last executing test programs: 1m25.227994441s ago: executing program 2 (id=1659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$kcm(0x29, 0x7, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b07, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0x1, 0x800, 0x9}, &(0x7f0000000300)=0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100027bd7000000000000200000008000c01050000000400d1"], 0x20}}, 0x40004) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="29012dbd7000fbdbdf251900000008000300", @ANYRES32=r12, @ANYBLOB], 0x24}}, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4000048) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 1m24.80936652s ago: executing program 4 (id=1063): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x44, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r0, &(0x7f0000000580)=@qipcrtr, &(0x7f0000000400)=0x80, 0x80000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000640)={0x43, 0x4, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0802400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c0001400000000000000009090003"], 0x130}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000007010400000000000000000008000009ec000073"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, 0x5, 0x4, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f0000000380)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000000), 0x16, 0x0, &(0x7f0000000340)="21d711d189d3ddcb8251cb64f9ce5d8e1cdf381b4b5e"}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000280)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1m12.308382544s ago: executing program 2 (id=1659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$kcm(0x29, 0x7, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b07, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0x1, 0x800, 0x9}, &(0x7f0000000300)=0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100027bd7000000000000200000008000c01050000000400d1"], 0x20}}, 0x40004) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="29012dbd7000fbdbdf251900000008000300", @ANYRES32=r12, @ANYBLOB], 0x24}}, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4000048) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 1m9.807022494s ago: executing program 4 (id=1063): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x44, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r0, &(0x7f0000000580)=@qipcrtr, &(0x7f0000000400)=0x80, 0x80000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000640)={0x43, 0x4, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0802400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c0001400000000000000009090003"], 0x130}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000007010400000000000000000008000009ec000073"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, 0x5, 0x4, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f0000000380)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000000), 0x16, 0x0, &(0x7f0000000340)="21d711d189d3ddcb8251cb64f9ce5d8e1cdf381b4b5e"}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000280)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 57.052316825s ago: executing program 2 (id=1659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$kcm(0x29, 0x7, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b07, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0x1, 0x800, 0x9}, &(0x7f0000000300)=0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100027bd7000000000000200000008000c01050000000400d1"], 0x20}}, 0x40004) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="29012dbd7000fbdbdf251900000008000300", @ANYRES32=r12, @ANYBLOB], 0x24}}, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4000048) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 55.762291295s ago: executing program 4 (id=1063): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x44, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r0, &(0x7f0000000580)=@qipcrtr, &(0x7f0000000400)=0x80, 0x80000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000640)={0x43, 0x4, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0802400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c0001400000000000000009090003"], 0x130}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000007010400000000000000000008000009ec000073"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, 0x5, 0x4, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f0000000380)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000000), 0x16, 0x0, &(0x7f0000000340)="21d711d189d3ddcb8251cb64f9ce5d8e1cdf381b4b5e"}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000280)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 41.243323834s ago: executing program 2 (id=1659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$kcm(0x29, 0x7, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b07, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0x1, 0x800, 0x9}, &(0x7f0000000300)=0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100027bd7000000000000200000008000c01050000000400d1"], 0x20}}, 0x40004) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="29012dbd7000fbdbdf251900000008000300", @ANYRES32=r12, @ANYBLOB], 0x24}}, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4000048) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 40.673376159s ago: executing program 4 (id=1063): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x44, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r0, &(0x7f0000000580)=@qipcrtr, &(0x7f0000000400)=0x80, 0x80000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000640)={0x43, 0x4, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0802400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c0001400000000000000009090003"], 0x130}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000007010400000000000000000008000009ec000073"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, 0x5, 0x4, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f0000000380)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000000), 0x16, 0x0, &(0x7f0000000340)="21d711d189d3ddcb8251cb64f9ce5d8e1cdf381b4b5e"}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000280)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 26.598532559s ago: executing program 2 (id=1659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$kcm(0x29, 0x7, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b07, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0x1, 0x800, 0x9}, &(0x7f0000000300)=0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100027bd7000000000000200000008000c01050000000400d1"], 0x20}}, 0x40004) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="29012dbd7000fbdbdf251900000008000300", @ANYRES32=r12, @ANYBLOB], 0x24}}, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4000048) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 25.690836367s ago: executing program 4 (id=1063): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x44, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r0, &(0x7f0000000580)=@qipcrtr, &(0x7f0000000400)=0x80, 0x80000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000640)={0x43, 0x4, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0802400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c0001400000000000000009090003"], 0x130}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000007010400000000000000000008000009ec000073"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, 0x5, 0x4, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f0000000380)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000000), 0x16, 0x0, &(0x7f0000000340)="21d711d189d3ddcb8251cb64f9ce5d8e1cdf381b4b5e"}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000280)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 12.792126372s ago: executing program 2 (id=1659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$kcm(0x29, 0x7, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b07, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0x1, 0x800, 0x9}, &(0x7f0000000300)=0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100027bd7000000000000200000008000c01050000000400d1"], 0x20}}, 0x40004) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="29012dbd7000fbdbdf251900000008000300", @ANYRES32=r12, @ANYBLOB], 0x24}}, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4000048) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 11.654751339s ago: executing program 4 (id=1063): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x44, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r0, &(0x7f0000000580)=@qipcrtr, &(0x7f0000000400)=0x80, 0x80000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000640)={0x43, 0x4, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0802400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c0001400000000000000009090003"], 0x130}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000007010400000000000000000008000009ec000073"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, 0x5, 0x4, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f0000000380)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000000), 0x16, 0x0, &(0x7f0000000340)="21d711d189d3ddcb8251cb64f9ce5d8e1cdf381b4b5e"}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000280)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2.158012527s ago: executing program 0 (id=2274): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1d8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x170, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x15c, 0x6, [@m_ife={0xec, 0xb, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @random="03413659759d"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3e02, 0xee3b, 0x0, 0x7, 0x2}, 0x1}}]}, {0x5e, 0x6, "3892c4d2eb75728faed731b8708e6a332c67f787554cd94e623e16d97c61b46e68bb870c2d118091088f054adac17d7c528bd9fdc78737e563da64ae9f9ae4b20319575d2587f7b4156dafbfd08c6028c8754d8f885472bca677"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x6c, 0x3ffd, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8000}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_RATE={0x6, 0x5, {0x0, 0x40}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x1d8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.014259409s ago: executing program 0 (id=2275): unshare(0x26020480) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2000400) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014001280080001006772650008000280"], 0x34}}, 0x0) 1.860881111s ago: executing program 0 (id=2276): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00'], 0x14) r1 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000010c0)) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x20000000}, 0x20) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a34000000050a01010000000000000000050000000900030073797a300000000008000b40000000030c0002400000000000000002140000001100010009c25227b0273a00000000000000000500000a67b28c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000885}, 0x8001) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x80, '\x00', r4, r5, 0x5, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x3e, &(0x7f00000024c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e10100", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000840)={r5, 0x0, 0x43, 0x0, &(0x7f0000000580)="bb6ff14354aaf17350a0152d21677c8c35aa87b9ba9526a1a8ecef5ccbd42eb8974e57c986ed7b80fd064b7117ef6764a6ea1fd9976d2eb37cb09b053d649b4baaf162", 0x0, 0x55a9fb38, 0x0, 0x90, 0x0, &(0x7f0000000780)="34b25c491a9c1bbfc0e9b5732edbdfe867f8c8331650fdad0984613fdf86195a6f91e7a7c84c20d31a244a9e5490a328e1afb1ccf7e49951912ca71314e74c05bd161e06150cdb78de6660b675e34e3339c8c66908b3d4d978e73faa1cb3ce1a21e8cfc5f69978842473772bab86723d5999d33e31a11e9bdefaf0fca5b8cf57c581dc0108a899cf5a3ddcc41a3fbe5d"}, 0x50) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4a00, 0x0, 0x6645, 0x60004}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20008, 0x9}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80000003}]}, 0x50}}, 0x4008040) 1.714278607s ago: executing program 0 (id=2278): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2, 0x0, r4}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000380)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}}, 0x0, 0x2000}, &(0x7f0000000200)=0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x48}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000880) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=0x1, r8, 0x2f, 0x28, 0x0, @void, @void, @void, @value}, 0x20) ioctl$FS_IOC_SETFLAGS(r7, 0xc0189436, &(0x7f0000000140)) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000005e9b17e8224dc3ce1108cda227309afeebe5fd9592b5ef330aad89d97ad5afdc57ac47630757da2175fb43df670b217f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffff00"/28], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.42242631s ago: executing program 3 (id=2280): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "989ca1b454c9269b", "3427eaa38f8b107055407e73b4e7eeb85d02c0f4a03fcdbd52a701d48e654d3d", "5fe3e16a", "3d90c72cd3dfe2b2"}, 0x38) close(r1) 1.286439027s ago: executing program 1 (id=2281): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0xa9, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x1c, r4, 0x505, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004024}, 0x4000) 1.235627265s ago: executing program 3 (id=2282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20000}, [@ringbuf_query, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0xa7, 0xc4, &(0x7f0000000180)=""/196, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x7, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x2338, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0xd}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x2, 0x1c, 0x68, 0x0, 0x7, 0x11, 0x0, @multicast2, @private=0xa010100}, {0x4e22, 0x4e22, 0x8}}}}}}, 0x2e) 1.065540444s ago: executing program 1 (id=2283): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3, 0x2}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) socketpair$unix(0x1, 0x9a533dd748264263, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}], 0x1, 0x7ffeedc3, 0x0) 890.495362ms ago: executing program 1 (id=2284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f1277fffffffffffffff5edaa15f377fb214e20fda08000000d67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4010010) r3 = socket$inet(0x2, 0x3, 0x8) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 889.876472ms ago: executing program 3 (id=2285): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = socket(0x2a, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x5, {{0x2, 0x4e24, @multicast1}}}, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 800.612778ms ago: executing program 1 (id=2286): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001"], 0x34}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1a00000, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000540)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x100000000, 0x97e, 0x1350}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0xffdf) ioctl$sock_netdev_private(r5, 0x89ff, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00'}, 0x18) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca90000ff00000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900), 0x4) syz_emit_ethernet(0xe0, &(0x7f0000000c00)={@link_local, @multicast, @void, {@x25={0x805, {0x2, 0x14, 0xb, "fae5c649642d845f2562a79c3424939c383030cae3b35da5b75f620a4196b28e4b0276a97e1331b494208675d7e2bda97889a633b49c03351697b5dc742d51404e6a7025650bc28daf0c338104e1d5bdee4cd2368c4eff53ba75c811cb3f1d7ee10d85562d94e2f29078ca641965ccfdfd6412232811cc98133c5cee1ade123708111576f3b21a0cb4cca500dcc7d5316cbe17e923000984f0ce466cd3efb68830fc6ca1c44172f26eae41d44dd13f364d92d4ce053d847c0120c670d9e05fe4900d8926ed99cd80ed23235724c0f8"}}}}, &(0x7f0000000d00)={0x1, 0x3, [0xc68, 0x66c, 0xf10, 0x6cf]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x45, 0x18}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000100)={r8, @broadcast, @multicast2}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r9, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r9, 0x0, 0x20000000}, 0x20) 740.378718ms ago: executing program 3 (id=2287): syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@delqdisc={0x398, 0x25, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0xfff2}, {0xfff1, 0x9}, {0xf, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9b}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x7, 0x7, 0x0, 0xfffffff9, 0xb, 0x1}}, {0x6, 0x2, [0xd]}}, {{0x1c, 0x1, {0x8, 0x4, 0x3, 0x4, 0x0, 0x8001, 0x2, 0x7}}, {0x12, 0x2, [0x6, 0x9, 0x7, 0xef, 0x7, 0xaca, 0xfeff]}}, {{0x1c, 0x1, {0x8, 0x6, 0xd, 0x4, 0x0, 0x100, 0x347003dc, 0x4}}, {0xc, 0x2, [0x8000, 0x7, 0x400, 0x1e5]}}, {{0x1c, 0x1, {0x9, 0x74, 0x8, 0x7d, 0x0, 0x705, 0xff, 0x7}}, {0x12, 0x2, [0x4, 0x3, 0x6, 0x101, 0x7, 0x9, 0x1]}}, {{0x1c, 0x1, {0x81, 0xfb, 0x302, 0x2, 0x2, 0x5, 