][ T7340] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 114.172246][ T7352] FAULT_INJECTION: forcing a failure. [ 114.172246][ T7352] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.185939][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.1.461 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0 [ 114.185961][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.185975][ T7352] Call Trace: [ 114.185981][ T7352] [ 114.185987][ T7352] dump_stack_lvl+0x241/0x360 [ 114.186018][ T7352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.186036][ T7352] ? __pfx__printk+0x10/0x10 [ 114.186053][ T7352] ? __pfx_lock_release+0x10/0x10 [ 114.186096][ T7352] should_fail_ex+0x40a/0x550 [ 114.186120][ T7352] _copy_from_user+0x2d/0xb0 [ 114.186139][ T7352] copy_msghdr_from_user+0xae/0x680 [ 114.186163][ T7352] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 114.186180][ T7352] ? __fget_files+0x2a/0x410 [ 114.186202][ T7352] ? __fget_files+0x2a/0x410 [ 114.186227][ T7352] __sys_sendmsg+0x209/0x350 [ 114.186253][ T7352] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.186278][ T7352] ? do_sys_openat2+0x17a/0x1d0 [ 114.186317][ T7352] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.186337][ T7352] ? do_syscall_64+0x100/0x230 [ 114.186356][ T7352] ? do_syscall_64+0xb6/0x230 [ 114.186374][ T7352] do_syscall_64+0xf3/0x230 [ 114.186391][ T7352] ? clear_bhb_loop+0x35/0x90 [ 114.186414][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.186440][ T7352] RIP: 0033:0x7fc04a98d169 [ 114.186459][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.186472][ T7352] RSP: 002b:00007fc04b778038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.186491][ T7352] RAX: ffffffffffffffda RBX: 00007fc04aba5fa0 RCX: 00007fc04a98d169 [ 114.186502][ T7352] RDX: 0000000000008084 RSI: 0000400000000200 RDI: 0000000000000003 [ 114.186513][ T7352] RBP: 00007fc04b778090 R08: 0000000000000000 R09: 0000000000000000 [ 114.186523][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.186532][ T7352] R13: 0000000000000000 R14: 00007fc04aba5fa0 R15: 00007fff3360be88 [ 114.186557][ T7352] [ 114.602765][ T7342] team0 (unregistering): Port device team_slave_0 removed [ 114.623149][ T7342] team0 (unregistering): Port device team_slave_1 removed [ 114.814811][ T7371] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 114.824740][ T7371] netlink: 92 bytes leftover after parsing attributes in process `syz.0.465'. [ 114.841856][ T7372] pim6reg1: entered promiscuous mode [ 114.849666][ T7372] pim6reg1: entered allmulticast mode [ 115.475450][ T7386] netlink: 'syz.1.471': attribute type 2 has an invalid length. [ 115.483143][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 115.572341][ T7393] FAULT_INJECTION: forcing a failure. [ 115.572341][ T7393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.594891][ T7393] CPU: 1 UID: 0 PID: 7393 Comm: syz.3.473 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0 [ 115.594914][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.594923][ T7393] Call Trace: [ 115.594929][ T7393] [ 115.594935][ T7393] dump_stack_lvl+0x241/0x360 [ 115.594960][ T7393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.594977][ T7393] ? __pfx__printk+0x10/0x10 [ 115.594993][ T7393] ? __pfx_lock_release+0x10/0x10 [ 115.595032][ T7393] should_fail_ex+0x40a/0x550 [ 115.595056][ T7393] _copy_from_user+0x2d/0xb0 [ 115.595074][ T7393] move_addr_to_kernel+0x82/0x150 [ 115.595094][ T7393] copy_msghdr_from_user+0x43e/0x680 [ 115.595119][ T7393] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 115.595137][ T7393] ? __fget_files+0x2a/0x410 [ 115.595161][ T7393] ? __fget_files+0x2a/0x410 [ 115.595188][ T7393] __sys_sendmsg+0x209/0x350 [ 115.595208][ T7393] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.595234][ T7393] ? do_sys_openat2+0x17a/0x1d0 [ 115.595277][ T7393] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.595298][ T7393] ? do_syscall_64+0x100/0x230 [ 115.595319][ T7393] ? do_syscall_64+0xb6/0x230 [ 115.595340][ T7393] do_syscall_64+0xf3/0x230 [ 115.595357][ T7393] ? clear_bhb_loop+0x35/0x90 [ 115.595380][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.595399][ T7393] RIP: 0033:0x7f7e2c38d169 [ 115.595414][ T7393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.595426][ T7393] RSP: 002b:00007f7e2d151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.595444][ T7393] RAX: ffffffffffffffda RBX: 00007f7e2c5a5fa0 RCX: 00007f7e2c38d169 [ 115.595455][ T7393] RDX: 0000000000008084 RSI: 0000400000000200 RDI: 0000000000000003 [ 115.595465][ T7393] RBP: 00007f7e2d151090 R08: 0000000000000000 R09: 0000000000000000 [ 115.595474][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.595483][ T7393] R13: 0000000000000000 R14: 00007f7e2c5a5fa0 R15: 00007ffcc0ea0df8 [ 115.595506][ T7393] [ 115.931394][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 116.263550][ T7397] vxcan1 speed is unknown, defaulting to 1000 [ 116.269303][ T7410] dccp_invalid_packet: P.Data Offset(0) too small [ 116.662827][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 116.994071][ T7432] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.006681][ T7397] lo speed is unknown, defaulting to 1000 [ 117.214988][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 117.295612][ T7439] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.341278][ T7397] lo speed is unknown, defaulting to 1000 [ 117.401225][ T7439] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 117.562465][ T7448] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 117.578381][ T7446] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 117.586380][ T7446] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 117.598571][ T7452] FAULT_INJECTION: forcing a failure. [ 117.598571][ T7452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.656803][ T7452] CPU: 1 UID: 0 PID: 7452 Comm: syz.4.492 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0 [ 117.656828][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.656838][ T7452] Call Trace: [ 117.656844][ T7452] [ 117.656851][ T7452] dump_stack_lvl+0x241/0x360 [ 117.656878][ T7452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.656896][ T7452] ? __pfx__printk+0x10/0x10 [ 117.656918][ T7452] ? snprintf+0xda/0x120 [ 117.656944][ T7452] should_fail_ex+0x40a/0x550 [ 117.656979][ T7452] _copy_to_user+0x31/0xb0 [ 117.657001][ T7452] simple_read_from_buffer+0xca/0x150 [ 117.657022][ T7452] proc_fail_nth_read+0x1e9/0x250 [ 117.657043][ T7452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.657064][ T7452] ? rw_verify_area+0x243/0x630 [ 117.657080][ T7452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.657103][ T7452] vfs_read+0x1f8/0xb40 [ 117.657121][ T7452] ? fdget_pos+0x254/0x320 [ 117.657142][ T7452] ? __pfx___mutex_lock+0x10/0x10 [ 117.657161][ T7452] ? __pfx_vfs_read+0x10/0x10 [ 117.657174][ T7452] ? do_sys_openat2+0x17a/0x1d0 [ 117.657199][ T7452] ? __fget_files+0x2a/0x410 [ 117.657221][ T7452] ? __fget_files+0x395/0x410 [ 117.657239][ T7452] ? __fget_files+0x2a/0x410 [ 117.657266][ T7452] ksys_read+0x18f/0x2b0 [ 117.657285][ T7452] ? __pfx_ksys_read+0x10/0x10 [ 117.657301][ T7452] ? do_syscall_64+0x100/0x230 [ 117.657323][ T7452] ? do_syscall_64+0xb6/0x230 [ 117.657344][ T7452] do_syscall_64+0xf3/0x230 [ 117.657362][ T7452] ? clear_bhb_loop+0x35/0x90 [ 117.657386][ T7452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.657406][ T7452] RIP: 0033:0x7fcd9098bb7c [ 117.657420][ T7452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.657434][ T7452] RSP: 002b:00007fcd91817030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.657452][ T7452] RAX: ffffffffffffffda RBX: 00007fcd90ba5fa0 RCX: 00007fcd9098bb7c [ 117.657464][ T7452] RDX: 000000000000000f RSI: 00007fcd918170a0 RDI: 0000000000000005 [ 117.657474][ T7452] RBP: 00007fcd91817090 R08: 0000000000000000 R09: 0000000000000000 [ 117.657483][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.657493][ T7452] R13: 0000000000000000 R14: 00007fcd90ba5fa0 R15: 00007ffcaffabff8 [ 117.657519][ T7452] [ 117.898357][ T7455] netlink: 168 bytes leftover after parsing attributes in process `syz.1.494'. [ 118.770581][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 118.834668][ T7484] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 118.842685][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.504'. [ 119.285097][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 119.461546][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 119.529708][ T7497] pimreg: entered allmulticast mode [ 119.627959][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 119.826692][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 119.901446][ T7517] vxcan1 speed is unknown, defaulting to 1000 [ 120.147287][ T7528] netlink: 'syz.4.518': attribute type 2 has an invalid length. [ 120.155158][ T7528] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 120.386464][ T7535] bridge0: port 4(vlan3) entered blocking state [ 120.394904][ T7535] bridge0: port 4(vlan3) entered disabled state [ 120.402386][ T7535] vlan3: entered allmulticast mode [ 120.410159][ T7535] team0: entered allmulticast mode [ 120.417537][ T7535] team_slave_0: entered allmulticast mode [ 120.433492][ T7535] team_slave_1: entered allmulticast mode [ 120.441540][ T7535] vlan3: entered promiscuous mode [ 120.454717][ T7535] team0: entered promiscuous mode [ 120.473709][ T7535] team_slave_0: entered promiscuous mode [ 120.492041][ T7535] team_slave_1: entered promiscuous mode [ 120.510067][ T7535] bridge0: port 4(vlan3) entered blocking state [ 120.517446][ T7535] bridge0: port 4(vlan3) entered forwarding state [ 120.596981][ T7517] lo speed is unknown, defaulting to 1000 [ 120.701824][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 121.197385][ T7517] lo speed is unknown, defaulting to 1000 [ 121.343178][ T7560] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 121.439104][ T7566] netlink: 'syz.0.532': attribute type 21 has an invalid length. [ 121.513383][ T7566] netlink: 'syz.0.532': attribute type 6 has an invalid length. [ 121.530040][ T7566] __nla_validate_parse: 1 callbacks suppressed [ 121.530056][ T7566] netlink: 156 bytes leftover after parsing attributes in process `syz.0.532'. [ 121.676825][ T7560] vxcan1 speed is unknown, defaulting to 1000 [ 122.007277][ T7560] lo speed is unknown, defaulting to 1000 [ 122.061444][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 122.503930][ T7560] lo speed is unknown, defaulting to 1000 [ 122.646648][ T7602] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 122.807173][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 122.857770][ T7611] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 122.866978][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.547'. [ 123.134079][ T7619] bond0: (slave bridge0): Releasing backup interface [ 123.213723][ T7619] bridge0: port 4(vlan3) entered disabled state [ 123.220251][ T7619] bridge0: port 3(batadv1) entered disabled state [ 123.226896][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.234166][ T7619] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.257616][ T7619] bridge0: left promiscuous mode [ 123.328504][ T7619] bridge_slave_0: left allmulticast mode [ 123.342329][ T7619] bridge_slave_0: left promiscuous mode [ 123.355723][ T7619] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.409757][ T7619] bridge_slave_1: left allmulticast mode [ 123.423877][ T7619] bridge_slave_1: left promiscuous mode [ 123.432213][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.447957][ T7619] bond0: (slave bond_slave_0): Releasing backup interface [ 123.481791][ T7619] bond0: (slave bond_slave_1): Releasing backup interface [ 123.500660][ T7619] team_slave_0: left promiscuous mode [ 123.510039][ T7619] team_slave_0: left allmulticast mode [ 123.527975][ T7619] team0: Port device team_slave_0 removed [ 123.534454][ T7619] team_slave_1: left promiscuous mode [ 123.540563][ T7619] team_slave_1: left allmulticast mode [ 123.553803][ T7619] team0: Port device team_slave_1 removed [ 123.561762][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.571084][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.581747][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.590037][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.618750][ T7619] batadv1: left allmulticast mode [ 123.623932][ T7619] batadv1: left promiscuous mode [ 123.630009][ T7619] bridge0: port 3(batadv1) entered disabled state [ 123.643186][ T7619] vlan3: left allmulticast mode [ 123.649420][ T7619] team0: left allmulticast mode [ 123.655203][ T7619] vlan3: left promiscuous mode [ 123.660050][ T7619] team0: left promiscuous mode [ 123.666000][ T7619] bridge0: port 4(vlan3) entered disabled state [ 123.711118][ T7617] team0: Mode changed to "loadbalance" [ 124.045751][ T7649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.555'. [ 124.057089][ T7651] netlink: 32 bytes leftover after parsing attributes in process `syz.1.555'. [ 124.217450][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 124.326796][ T7657] netlink: 32 bytes leftover after parsing attributes in process `syz.2.559'. [ 124.328897][ T7666] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 124.354596][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.562'. [ 124.475391][ T7672] sch_tbf: burst 7164 is lower than device lo mtu (11337746) ! [ 124.557799][ T7678] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 124.590953][ T7678] netlink: 224 bytes leftover after parsing attributes in process `syz.3.566'. [ 124.750998][ T7682] ipvlan2: entered promiscuous mode [ 125.629923][ T7726] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 125.714140][ T7726] veth0_vlan: left promiscuous mode [ 125.737984][ T7726] veth0_vlan: entered promiscuous mode [ 125.758379][ T7726] team0: Device veth0_vlan failed to register rx_handler [ 126.372719][ T7755] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 126.703255][ T7769] __nla_validate_parse: 1 callbacks suppressed [ 126.703275][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 126.892270][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 