0x8001, 0x7}}, {0x12, 0x2, [0xffde, 0x4, 0x81, 0x200, 0x3fc, 0x9, 0x3c2]}}, {{0x1c, 0x1, {0x4, 0x5, 0x1, 0x3f4, 0x1, 0x3, 0x7f2, 0x5}}, {0xe, 0x2, [0x9, 0x0, 0xee, 0x17, 0x1]}}, {{0x1c, 0x1, {0x0, 0x6, 0x9, 0x5, 0x1, 0x7f, 0x9, 0x4}}, {0xc, 0x2, [0x8, 0x5, 0xff, 0x33]}}, {{0x1c, 0x1, {0x5, 0x56, 0xf625, 0x7, 0x1, 0x400, 0x8, 0x7}}, {0x12, 0x2, [0x1ff, 0x6d, 0x7, 0x7ff, 0x5, 0xc3, 0xd2be]}}, {{0x1c, 0x1, {0x1, 0xff, 0xdb, 0x100, 0x1, 0x6, 0xffffffff, 0x1}}, {0x6, 0x2, [0x85f]}}]}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x40}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1ff}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf79d}, @TCA_FQ_PIE_QUANTUM={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x19}]}}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xa, 0x4, 0x6, 0x0, 0x1, 0x7, 0x1}}, {0x6, 0x2, [0x40]}}, {{0x1c, 0x1, {0xc, 0x9, 0x7, 0x59, 0x0, 0x63, 0x1, 0x3}}, {0xa, 0x2, [0x9, 0x6600, 0x3]}}, {{0x1c, 0x1, {0x0, 0xfa, 0x7ff, 0x8, 0x0, 0x0, 0x3, 0xa}}, {0x18, 0x2, [0x80, 0x0, 0x9, 0x101, 0x41c, 0x55, 0x2b, 0x7f, 0x6, 0x67ed]}}, {{0x1c, 0x1, {0xf8, 0xed, 0x2, 0x1, 0x1, 0xfffffe01, 0xcd7, 0x3}}, {0xa, 0x2, [0x6, 0xb905, 0x200]}}, {{0x1c, 0x1, {0xa, 0x9b, 0x2a, 0x2, 0x1, 0x6, 0x1, 0x5}}, {0xe, 0x2, [0x5, 0x40, 0xcdb6, 0x3, 0x8]}}, {{0x1c, 0x1, {0x8, 0x1, 0x84a, 0xf, 0x2, 0xffff8001, 0xffffffff, 0x5}}, {0xe, 0x2, [0x2, 0x101, 0x40, 0xffff, 0x8]}}, {{0x1c, 0x1, {0x40, 0x7, 0xd, 0xfbfffffa, 0x1, 0x7, 0x9, 0x2}}, {0x8, 0x2, [0x7, 0x2]}}, {{0x1c, 0x1, {0x7, 0x3, 0x1000, 0x3, 0x2, 0x372, 0x2, 0x1}}, {0x6, 0x2, [0x2c]}}, {{0x1c, 0x1, {0x2, 0x0, 0xfffa, 0x8, 0x1, 0x1000, 0xce6, 0x4}}, {0xc, 0x2, [0x3ff, 0x5, 0x8, 0x5]}}]}]}, 0x398}}, 0x898) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_BT_SECURITY(r3, 0x111, 0xe, 0x0, 0x20001f00) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) recvmsg$unix(r4, &(0x7f0000000300)={&(0x7f00000000c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)=""/29, 0x1d}], 0x1, &(0x7f00000001c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x22) 736.568853ms ago: executing program 0 (id=2288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8948, &(0x7f0000000580)={'bond0\x00', 0x9}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x1b0, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYBLOB="eb060673e545c59388cf720b222f29757a0e50941206f3fb6e7a7bd210001e76dc9838a7167ad42989d4f628a32359e6fedee0e20d877685ee75e31deb22de59135b925e7bb41ef3dcfe37f91cf4c03076ddbfcc5edb0c221b975a38dedfda147db5f0c7d23eb8715a728f07aa35c3dec297d9402c406a579b43e3a1c69567ba0ff9bdeb7a8b824d5ccf9dee0d187fc5951770bca0e675f6172daccf38d753866e3cf6272dbf9cb3f68253e2b8cbdbd7c350287d4c5c22f81b492d342a", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r10 = socket$inet(0x2, 0x3, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x38, r12, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @initial, @device_b, @broadcast}, @a_msdu}}]}, 0x38}}, 0x0) r14 = socket$kcm(0x10, 0x2, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r16, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0, 0x0) getsockopt(r14, 0x800, 0x8, &(0x7f00000001c0)=""/29, &(0x7f0000000240)=0x1d) close(r10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="140004006e69637666300000000000000000000008000500060000000c0017"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 526.263193ms ago: executing program 3 (id=2289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x4, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x148}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000507000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800003a2a5bce7500000000000000000018110000473f05ae0e67b03c9ed432ee9d94e52c19963efcfbeea7448aa3b1f9e5158d2f9a7bbc310773b3aff9c280c36b58e97cc752a34e063dc5ed901843e1fc607c9168afaf3ac6ac248b30066f528db5d561ca18c42041e2f347fc8a2ba9ab14295dcdaa5f76f9e18219aeb63cb710f7639fa54aff31d00dbcf84a2bdec162d41069d56f38c9a63a2e3311241637ea11a6555dedd9d29fef12484f7b2cb918e347bfc0dad4ac5c22862f07c47070e6bc285bb9db9acb7b0a05209e5da12674c65454d3fd205f6f3db9491a9bb3e8f01929c653b57ebe5608e6", @ANYRESOCT=r2, @ANYRES64=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0xd4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 464.501424ms ago: executing program 1 (id=2290): sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1}, 0x18) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)='X', 0x1}, {0x0, 0x1f4}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 195.718828ms ago: executing program 3 (id=2291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) unshare(0x400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1801100021000000000000000000000069c50095ce35956bc94b2f03d95ea09a037eb1845bc698367c5991f7287ea8453926d61b6ec9bd6b45dfd77af352d589710d5887c03110b9422b09247c18a8e17f8162311e50db836afd982a7e7400", @ANYRES64=r2, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f00000002c0), &(0x7f0000000040), 0x1, r0}, 0x38) unshare(0x64020000) 106.443763ms ago: executing program 0 (id=2292): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000000200006d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91c6e1da62451c3b3698b46b6f380c000000000000b7020000000000008500000085000000b70000000000000095000000000000000e9c305b3d3b48e8dc199f5092f973f5a6acc4ab60616b087620ef5a014dc1c27932d2d153117a1cb718840e9dd62a97e70154569f34ef556d545012917bc8e5804bc30bf9547e13bafd6b4cb5de89fa00"/206], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) listen(r2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000380)=0x2) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) close(r6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_devices(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) (async) close(r3) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000000000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000019e66d0600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) (async, rerun: 32) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) (rerun: 32) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) (async) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) (async) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r9, 0x4) 0s ago: executing program 1 (id=2293): r0 = socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x10, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x7, 0x9}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000300)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0}, 0x0) kernel console output (not intermixed with test programs): 0 [ 309.868653][T12806] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.895292][T12806] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.944055][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.965949][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.977092][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.987846][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.998070][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.008884][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.020686][T12503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.048371][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1837'. [ 310.078596][T12806] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.095505][T12806] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 310.105196][T12818] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 310.105925][T12806] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.130447][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.141388][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.159102][T12503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.188748][T12806] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.211486][T12806] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 310.222354][T12806] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.254157][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 310.255905][T12503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.276904][T12503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.286045][T12503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.295714][T12503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.343295][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 310.523677][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.554727][T12806] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.556009][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.576171][T12806] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 