127.203749][ T7780] vxcan1 speed is unknown, defaulting to 1000 [ 127.583663][ T7785] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.608'. [ 127.679692][ T7780] lo speed is unknown, defaulting to 1000 [ 127.709672][ T7785] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.608'. [ 127.725127][ T7787] netlink: 'syz.2.609': attribute type 10 has an invalid length. [ 127.731459][ T7790] vxcan1 speed is unknown, defaulting to 1000 [ 127.735122][ T7785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.770142][ T7798] bridge0: port 1(vlan4) entered blocking state [ 127.795068][ T7798] bridge0: port 1(vlan4) entered disabled state [ 127.848171][ T7798] vlan4: entered allmulticast mode [ 127.861266][ T7798] vlan4: entered promiscuous mode [ 127.863106][ T7789] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 128.123900][ T7780] lo speed is unknown, defaulting to 1000 [ 128.276589][ T7790] lo speed is unknown, defaulting to 1000 [ 128.306499][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 128.662198][ T7790] lo speed is unknown, defaulting to 1000 [ 128.751113][ T7822] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 128.785637][ T7822] macsec1: entered promiscuous mode [ 128.790317][ T7817] netlink: 152 bytes leftover after parsing attributes in process `syz.2.617'. [ 128.791051][ T7822] macsec1: entered allmulticast mode [ 128.840496][ T7822] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 128.927963][ T7825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.619'. [ 128.937325][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.619'. [ 128.957828][ T7825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.619'. [ 128.974865][ T7825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.619'. [ 129.157292][ T7823] bond0: (slave team0): Releasing backup interface [ 129.198049][ T7823] team0 (unregistering): Port device team_slave_0 removed [ 129.221872][ T7823] team0 (unregistering): Port device team_slave_1 removed [ 129.242285][ T7823] team0 (unregistering): Port device bond1 removed [ 129.292210][ T7821] vxcan1 speed is unknown, defaulting to 1000 [ 129.697863][ T7821] lo speed is unknown, defaulting to 1000 [ 129.991461][ T7846] batadv_slave_1: entered promiscuous mode [ 130.020615][ T7846] Bluetooth: MGMT ver 1.23 [ 130.060257][ T7843] batadv_slave_1: left promiscuous mode [ 130.151602][ T7821] lo speed is unknown, defaulting to 1000 [ 131.958831][ T7940] __nla_validate_parse: 5 callbacks suppressed [ 131.958848][ T7940] netlink: 900 bytes leftover after parsing attributes in process `syz.4.643'. [ 132.076918][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 132.084002][ T7938] vxcan1 speed is unknown, defaulting to 1000 [ 132.101719][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.644'. [ 132.143593][ T7949] vlan2: entered allmulticast mode [ 132.200525][ T7949] bond0: entered allmulticast mode [ 132.245277][ T7949] bond_slave_0: entered allmulticast mode [ 132.271465][ T7949] bond_slave_1: entered allmulticast mode [ 132.337590][ T7949] bond0: left allmulticast mode [ 132.342605][ T7949] bond_slave_0: left allmulticast mode [ 132.352999][ T7949] bond_slave_1: left allmulticast mode [ 132.498903][ T7968] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 132.745816][ T7973] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 132.782916][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 132.807747][ T7938] lo speed is unknown, defaulting to 1000 [ 133.046255][ T7988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.653'. [ 133.209588][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.452303][ T7938] lo speed is unknown, defaulting to 1000 [ 133.606460][ T8006] netlink: 'syz.0.658': attribute type 9 has an invalid length. [ 133.866108][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 133.960719][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 133.975557][ T8015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.661'. [ 134.452925][ T8039] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.736611][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 135.142559][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 135.175665][ T8069] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 135.213819][ T8063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.565707][ T8081] bond2 (unregistering): Released all slaves [ 135.603161][ T8082] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 135.638573][ T8088] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 135.722518][ T8089] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 136.228077][ T8115] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 136.326432][ T8117] sctp: [Deprecated]: syz.0.690 (pid 8117) Use of int in max_burst socket option. [ 136.326432][ T8117] Use struct sctp_assoc_value instead [ 136.379247][ T8117] netlink: 'syz.0.690': attribute type 10 has an invalid length. [ 136.480877][ T8117] veth0_vlan: left promiscuous mode [ 136.527113][ T8117] veth0_vlan: entered promiscuous mode [ 136.583795][ T8117] team0: Device veth0_vlan failed to register rx_handler [ 136.748658][ T5851] Bluetooth: hci4: link tx timeout [ 136.755874][ T5851] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.766227][ T5851] Bluetooth: hci4: link tx timeout [ 136.771544][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.846432][ T8144] bridge_slave_0: left allmulticast mode [ 136.852498][ T8144] bridge_slave_0: left promiscuous mode [ 136.858891][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.883151][ T8144] bridge_slave_1: left allmulticast mode [ 136.894803][ T8144] bridge_slave_1: left promiscuous mode [ 136.910689][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.941513][ T8144] bond0: (slave bond_slave_0): Releasing backup interface [ 136.983926][ T8144] bond0: (slave bond_slave_1): Releasing backup interface [ 137.008340][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.016762][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.028943][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.042244][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.070075][ T8144] bond1: (slave gretap1): Releasing active interface [ 137.081581][ T5887] vxcan1 speed is unknown, defaulting to 1000 [ 137.118385][ T8158] vlan1: entered allmulticast mode [ 137.123732][ T8158] bond0: entered allmulticast mode [ 137.129948][ T8158] bridge0: port 1(vlan1) entered blocking state [ 137.136951][ T8158] bridge0: port 1(vlan1) entered disabled state [ 137.145862][ T8158] vlan1: entered promiscuous mode [ 137.151055][ T8158] bond0: entered promiscuous mode [ 137.566920][ T5887] IPVS: starting estimator thread 0... [ 137.664655][ T8184] IPVS: using max 25 ests per chain, 60000 per kthread [ 137.817393][ T8196] siw: device registration error -23 [ 138.472105][ T8213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.560254][ T8221] sctp: [Deprecated]: syz.4.726 (pid 8221) Use of int in max_burst socket option deprecated. [ 138.560254][ T8221] Use struct sctp_assoc_value instead [ 138.739817][ T8213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.740373][ T8232] __nla_validate_parse: 6 callbacks suppressed [ 138.740387][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 138.804826][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 139.479641][ T8213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.841522][ T8213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.936194][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 140.017013][ T8294] netlink: 'syz.4.742': attribute type 1 has an invalid length. [ 140.045172][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'. [ 140.240878][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 140.352894][ T8213] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.427036][ T8213] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.514062][ T8213] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.601639][ T8213] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.978405][ T8323] xt_hashlimit: max too large, truncated to 1048576 [ 141.108160][ T8332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 141.159252][ T8332] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 141.184264][ T8334] batadv0: entered promiscuous mode [ 141.215508][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 141.235640][ T8333] batadv0: left promiscuous mode [ 141.412179][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 141.778735][ T8378] batadv0: entered promiscuous mode [ 141.801162][ T8378] FAULT_INJECTION: forcing a failure. [ 141.801162][ T8378] name failslab, interval 1, probability 0, space 0, times 1 [ 141.834754][ T8378] CPU: 0 UID: 0 PID: 8378 Comm: syz.3.761 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0 [ 141.834788][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.834798][ T8378] Call Trace: [ 141.834803][ T8378] [ 141.834810][ T8378] dump_stack_lvl+0x241/0x360 [ 141.834836][ T8378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.834853][ T8378] ? __pfx__printk+0x10/0x10 [ 141.834881][ T8378] should_fail_ex+0x40a/0x550 [ 141.834908][ T8378] should_failslab+0xac/0x100 [ 141.834931][ T8378] kmem_cache_alloc_node_noprof+0x77/0x380 [ 141.834952][ T8378] ? __alloc_skb+0x1c3/0x440 [ 141.834966][ T8378] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 141.834993][ T8378] __alloc_skb+0x1c3/0x440 [ 141.835013][ T8378] ? __pfx___alloc_skb+0x10/0x10 [ 141.835030][ T8378] ? if_nlmsg_size+0x755/0x7b0 [ 141.835046][ T8378] ? if_nlmsg_size+0x540/0x7b0 [ 141.835068][ T8378] rtmsg_ifinfo_build_skb+0x84/0x260 [ 141.835086][ T8378] ? kasan_save_track+0x3f/0x80 [ 141.835120][ T8378] rtmsg_ifinfo+0x91/0x1b0 [ 141.835145][ T8378] __dev_notify_flags+0xf7/0x400 [ 141.835167][ T8378] ? __pfx___dev_notify_flags+0x10/0x10 [ 141.835183][ T8378] ? __pfx_netdev_info+0x10/0x10 [ 141.835215][ T8378] __dev_set_promiscuity+0x152/0x5a0 [ 141.835240][ T8378] ? __kasan_kmalloc+0x98/0xb0 [ 141.835266][ T8378] dev_set_promiscuity+0x51/0xe0 [ 141.835292][ T8378] packet_mc_add+0x607/0xb40 [ 141.835326][ T8378] packet_setsockopt+0x1170/0x1870 [ 141.835350][ T8378] ? __pfx_packet_setsockopt+0x10/0x10 [ 141.835383][ T8378] ? aa_sk_perm+0x96d/0xab0 [ 141.835413][ T8378] ? __pfx_aa_sk_perm+0x10/0x10 [ 141.835435][ T8378] ? __pfx_lock_acquire+0x10/0x10 [ 141.835455][ T8378] ? aa_sock_opt_perm+0x79/0x120 [ 141.835482][ T8378] ? __pfx_packet_setsockopt+0x10/0x10 [ 141.835499][ T8378] do_sock_setsockopt+0x3af/0x720 [ 141.835522][ T8378] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 141.835544][ T8378] ? __fget_files+0x395/0x410 [ 141.835564][ T8378] ? __fget_files+0x2a/0x410 [ 141.835592][ T8378] __x64_sys_setsockopt+0x1ee/0x280 [ 141.835615][ T8378] do_syscall_64+0xf3/0x230 [ 141.835634][ T8378] ? clear_bhb_loop+0x35/0x90 [ 141.835657][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.835677][ T8378] RIP: 0033:0x7f7e2c38d169 [ 141.835691][ T8378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.835703][ T8378] RSP: 002b:00007f7e2d151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 141.835721][ T8378] RAX: ffffffffffffffda RBX: 00007f7e2c5a5fa0 RCX: 00007f7e2c38d169 [ 141.835733][ T8378] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 141.835743][ T8378] RBP: 00007f7e2d151090 R08: 0000000000000010 R09: 0000000000000000 [ 141.835753][ T8378] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000001 [ 141.835763][ T8378] R13: 0000000000000000 R14: 00007f7e2c5a5fa0 R15: 00007ffcc0ea0df8 [ 141.835790][ T8378] [ 141.843370][ T8377] batadv0: left promiscuous mode [ 142.370205][ T8394] batadv0: entered promiscuous mode [ 142.404361][ T8387] batadv0: left promiscuous mode [ 142.603945][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 142.773626][ T8411] x_tables: duplicate underflow at hook 2 [ 143.003057][ T8428] batadv0: entered promiscuous mode [ 143.019783][ T8427] batadv0: left promiscuous mode [ 143.297331][ T8439] vxcan1 speed is unknown, defaulting to 1000 [ 143.309822][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 143.377563][ T8449] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 143.738860][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.781'. [ 143.782425][ T8459] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 143.811324][ T8458] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.841699][ T8458] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.880221][ T8458] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.968264][ T8458] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.074968][ T8439] lo speed is unknown, defaulting to 1000 [ 144.497542][ T8439] lo speed is unknown, defaulting to 1000 [ 144.657604][ T8486] openvswitch: netlink: Missing key (keys=40, expected=100) [ 144.691798][ T8486] netlink: 'syz.3.785': attribute type 11 has an invalid length. [ 145.172877][ T8502] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 145.181550][ T8502] netlink: 224 bytes leftover after parsing attributes in process `syz.0.791'. [ 145.701690][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 145.947338][ T8521] netlink: 'syz.4.797': attribute type 15 has an invalid length. [ 145.956962][ T8521] netlink: 666 bytes leftover after parsing attributes in process `syz.4.797'. [ 146.279612][ T8531] netlink: 'syz.2.802': attribute type 2 has an invalid length. [ 146.292959][ T8531] netlink: 'syz.2.802': attribute type 1 has an invalid length. [ 146.419037][ T8535] netlink: 48 bytes leftover after parsing attributes in process `syz.1.801'. [ 146.437034][ T8537] netlink: 'syz.2.804': attribute type 2 has an invalid length. [ 146.596278][ T8540] SET target dimension over the limit! [ 146.658169][ T8544] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.805'. [ 146.679444][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 146.714706][ T8544] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 147.310142][ T8571] netlink: 'syz.0.814': attribute type 2 has an invalid length. [ 147.318885][ T8571] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 147.479032][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 