310.588871][T12806] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.624195][T12806] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.651664][T12806] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 310.661243][T12806] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.714035][T12806] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.726050][T12806] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 310.734371][T12806] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.752500][T12559] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 310.763073][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.781808][T12806] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.790494][T12806] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 310.799117][T12806] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.819646][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.848628][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.900599][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.925352][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.966354][T12840] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 311.000679][T12503] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 311.032918][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.180318][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.188986][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.289719][T12852] netlink: 'syz.0.1848': attribute type 64 has an invalid length. [ 311.371706][T12852] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.1848'. [ 311.498910][ T3562] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.670292][ T3562] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.833812][ T3562] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.016420][ T3562] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.051839][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.060873][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.081772][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.092017][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.103017][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 312.110687][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.152066][T12869] lo speed is unknown, defaulting to 1000 [ 312.230397][ T3562] bridge_slave_1: left allmulticast mode [ 312.240586][ T3562] bridge_slave_1: left promiscuous mode [ 312.251512][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.273724][ T3562] bridge_slave_0: left allmulticast mode [ 312.284202][ T3562] bridge_slave_0: left promiscuous mode [ 312.300385][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.700939][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.784931][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.837866][ T3562] bond0 (unregistering): Released all slaves [ 313.204575][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.218069][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.226343][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.243310][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.269636][ T5862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 313.277602][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.531980][T12869] chnl_net:caif_netlink_parms(): no params data found [ 313.574414][T12873] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 313.605182][T12893] lo speed is unknown, defaulting to 1000 [ 313.673889][ T3562] hsr_slave_0: left promiscuous mode [ 313.707446][ T3562] hsr_slave_1: left promiscuous mode [ 313.716671][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.733427][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.743453][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.762486][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.798905][T12912] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 313.822325][ T3562] veth1_macvtap: left promiscuous mode [ 313.837045][ T3562] veth0_macvtap: left promiscuous mode [ 313.842814][ T3562] veth1_vlan: left promiscuous mode [ 313.848654][ T3562] veth0_vlan: left promiscuous mode [ 314.566021][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 314.614457][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 315.318484][ T5867] Bluetooth: hci2: command tx timeout [ 315.379590][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 315.423777][T12869] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.463932][T12869] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.484990][T12869] bridge_slave_0: entered allmulticast mode [ 315.492933][T12869] bridge_slave_0: entered promiscuous mode [ 315.501523][T12869] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.508836][T12869] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.517170][T12869] bridge_slave_1: entered allmulticast mode [ 315.524451][T12869] bridge_slave_1: entered promiscuous mode [ 315.616188][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 315.658555][T12950] macvtap2: entered promiscuous mode [ 315.674344][T12950] macvtap2: entered allmulticast mode [ 315.782982][T12869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.810917][T12869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.018989][T12869] team0: Port device team_slave_0 added [ 316.054529][T12869] team0: Port device team_slave_1 added [ 316.094339][T12869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.106117][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.144872][T12869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.163509][T12869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.170957][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.199699][T12869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.219710][T12893] chnl_net:caif_netlink_parms(): no params data found [ 316.561118][ T3562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.660276][T12869] hsr_slave_0: entered promiscuous mode [ 316.674663][T12869] hsr_slave_1: entered promiscuous mode [ 316.702179][T12869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.716648][T12869] Cannot create hsr debugfs directory [ 316.860831][ T3562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.910026][T12893] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.930261][T12893] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.945835][T12893] bridge_slave_0: entered allmulticast mode [ 316.953880][T12893] bridge_slave_0: entered promiscuous mode [ 317.024637][ T3562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.060470][T12893] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.083176][T13024] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1891'. [ 317.085142][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.121568][T12893] bridge_slave_1: entered allmulticast mode [ 317.135215][T12893] bridge_slave_1: entered promiscuous mode [ 317.143768][T13013] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 317.238376][ T3562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.395615][ T5867] Bluetooth: hci2: command tx timeout [ 317.522573][T12893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.559274][T12893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.675749][T12893] team0: Port device team_slave_0 added [ 317.697717][T12893] team0: Port device team_slave_1 added [ 317.720528][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 317.803526][T13037] netlink: 'syz.0.1894': attribute type 14 has an invalid length. [ 317.858182][ T3562] bridge_slave_1: left allmulticast mode [ 317.864309][ T3562] bridge_slave_1: left promiscuous mode [ 317.885268][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.901443][ T3562] bridge_slave_0: left allmulticast mode [ 317.908524][ T3562] bridge_slave_0: left promiscuous mode [ 317.917221][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.382568][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.394358][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.405626][ T3562] bond0 (unregistering): Released all slaves [ 318.433137][T12893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.440911][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.473765][T12893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.598793][T12893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.614598][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.643267][T13060] netlink: zone id is out of range [ 318.649509][T13060] netlink: set zone limit has 4 unknown bytes [ 318.666268][T12893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.833480][T12893] hsr_slave_0: entered promiscuous mode [ 318.841078][T12893] hsr_slave_1: entered promiscuous mode [ 318.860641][T12893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.875521][T12893] Cannot create hsr debugfs directory [ 319.066106][T13074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1903'. [ 319.343286][ T3562] hsr_slave_0: left promiscuous mode [ 319.354685][ T3562] hsr_slave_1: left promiscuous mode [ 319.372219][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.394447][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.426146][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.433729][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.470854][ T3562] veth1_macvtap: left promiscuous mode [ 319.481742][ T5867] Bluetooth: hci2: command tx timeout [ 319.490757][ T3562] veth0_macvtap: left promiscuous mode [ 319.497355][ T3562] veth1_vlan: left promiscuous mode [ 319.502907][ T3562] veth0_vlan: left promiscuous mode [ 320.034499][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 320.085960][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 320.749668][T12869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.780860][T12869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.860037][T12869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.888728][T12869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 320.954840][T13112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1913'. [ 321.001153][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 321.121022][T12869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.129523][T13117] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 321.150530][T13117] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1914'. [ 321.168408][T12869] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.194998][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.202269][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.214545][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.221760][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.233415][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 321.329634][T12893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 321.363247][T12893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.385724][T12893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.405953][T12893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.560799][T12893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.576177][ T5867] Bluetooth: hci2: command tx timeout [ 321.609921][T12893] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.688591][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.695794][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.718118][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.725372][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.851754][T12869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.902282][T13133] lo speed is unknown, defaulting to 1000 [ 321.992472][T12869] veth0_vlan: entered promiscuous mode [ 322.021543][T12869] veth1_vlan: entered promiscuous mode [ 322.084546][T12869] veth0_macvtap: entered promiscuous mode [ 322.134070][T12869] veth1_macvtap: entered promiscuous mode [ 322.202033][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.249306][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.271914][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.301533][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.326398][T12869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.358808][T12869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.432726][T12869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.442561][T12869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.453482][T12869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.462981][T12869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.506281][T12893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.836756][T13160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1922'. [ 322.857689][ T8874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.874978][ T8874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.886770][T13160] mac80211_hwsim hwsim9 wlan1: Device is already in use. [ 322.943933][T12869] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 322.972498][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.078555][T13170] netlink: 'syz.1.1926': attribute type 1 has an invalid length. [ 323.080663][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.136396][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.177166][T13169] syzkaller0: entered promiscuous mode [ 323.182705][T13169] syzkaller0: entered allmulticast mode [ 323.260715][T12893] veth0_vlan: entered promiscuous mode [ 323.290181][T13174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.434880][T12893] veth1_vlan: entered promiscuous mode [ 323.534657][T13182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1929'. [ 323.544311][T12893] veth0_macvtap: entered promiscuous mode [ 323.561776][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'. [ 323.572421][T12893] veth1_macvtap: entered promiscuous mode [ 323.607598][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.636278][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.655958][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.685180][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.705096][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.719248][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.740564][T12893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.772394][T13190] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 323.810733][T13190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.833720][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.844983][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.877051][T12893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.916902][T12893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.941311][T12893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.952649][T12893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.967983][T12893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.024183][T13202] netlink: 'syz.3.1935': attribute type 7 has an invalid length. [ 324.059483][T13202] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1935'. [ 324.205103][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.233885][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.272000][T12893] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 324.315384][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.435775][T13222] netlink: 'syz.3.1938': attribute type 10 has an invalid length. [ 324.602722][ T3562] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.647260][ T3433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.657232][ T3433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.074525][T13233] xt_TCPMSS: Only works on TCP SYN packets [ 325.142231][ T3562] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.259592][T13242] syzkaller0: entered promiscuous mode [ 325.275294][T13242] syzkaller0: entered allmulticast mode [ 325.358321][ T3562] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.389742][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.400364][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.410145][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.442862][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.471503][ T5863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 325.485988][ T3562] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.497961][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 325.500793][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.518631][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 325.726425][T13246] lo speed is unknown, defaulting to 1000 [ 325.753612][ T3562] bridge_slave_1: left allmulticast mode [ 325.762808][ T3562] bridge_slave_1: left promiscuous mode [ 325.773106][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.810848][ T3562] bridge_slave_0: left allmulticast mode [ 325.820479][ T3562] bridge_slave_0: left promiscuous mode [ 325.834754][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.875448][ T5862] Bluetooth: hci2: command 0x0405 tx timeout [ 326.420049][T13268] netlink: 'syz.0.1952': attribute type 10 has an invalid