147.545122][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 147.579998][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 147.584298][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.817'. [ 148.176217][ T8607] netlink: 'syz.1.827': attribute type 2 has an invalid length. [ 148.194808][ T8607] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 148.302467][ T8618] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 148.643233][ T8643] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 148.711038][ T8643] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 148.982746][ T8663] netlink: 'syz.0.842': attribute type 2 has an invalid length. [ 149.605747][ T8690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.143379][ T8719] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 150.608193][ T8732] __nla_validate_parse: 28 callbacks suppressed [ 150.608213][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 150.832713][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 151.171475][ T8749] validate_nla: 3 callbacks suppressed [ 151.171496][ T8749] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 151.245489][ T8749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.345497][ T8751] bond2: (slave ip6gretap1): making interface the new active one [ 151.366963][ T8751] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 151.452918][ T8755] tc_dump_action: action bad kind [ 151.670573][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.876'. [ 151.778598][ T8773] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 152.023646][ T8780] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.879'. [ 152.520276][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 152.609765][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 152.675052][ T8797] netlink: 'syz.4.884': attribute type 5 has an invalid length. [ 152.682839][ T8797] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.884'. [ 152.706170][ T8798] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.707632][ T8797] netlink: 'syz.4.884': attribute type 64 has an invalid length. [ 152.715819][ T8798] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.732132][ T8798] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.741400][ T8798] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.776169][ T8798] vxlan0: entered promiscuous mode [ 152.793900][ T8798] vxlan0: entered allmulticast mode [ 153.001669][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.890'. [ 153.012741][ T8814] x_tables: unsorted underflow at hook 2 [ 153.326866][ T8828] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.348342][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.892'. [ 153.396964][ T8832] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 153.407865][ T8832] macvtap1: entered promiscuous mode [ 153.413399][ T8832] macvtap1: entered allmulticast mode [ 153.430461][ T8832] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 153.450073][ T8832] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 153.473017][ T8832] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 153.520609][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 153.621549][ T5887] lo speed is unknown, defaulting to 1000 [ 153.633425][ T9] lo speed is unknown, defaulting to 1000 [ 155.251611][ T8904] vxcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 155.602146][ T8918] vlan2: entered promiscuous mode [ 155.642991][ T8918] bridge0: entered promiscuous mode [ 155.684226][ T8918] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 155.885587][ T8927] __nla_validate_parse: 2 callbacks suppressed [ 155.885605][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 156.641916][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.952'. [ 156.653052][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.952'. [ 156.695282][ T8970] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 157.067821][ T9] IPVS: starting estimator thread 0... [ 157.186463][ T8992] IPVS: using max 22 ests per chain, 52800 per kthread [ 157.678483][ T9027] bridge0: port 3(syz_tun) entered blocking state [ 157.689929][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 157.694831][ T9027] bridge0: port 3(syz_tun) entered disabled state [ 157.715698][ T9027] syz_tun: entered allmulticast mode [ 157.723299][ T9027] syz_tun: entered promiscuous mode [ 157.730072][ T9027] bridge0: port 3(syz_tun) entered blocking state [ 157.737156][ T9027] bridge0: port 3(syz_tun) entered forwarding state [ 157.859022][ T9031] xt_CT: No such helper "pptp" [ 157.951103][ T9041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.986'. [ 158.819838][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 159.137905][ T9098] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 159.186671][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 159.196013][ T9094] bridge0: port 2(bridge_slave_1) entered listening state [ 159.217744][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.869807][ T9135] tipc: Started in network mode [ 159.899223][ T9135] tipc: Node identity 080211000001, cluster identity 4711 [ 159.918356][ T9135] tipc: Enabled bearer , priority 31 [ 160.111970][ T9147] dccp_invalid_packet: P.Data Offset(216) too large [ 160.142700][ T9148] syzkaller1: entered promiscuous mode [ 160.153647][ T9148] syzkaller1: entered allmulticast mode [ 160.347234][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 160.417399][ T4958] smc: removing ib device syz2 [ 160.446044][ T5885] vxcan1 speed is unknown, defaulting to 1000 [ 160.501941][ T9160] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1036'. [ 160.522014][ T9161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1037'. [ 160.565188][ T9160] netlink: zone id is out of range [ 160.570432][ T9160] netlink: zone id is out of range [ 160.594691][ T9160] netlink: zone id is out of range [ 160.599872][ T9160] netlink: zone id is out of range [ 160.644618][ T9160] netlink: zone id is out of range [ 160.679380][ T9160] netlink: zone id is out of range [ 160.700831][ T9160] netlink: zone id is out of range [ 160.734524][ T9160] netlink: zone id is out of range [ 160.739691][ T9160] netlink: zone id is out of range [ 161.036825][ T5887] tipc: Node number set to 134418688 [ 163.014206][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.044859][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.998954][ T9318] netlink: 'syz.1.1107': attribute type 10 has an invalid length. [ 164.016135][ T9318] __nla_validate_parse: 1 callbacks suppressed [ 164.016154][ T9318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1107'. [ 164.076875][ T9318] team0: Port device geneve0 added [ 164.139948][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 165.583029][ T9404] sctp: [Deprecated]: syz.4.1143 (pid 9404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.583029][ T9404] Use struct sctp_sack_info instead [ 165.780851][ T9412] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1146'. [ 168.841887][ T9593] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 168.861853][ T9593] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 