length. [ 326.436451][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.456977][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.472514][ T3562] bond0 (unregistering): Released all slaves [ 326.497437][T13265] vlan4: entered promiscuous mode [ 326.503463][T13265] macvtap0: entered promiscuous mode [ 326.512795][T13265] macvtap0: left promiscuous mode [ 326.789799][T13275] __nla_validate_parse: 1 callbacks suppressed [ 326.789823][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 326.844697][T13275] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1954'. [ 327.007523][T13283] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1954'. [ 327.075290][T13283] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1954'. [ 327.239735][T13246] chnl_net:caif_netlink_parms(): no params data found [ 327.339496][ T3562] hsr_slave_0: left promiscuous mode [ 327.346607][ T3562] hsr_slave_1: left promiscuous mode [ 327.355286][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.362859][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.371040][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.378824][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.409580][ T3562] veth1_macvtap: left promiscuous mode [ 327.415345][ T3562] veth0_macvtap: left promiscuous mode [ 327.421082][ T3562] veth1_vlan: left promiscuous mode [ 327.428075][ T3562] veth0_vlan: left promiscuous mode [ 327.555600][ T5862] Bluetooth: hci0: command tx timeout [ 328.174259][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 328.358439][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 328.681494][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.691930][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.700945][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.715831][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.724347][ T5867] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 328.740749][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.163069][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 329.183848][T13313] netlink: 'syz.3.1961': attribute type 10 has an invalid length. [ 329.194548][T13313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1961'. [ 329.542934][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 329.577997][T13295] lo speed is unknown, defaulting to 1000 [ 329.605577][T13246] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.612734][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.628987][T13246] bridge_slave_0: entered allmulticast mode [ 329.636402][ T5867] Bluetooth: hci0: command tx timeout [ 329.637029][T13246] bridge_slave_0: entered promiscuous mode [ 329.651411][T13246] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.658863][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.666497][T13246] bridge_slave_1: entered allmulticast mode [ 329.673675][T13246] bridge_slave_1: entered promiscuous mode [ 329.842684][T13246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.860409][T13246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.881173][T13308] lo speed is unknown, defaulting to 1000 [ 330.019110][T13246] team0: Port device team_slave_0 added [ 330.057782][T13323] netlink: 'syz.1.1964': attribute type 10 has an invalid length. [ 330.124421][T13246] team0: Port device team_slave_1 added [ 330.157249][T13323] team0: Device wlan1 is of different type [ 330.240825][T13246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.256332][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.303802][T13246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.349369][T13246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.364829][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.393652][T13246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.444159][T13337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1965'. [ 330.552963][ T3562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.639364][T13246] hsr_slave_0: entered promiscuous mode [ 330.665679][T13246] hsr_slave_1: entered promiscuous mode [ 330.686873][T13246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.694489][T13246] Cannot create hsr debugfs directory [ 330.782180][ T3562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.844277][ T5867] Bluetooth: hci2: command tx timeout [ 330.900976][T13349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.908342][T13351] netlink: 'syz.1.1971': attribute type 64 has an invalid length. [ 330.916026][T13349] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 330.944561][ T3562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.070657][ T3562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.131326][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 331.181503][T13357] bridge0: port 1(macvlan0) entered blocking state [ 331.193934][T13357] bridge0: port 1(macvlan0) entered disabled state [ 331.200991][T13357] macvlan0: entered allmulticast mode [ 331.206954][T13357] bridge0: entered allmulticast mode [ 331.214126][T13357] macvlan0: left allmulticast mode [ 331.230613][T13357] bridge0: left allmulticast mode [ 331.299094][T13308] chnl_net:caif_netlink_parms(): no params data found [ 331.324385][T13361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1973'. [ 331.428884][ T3562] bridge_slave_1: left allmulticast mode [ 331.434608][ T3562] bridge_slave_1: left promiscuous mode [ 331.454508][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.472305][ T3562] bridge_slave_0: left allmulticast mode [ 331.479322][ T3562] bridge_slave_0: left promiscuous mode [ 331.485527][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.715472][ T5867] Bluetooth: hci0: command tx timeout [ 331.811059][T13374] Bluetooth: MGMT ver 1.23 [ 331.825783][T13373] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 331.839930][T13374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1975'. [ 331.891596][T13373] netlink: 'syz.3.1975': attribute type 4 has an invalid length. [ 332.010370][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.027623][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.043252][ T3562] bond0 (unregistering): Released all slaves [ 332.168948][T13380] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1976'. [ 332.376468][T13308] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.394934][T13308] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.402445][T13308] bridge_slave_0: entered allmulticast mode [ 332.417406][T13308] bridge_slave_0: entered promiscuous mode [ 332.436670][T13308] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.444163][T13308] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.471130][T13308] bridge_slave_1: entered allmulticast mode [ 332.485305][T13308] bridge_slave_1: entered promiscuous mode [ 332.630147][T13391] lo speed is unknown, defaulting to 1000 [ 332.768056][T13308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.787872][T13246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.868789][T13308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.925158][ T5862] Bluetooth: hci2: command tx timeout [ 332.944167][T13246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.978327][T13246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.986290][T13408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1983'. [ 333.014350][T13246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.043920][T13404] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 333.173389][T13308] team0: Port device team_slave_0 added [ 333.282080][T13308] team0: Port device team_slave_1 added [ 333.306050][T13415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1985'. [ 333.316212][ T3562] hsr_slave_0: left promiscuous mode [ 333.323303][ T3562] hsr_slave_1: left promiscuous mode [ 333.331174][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.338823][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.351634][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.363838][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.394417][T13424] FAULT_INJECTION: forcing a failure. [ 333.394417][T13424] name failslab, interval 1, probability 0, space 0, times 1 [ 333.407700][T13424] CPU: 1 UID: 0 PID: 13424 Comm: syz.3.1987 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 333.418528][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 333.424807][ T3562] veth1_macvtap: left promiscuous mode [ 333.428610][T13424] Call Trace: [ 333.428625][T13424] [ 333.428636][T13424] dump_stack_lvl+0x241/0x360 [ 333.444175][ T3562] veth0_macvtap: left promiscuous mode [ 333.445097][T13424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.445132][T13424] ? __pfx__printk+0x10/0x10 [ 333.445158][T13424] ? __kmalloc_noprof+0xb0/0x400 [ 333.451578][ T3562] veth1_vlan: left promiscuous mode [ 333.455816][T13424] ? __pfx___might_resched+0x10/0x10 [ 333.455859][T13424] should_fail_ex+0x3b0/0x4e0 [ 333.470894][ T3562] veth0_vlan: left promiscuous mode [ 333.475865][T13424] ? bpf_test_init+0xe1/0x180 [ 333.475902][T13424] should_failslab+0xac/0x100 [ 333.475931][T13424] ? bpf_test_init+0xe1/0x180 [ 333.475958][T13424] __kmalloc_noprof+0xd8/0x400 [ 333.504721][T13424] bpf_test_init+0xe1/0x180 [ 333.509261][T13424] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 333.514681][T13424] ? __pfx_lock_release+0x10/0x10 [ 333.519800][T13424] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.525635][T13424] ? __fget_files+0x29/0x470 [ 333.530303][T13424] ? fput+0x1a8/0x230 [ 333.534315][T13424] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 333.540140][T13424] bpf_prog_test_run+0x2e4/0x360 [ 333.545114][T13424] __sys_bpf+0x48d/0x810 [ 333.549415][T13424] ? __pfx___sys_bpf+0x10/0x10 [ 333.554214][T13424] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.560249][T13424] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.566614][T13424] ? do_syscall_64+0x100/0x230 [ 333.571426][T13424] __x64_sys_bpf+0x7c/0x90 [ 333.575897][T13424] do_syscall_64+0xf3/0x230 [ 333.580454][T13424] ? clear_bhb_loop+0x35/0x90 [ 333.585276][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.591206][T13424] RIP: 0033:0x7f2366d7e719 [ 333.595680][T13424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.615362][T13424] RSP: 002b:00007f2367aa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.623816][T13424] RAX: ffffffffffffffda RBX: 00007f2366f35f80 RCX: 00007f2366d7e719 [ 333.631814][T13424] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 333.639815][T13424] RBP: 00007f2367aa8090 R08: 0000000000000000 R09: 0000000000000000 [ 333.647807][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.655815][T13424] R13: 0000000000000000 R14: 00007f2366f35f80 R15: 00007ffea9dae408 [ 333.663830][T13424] [ 333.795525][ T5862] Bluetooth: hci0: command 0x0419 tx timeout [ 333.803255][ T5867] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 333.884572][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'. [ 333.902913][T13431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1989'. [ 334.411603][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 334.470763][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 334.999165][ T5867] Bluetooth: hci2: command tx timeout [ 335.138102][T13308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.146040][T13308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.173048][T13308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.228079][T13308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.244668][T13308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.297974][T13308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.497691][T13442] netlink: 'syz.1.1993': attribute type 21 has an invalid length. [ 335.515958][T13442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1993'. [ 335.589330][T13308] hsr_slave_0: entered promiscuous mode [ 335.615501][T13308] hsr_slave_1: entered promiscuous mode [ 335.625227][T13308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.632883][T13308] Cannot create hsr debugfs directory [ 335.787128][T13246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.885583][ T5867] Bluetooth: hci0: command 0x0419 tx timeout [ 335.890872][T13455] FAULT_INJECTION: forcing a failure. [ 335.890872][T13455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.941040][T13455] CPU: 1 UID: 0 PID: 13455 Comm: syz.1.1998 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 335.951887][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 335.962083][T13455] Call Trace: [ 335.965406][T13455] [ 335.968369][T13455] dump_stack_lvl+0x241/0x360 [ 335.973079][T13455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.978297][T13455] ? __pfx__printk+0x10/0x10 [ 335.982917][T13455] should_fail_ex+0x3b0/0x4e0 [ 335.987620][T13455] _copy_from_user+0x2f/0xc0 [ 335.992235][T13455] bpf_test_init+0x11f/0x180 [ 335.996847][T13455] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 336.002245][T13455] ? __pfx_lock_release+0x10/0x10 [ 336.007303][T13455] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 336.013126][T13455] ? __fget_files+0x29/0x470 [ 336.017743][T13455] ? fput+0x1a8/0x230 [ 336.021764][T13455] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 336.027615][T13455] bpf_prog_test_run+0x2e4/0x360 [ 336.032574][T13455] __sys_bpf+0x48d/0x810 [ 336.036839][T13455] ? __pfx___sys_bpf+0x10/0x10 [ 336.041629][T13455] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.047630][T13455] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.054000][T13455] ? do_syscall_64+0x100/0x230 [ 336.058792][T13455] __x64_sys_bpf+0x7c/0x90 [ 336.063247][T13455] do_syscall_64+0xf3/0x230 [ 336.067763][T13455] ? clear_bhb_loop+0x35/0x90 [ 336.072467][T13455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.078379][T13455] RIP: 0033:0x7f2f4737e719 [ 336.082807][T13455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.102605][T13455] RSP: 002b:00007f2f48110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.111037][T13455] RAX: ffffffffffffffda RBX: 00007f2f47535f80 RCX: 00007f2f4737e719 [ 336.119027][T13455] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 336.127011][T13455] RBP: 00007f2f48110090 R08: 0000000000000000 R09: 0000000000000000 [ 336.134997][T13455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.143075][T13455] R13: 0000000000000000 R14: 00007f2f47535f80 R15: 00007fff2b3424f8 [ 336.151076][T13455] [ 336.165855][T13246] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.179670][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.186855][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.256449][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.263636][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.277945][T13457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1999'. [ 336.300345][T13457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1999'. [ 336.577749][T13479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.609753][T13479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.676426][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 336.710601][T13481] vxcan1: tx address claim with different name [ 337.062469][T13308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.076227][ T5867] Bluetooth: hci2: command tx timeout [ 337.084949][T13308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.150570][T13308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.177665][T13246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.192914][T13308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.240857][T13507] netlink: 'syz.0.2008': attribute type 142 has an invalid length. [ 337.314452][T13246] veth0_vlan: entered promiscuous mode [ 337.359987][T13246] veth1_vlan: entered promiscuous mode [ 337.478758][T13246] veth0_macvtap: entered promiscuous mode [ 337.521618][T13246] veth1_macvtap: entered promiscuous mode [ 337.606654][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.623334][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.634286][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.645620][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.657827][T13246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.683380][T13308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.697892][T13246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.754408][T13308] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.772314][T13246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.784487][T13246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.793544][T13246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.802565][T13246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.851803][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.859051][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.900334][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.907507][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.934733][T13528] IPv6: sit2: Disabled Multicast RS [ 337.941320][T13528] bond0: (slave sit2): no link monitoring support [ 