169.233789][ T9610] syzkaller1: entered promiscuous mode [ 169.244646][ T9610] syzkaller1: entered allmulticast mode [ 169.383302][ T9616] net_ratelimit: 12 callbacks suppressed [ 169.383322][ T9616] netlink: del zone limit has 4 unknown bytes [ 170.089582][ T9655] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 170.111054][ T9655] netlink: 'syz.2.1253': attribute type 10 has an invalid length. [ 170.136361][ T9655] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 170.159069][ T9655] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 170.175107][ T9655] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 170.199064][ T9655] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.215179][ T9654] delete_channel: no stack [ 171.128590][ T9711] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 172.202126][ T9777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1309'. [ 175.826048][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 176.262218][ T9988] syzkaller1: entered promiscuous mode [ 176.271253][ T9988] syzkaller1: entered allmulticast mode [ 176.765717][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 176.920010][T10021] syzkaller1: entered promiscuous mode [ 176.926028][T10021] syzkaller1: entered allmulticast mode [ 177.001532][T10025] rdma_rxe: rxe_newlink: failed to add bond0 [ 177.584858][T10051] syzkaller1: entered promiscuous mode [ 177.590845][T10051] syzkaller1: entered allmulticast mode [ 177.906488][T10066] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 178.632786][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1461'. [ 179.303932][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 179.333439][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 179.895141][T10181] syzkaller1: entered promiscuous mode [ 179.910148][T10181] syzkaller1: entered allmulticast mode [ 179.989292][T10186] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 180.326287][T10201] lo speed is unknown, defaulting to 1000 [ 180.400269][ T7907] syzkaller0: tun_net_xmit 76 [ 180.423882][ T7907] syzkaller0: tun_net_xmit 48 [ 180.429567][ T5885] syzkaller0: tun_net_xmit 76 [ 180.462005][T10205] syzkaller0: create flow: hash 124088646 index 1 [ 180.479093][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 180.494849][ T5885] syzkaller0: tun_net_xmit 76 [ 180.527449][T10209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1510'. [ 180.629016][T10202] syzkaller0: delete flow: hash 124088646 index 1 [ 183.319816][T10201] lo speed is unknown, defaulting to 1000 [ 183.322966][T10214] syzkaller1: entered promiscuous mode [ 183.331448][T10214] syzkaller1: entered allmulticast mode [ 183.910745][T10275] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1538'. [ 183.931571][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.985043][T10279] syzkaller1: entered promiscuous mode [ 184.005987][T10279] syzkaller1: entered allmulticast mode [ 184.347342][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 184.629015][T10314] syzkaller1: entered promiscuous mode [ 184.643783][T10314] syzkaller1: entered allmulticast mode [ 185.305166][T10354] syzkaller1: entered promiscuous mode [ 185.311071][T10354] syzkaller1: entered allmulticast mode [ 185.339234][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'. [ 185.770792][T10384] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 186.038674][T10398] syzkaller1: entered promiscuous mode [ 186.051743][T10398] syzkaller1: entered allmulticast mode [ 186.121880][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.719722][T10433] syzkaller1: entered promiscuous mode [ 186.735406][T10433] syzkaller1: entered allmulticast mode [ 187.407965][T10470] syzkaller1: entered promiscuous mode [ 187.431885][T10470] syzkaller1: entered allmulticast mode [ 187.722704][T10489] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 188.098963][T10512] syzkaller1: entered promiscuous mode [ 188.105005][T10512] syzkaller1: entered allmulticast mode [ 188.309009][T10522] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 188.692118][T10541] syzkaller1: entered promiscuous mode [ 188.707526][T10541] syzkaller1: entered allmulticast mode [ 189.345267][T10576] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 189.440255][T10581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1678'. [ 189.453919][T10581] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 189.761053][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 189.858525][T10600] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 190.539259][T10639] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1706'. [ 190.728077][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 190.741191][T10649] gretap0: entered promiscuous mode [ 190.747321][T10647] syzkaller1: entered promiscuous mode [ 190.773944][T10647] syzkaller1: entered allmulticast mode [ 191.312909][ T5915] lo speed is unknown, defaulting to 1000 [ 191.468459][T10686] syzkaller1: entered promiscuous mode [ 191.474234][T10686] syzkaller1: entered allmulticast mode [ 191.611961][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 191.619843][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 191.627124][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 191.842958][T10709] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 191.898094][T10713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1741'. [ 192.022766][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'. [ 192.083774][T10721] syzkaller1: entered promiscuous mode [ 192.113581][T10721] syzkaller1: entered allmulticast mode [ 192.319981][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 192.628026][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 193.123396][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1774'. [ 193.197174][T10784] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1775'. [ 193.980988][T10821] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 194.647170][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.283726][T10891] __nla_validate_parse: 2 callbacks suppressed [ 195.283744][T10891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1825'. [ 196.536481][T10956] syzkaller0: create flow: hash 124088646 index 1 [ 196.572927][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 196.573371][ T7899] syzkaller0: tun_net_xmit 76 [ 196.599523][ T5885] syzkaller0: tun_net_xmit 76 [ 196.610178][ T7899] syzkaller0: tun_net_xmit 48 [ 196.721202][T10952] syzkaller0: delete flow: hash 124088646 index 1 [ 196.903270][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 198.803398][T10971] syzkaller1: entered promiscuous mode [ 198.809455][T10971] syzkaller1: entered allmulticast mode [ 199.479236][T11014] syzkaller1: entered promiscuous mode [ 199.485646][T11014] syzkaller1: entered allmulticast mode [ 199.849878][ T7902] tipc: Resetting bearer [ 200.459991][T11047] netlink: 'syz.2.1893': attribute type 2 has an invalid length. [ 200.468837][T11047] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 201.037287][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'. [ 201.211601][T11070] syzkaller1: entered promiscuous mode [ 201.218453][T11070] syzkaller1: entered allmulticast mode [ 201.581430][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1912'. [ 201.675221][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 201.840432][T11101] syzkaller1: entered promiscuous mode [ 201.849467][T11101] syzkaller1: entered allmulticast mode [ 202.105258][T11113] netlink: 'syz.1.1924': attribute type 2 has an invalid length. [ 202.113124][T11113] netlink: 'syz.1.1924': attribute type 1 has an invalid length. [ 202.139618][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1926'. [ 202.515160][T11137] syzkaller1: entered promiscuous mode [ 202.530971][T11137] syzkaller1: entered allmulticast mode [ 202.787204][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 202.884395][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1946'. [ 203.271763][T11180] syzkaller1: entered promiscuous mode [ 203.283835][T11180] syzkaller1: entered allmulticast mode [ 203.429611][T11188] netlink: 'syz.4.1958': attribute type 2 has an invalid length. [ 203.444718][T11188] netlink: 'syz.4.1958': attribute type 1 has an invalid length. [ 203.613179][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'. [ 203.891620][T11209] syzkaller1: entered promiscuous mode [ 203.904758][T11209] syzkaller1: entered allmulticast mode [ 203.966492][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 204.041267][T11214] netlink: 'syz.4.1971': attribute type 2 has an invalid length. [ 204.049138][T11214] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 204.161948][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 204.190071][T11217] netlink: 'syz.2.1973': attribute type 2 has an invalid length. [ 204.198027][T11217] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 204.441212][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'. [ 204.480467][T11241] syzkaller1: entered promiscuous mode [ 204.486738][T11241] syzkaller1: entered allmulticast mode [ 205.100818][T11269] syzkaller1: entered promiscuous mode [ 205.106750][T11269] syzkaller1: entered allmulticast mode [ 206.705049][T11342] validate_nla: 2 callbacks suppressed [ 206.705067][T11342] netlink: 'syz.2.2031': attribute type 2 has an invalid length. [ 206.732956][T11342] netlink: 'syz.2.2031': attribute type 1 has an invalid length. [ 207.100100][T11358] __nla_validate_parse: 2 callbacks suppressed [ 207.100113][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2037'. [ 207.404982][T11374] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 207.445330][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 207.720059][T11386] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2049'. [ 208.019103][T11400] netlink: 'syz.0.2056': attribute type 2 has an invalid length. [ 208.027879][T11400] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 208.163945][T11404] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 208.395703][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 208.914210][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'. [ 209.368333][T11454] syzkaller1: entered promiscuous mode [ 209.382481][T11454] syzkaller1: entered allmulticast mode [ 209.468526][T11458] netlink: 'syz.0.2083': attribute type 2 has an invalid length. [ 209.481813][T11458] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 209.852487][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2089'. [ 210.204327][T11490] netlink: 'syz.3.2097': attribute type 21 has an invalid length. [ 210.220579][T11490] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2097'. [ 210.231628][T11490] netlink: 'syz.3.2097': attribute type 5 has an invalid length. [ 210.238088][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 210.247628][T11490] netlink: 'syz.3.2097': attribute type 6 has an invalid length. [ 210.271076][T11490] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2097'. [ 210.282319][T11494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2099'. [ 210.300365][T11490] ------------[ cut here ]------------ [ 210.306502][T11490] RTNL: assertion failed at net/core/dev.c (1770) [ 210.328420][T11490] WARNING: CPU: 0 PID: 11490 at net/core/dev.c:1770 dev_setup_tc+0x315/0x360 [ 210.337744][T11490] Modules linked in: [ 210.341788][T11490] CPU: 0 UID: 0 PID: 11490 Comm: syz.3.2097 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0 [ 210.352703][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.362860][T11490] RIP: 0010:dev_setup_tc+0x315/0x360 [ 210.368363][T11490] Code: cc 49 89 ee e8 5c d5 f7 f7 c6 05 40 35 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba ea 06 00 00 e8 bc 91 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff [ 210.389479][T11490] RSP: 0018:ffffc9001c9feed0 EFLAGS: 00010246 [ 210.395708][T11490] RAX: 40c66533cdf46400 RBX: 0000000000000000 RCX: 0000000000080000 [ 210.403724][T11490] RDX: ffffc9000cff9000 RSI: 00000000000047ef RDI: 00000000000047f0 [ 210.412082][T11490] RBP: ffff88807d72c008 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 210.420391][T11490] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffffc9001c9ff070 [ 210.428551][T11490] R13: ffffffff8d4ab240 R14: ffff88807d72c008 R15: ffff88807d72c000 [ 210.436620][T11490] FS: 00007f7e2d1516c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 210.445708][T11490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.452317][T11490] CR2: 000000110c352b1d CR3: 000000007e470000 CR4: 00000000003526f0 [ 210.460419][T11490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.468552][T11490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 210.476698][T11490] Call Trace: [ 210.480016][T11490] [ 210.482984][T11490] ? __warn+0x165/0x4d0 [ 210.488008][T11490] ? dev_setup_tc+0x315/0x360 [ 210.492936][T11490] ? report_bug+0x2b3/0x500 [ 210.497547][T11490] ? dev_setup_tc+0x315/0x360 [ 210.502257][T11490] ? handle_bug+0x60/0x90 [ 210.506686][T11490] ? exc_invalid_op+0x1a/0x50 [ 210.511387][T11490] ? asm_exc_invalid_op+0x1a/0x20 [ 210.516516][T11490] ? __warn_printk+0x292/0x360 [ 210.521457][T11490] ? dev_setup_tc+0x315/0x360 [ 210.526266][T11490] nf_flow_table_offload_setup+0x2ff/0x710 [ 210.532106][T11490] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 210.538362][T11490] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 210.544821][T11490] ? __pfx_lock_release+0x10/0x10 [ 210.549939][T11490] ? nft_pernet+0x23/0x240 [ 210.554373][T11490] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 210.560738][T11490] nft_register_flowtable_net_hooks+0x24c/0x570 [ 210.567150][T11490] nf_tables_newflowtable+0x19f4/0x23d0 [ 210.572757][T11490] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 210.578775][T11490] ? nfnl_pernet+0x23/0x240 [ 210.583376][T11490] ? __pfx_lock_release+0x10/0x10 [ 210.588465][T11490] ? __skb_clone+0x5c/0x6c0 [ 210.592998][T11490] ? __nla_parse+0x40/0x60 [ 210.597510][T11490] nfnetlink_rcv+0x14e3/0x2ab0 [ 210.602346][T11490] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 210.607655][T11490] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.612900][T11490] ? skb_clone+0x240/0x390 [ 210.617415][T11490] ? __pfx_lock_release+0x10/0x10 [ 210.622693][T11490] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.628007][T11490] netlink_unicast+0x7f6/0x990 [ 210.632803][T11490] ? __pfx_netlink_unicast+0x10/0x10 [ 210.638320][T11490] ? __virt_addr_valid+0x45f/0x530 [ 210.643452][T11490] ? __phys_addr_symbol+0x2f/0x70 [ 210.648671][T11490] ? __check_object_size+0x47a/0x730 [ 210.653994][T11490] netlink_sendmsg+0x8de/0xcb0 [ 210.658981][T11490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.664304][T11490] ? aa_sock_msg_perm+0x91/0x160 [ 210.669386][T11490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.674743][T11490] __sock_sendmsg+0x221/0x270 [ 210.679459][T11490] ____sys_sendmsg+0x53a/0x860 [ 210.684252][T11490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.689635][T11490] ? __fget_files+0x2a/0x410 [ 210.694242][T11490] ? __fget_files+0x2a/0x410 [ 210.699007][T11490] __sys_sendmsg+0x269/0x350 [ 210.703620][T11490] ? __pfx_futex_wake+0x10/0x10 [ 210.708544][T11490] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.713685][T11490] ? kfree+0x4e/0x430 [ 210.717784][T11490] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.724245][T11490] ? do_syscall_64+0x100/0x230 [ 210.729149][T11490] ? do_syscall_64+0xb6/0x230 [ 210.733877][T11490] do_syscall_64+0xf3/0x230 [ 210.738449][T11490] ? clear_bhb_loop+0x35/0x90 [ 210.743154][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.749123][T11490] RIP: 0033:0x7f7e2c38d169 [ 210.753544][T11490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.773544][T11490] RSP: 002b:00007f7e2d151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.782050][T11490] RAX: ffffffffffffffda RBX: 00007f7e2c5a5fa0 RCX: 00007f7e2c38d169 [ 210.790130][T11490] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000003 [ 210.798213][T11490] RBP: 00007f7e2c40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.806406][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.814601][T11490] R13: 0000000000000000 R14: 00007f7e2c5a5fa0 R15: 00007ffcc0ea0df8 [ 210.822630][T11490] [ 210.825935][T11490] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.833239][T11490] CPU: 0 UID: 0 PID: 11490 Comm: syz.3.2097 Not tainted 6.14.0-rc5-syzkaller-01152-g48c57a49c50a #0 [ 210.844017][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.854103][T11490] Call Trace: [ 210.857403][T11490] [ 210.860356][T11490] dump_stack_lvl+0x241/0x360 [ 210.865061][T11490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.870343][T11490] ? __pfx__printk+0x10/0x10 [ 210.874958][T11490] ? vscnprintf+0x5d/0x90 [ 210.879556][T11490] panic+0x349/0x880 [ 210.883448][T11490] ? __warn+0x174/0x4d0 [ 210.887604][T11490] ? __pfx_panic+0x10/0x10 [ 210.892033][T11490] __warn+0x344/0x4d0 [ 210.896009][T11490] ? dev_setup_tc+0x315/0x360 [ 210.900690][T11490] report_bug+0x2b3/0x500 [ 210.905016][T11490] ? dev_setup_tc+0x315/0x360 [ 210.909692][T11490] handle_bug+0x60/0x90 [ 210.913845][T11490] exc_invalid_op+0x1a/0x50 [ 210.918354][T11490] asm_exc_invalid_op+0x1a/0x20 [ 210.923204][T11490] RIP: 0010:dev_setup_tc+0x315/0x360 [ 210.928509][T11490] Code: cc 49 89 ee e8 5c d5 f7 f7 c6 05 40 35 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba ea 06 00 00 e8 bc 91 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff [ 210.948119][T11490] RSP: 0018:ffffc9001c9feed0 EFLAGS: 00010246 [ 210.954188][T11490] RAX: 40c66533cdf46400 RBX: 0000000000000000 RCX: 0000000000080000 [ 210.962157][T11490] RDX: ffffc9000cff9000 RSI: 00000000000047ef RDI: 00000000000047f0 [ 210.970124][T11490] RBP: ffff88807d72c008 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 210.978180][T11490] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffffc9001c9ff070 [ 210.986147][T11490] R13: ffffffff8d4ab240 R14: ffff88807d72c008 R15: ffff88807d72c000 [ 210.994121][T11490] ? __warn_printk+0x292/0x360 [ 210.998896][T11490] nf_flow_table_offload_setup+0x2ff/0x710 [ 211.004899][T11490] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 211.011071][T11490] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 211.017415][T11490] ? __pfx_lock_release+0x10/0x10 [ 211.022452][T11490] ? nft_pernet+0x23/0x240 [ 211.026866][T11490] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 211.033205][T11490] nft_register_flowtable_net_hooks+0x24c/0x570 [ 211.039462][T11490] nf_tables_newflowtable+0x19f4/0x23d0 [ 211.045021][T11490] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 211.050915][T11490] ? nfnl_pernet+0x23/0x240 [ 211.055419][T11490] ? __pfx_lock_release+0x10/0x10 [ 211.060450][T11490] ? __skb_clone+0x5c/0x6c0 [ 211.064962][T11490] ? __nla_parse+0x40/0x60 [ 211.069377][T11490] nfnetlink_rcv+0x14e3/0x2ab0 [ 211.074162][T11490] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 211.079303][T11490] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.084587][T11490] ? skb_clone+0x240/0x390 [ 211.089003][T11490] ? __pfx_lock_release+0x10/0x10 [ 211.094122][T11490] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.099321][T11490] netlink_unicast+0x7f6/0x990 [ 211.104085][T11490] ? __pfx_netlink_unicast+0x10/0x10 [ 211.109365][T11490] ? __virt_addr_valid+0x45f/0x530 [ 211.114486][T11490] ? __phys_addr_symbol+0x2f/0x70 [ 211.119505][T11490] ? __check_object_size+0x47a/0x730 [ 211.124792][T11490] netlink_sendmsg+0x8de/0xcb0 [ 211.129564][T11490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.134904][T11490] ? aa_sock_msg_perm+0x91/0x160 [ 211.139848][T11490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.145130][T11490] __sock_sendmsg+0x221/0x270 [ 211.149810][T11490] ____sys_sendmsg+0x53a/0x860 [ 211.154596][T11490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.159874][T11490] ? __fget_files+0x2a/0x410 [ 211.164466][T11490] ? __fget_files+0x2a/0x410 [ 211.169094][T11490] __sys_sendmsg+0x269/0x350 [ 211.173704][T11490] ? __pfx_futex_wake+0x10/0x10 [ 211.178564][T11490] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.183727][T11490] ? kfree+0x4e/0x430 [ 211.187756][T11490] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.194122][T11490] ? do_syscall_64+0x100/0x230 [ 211.198902][T11490] ? do_syscall_64+0xb6/0x230 [ 211.203610][T11490] do_syscall_64+0xf3/0x230 [ 211.208120][T11490] ? clear_bhb_loop+0x35/0x90 [ 211.212839][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.218755][T11490] RIP: 0033:0x7f7e2c38d169 [ 211.223183][T11490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.242794][T11490] RSP: 002b:00007f7e2d151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.251216][T11490] RAX: ffffffffffffffda RBX: 00007f7e2c5a5fa0 RCX: 00007f7e2c38d169 [ 211.259183][T11490] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000003 [ 211.267148][T11490] RBP: 00007f7e2c40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.275114][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.283075][T11490] R13: 0000000000000000 R14: 00007f7e2c5a5fa0 R15: 00007ffcc0ea0df8 [ 211.291054][T11490] [ 211.294317][T11490] Kernel Offset: disabled [ 211.298742][T11490] Rebooting in 86400 seconds..