337.956675][ T5867] Bluetooth: hci0: command 0x0419 tx timeout [ 337.992498][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2017'. [ 338.051556][T13308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.087978][T13308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.179509][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 338.232164][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.252556][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.278033][T13246] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 338.315229][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.352980][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.379603][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.543926][T13308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.096155][T13308] veth0_vlan: entered promiscuous mode [ 339.130002][T13308] veth1_vlan: entered promiscuous mode [ 339.167904][T13308] veth0_macvtap: entered promiscuous mode [ 339.178125][T13308] veth1_macvtap: entered promiscuous mode [ 339.204273][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.215062][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.224973][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.235826][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.245790][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.256328][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.267621][T13308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.517666][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.528691][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.543933][T13308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.731441][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.859731][T13308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.871075][T13308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.880551][T13308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.893933][T13308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.944950][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.042209][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.053510][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.078170][T13308] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 340.088450][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.103132][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.118185][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.144910][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.267472][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.372243][ T82] bridge_slave_1: left allmulticast mode [ 340.379312][ T82] bridge_slave_1: left promiscuous mode [ 340.385062][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.394587][ T82] bridge_slave_0: left allmulticast mode [ 340.401484][ T82] bridge_slave_0: left promiscuous mode [ 340.407660][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.494611][T13581] No such timeout policy "syz0" [ 340.618257][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'. [ 340.752298][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.761722][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.773511][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.781979][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.821587][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.829989][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.172071][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.183761][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.201154][ T82] bond0 (unregistering): Released all slaves [ 341.326912][T13586] team0 (unregistering): Port device wg2 removed [ 341.434035][T13588] lo speed is unknown, defaulting to 1000 [ 341.739755][ T82] hsr_slave_0: left promiscuous mode [ 341.755903][ T82] hsr_slave_1: left promiscuous mode [ 341.764255][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.773860][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.781925][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.789660][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.820778][ T82] veth1_macvtap: left promiscuous mode [ 341.827174][ T82] veth0_macvtap: left promiscuous mode [ 341.832809][ T82] veth1_vlan: left promiscuous mode [ 341.838612][ T82] veth0_vlan: left promiscuous mode [ 342.283234][T13603] netlink: 'syz.3.2032': attribute type 8 has an invalid length. [ 342.391098][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.402971][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.413117][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.421715][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.429974][ T5862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.445824][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.696188][ T82] team0 (unregistering): Port device team_slave_1 removed [ 342.768387][ T82] team0 (unregistering): Port device team_slave_0 removed [ 342.916765][ T5867] Bluetooth: hci0: command tx timeout [ 343.274745][T13588] chnl_net:caif_netlink_parms(): no params data found [ 343.379201][T13605] lo speed is unknown, defaulting to 1000 [ 343.593976][T13588] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.603134][T13632] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 343.611559][T13588] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.620404][T13588] bridge_slave_0: entered allmulticast mode [ 343.636397][T13588] bridge_slave_0: entered promiscuous mode [ 343.667198][T13588] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.692407][T13588] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.709726][T13588] bridge_slave_1: entered allmulticast mode [ 343.736349][T13588] bridge_slave_1: entered promiscuous mode [ 343.818409][T13588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.924244][T13588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.944652][T13646] Bluetooth: MGMT ver 1.23 [ 343.992507][T13646] bridge0: port 1(gretap0) entered blocking state [ 344.005552][T13646] bridge0: port 1(gretap0) entered disabled state [ 344.012292][T13646] gretap0: entered allmulticast mode [ 344.049726][T13646] gretap0: entered promiscuous mode [ 344.097557][T13640] lo speed is unknown, defaulting to 1000 [ 344.128658][T13588] team0: Port device team_slave_0 added [ 344.161625][T13588] team0: Port device team_slave_1 added [ 344.178297][T13650] gretap0: left allmulticast mode [ 344.183435][T13650] gretap0: left promiscuous mode [ 344.184794][T13634] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 344.204141][T13650] bridge0: port 1(gretap0) entered disabled state [ 344.348373][T13655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2042'. [ 344.559847][ T5867] Bluetooth: hci2: command tx timeout [ 344.604058][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.629366][T13588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.637411][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.664249][T13588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.688746][T13588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.704761][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.775190][T13588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.814443][T13660] FAULT_INJECTION: forcing a failure. [ 344.814443][T13660] name failslab, interval 1, probability 0, space 0, times 0 [ 344.848670][T13660] CPU: 0 UID: 0 PID: 13660 Comm: syz.0.2043 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 344.859564][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 344.869654][T13660] Call Trace: [ 344.872939][T13660] [ 344.875886][T13660] dump_stack_lvl+0x241/0x360 [ 344.880617][T13660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.885877][T13660] ? __pfx__printk+0x10/0x10 [ 344.890605][T13660] ? __kmalloc_node_noprof+0xb7/0x440 [ 344.896031][T13660] ? __pfx___might_resched+0x10/0x10 [ 344.901375][T13660] should_fail_ex+0x3b0/0x4e0 [ 344.906102][T13660] should_failslab+0xac/0x100 [ 344.910827][T13660] __kmalloc_node_noprof+0xdf/0x440 [ 344.916059][T13660] ? __kvmalloc_node_noprof+0x72/0x190 [ 344.921558][T13660] __kvmalloc_node_noprof+0x72/0x190 [ 344.926858][T13660] bpf_test_run_xdp_live+0x290/0x21b0 [ 344.932236][T13660] ? arch_stack_walk+0xfd/0x150 [ 344.937096][T13660] ? stack_trace_save+0x118/0x1d0 [ 344.942130][T13660] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 344.947953][T13660] ? mark_lock+0x9a/0x360 [ 344.952319][T13660] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 344.958263][T13660] ? __might_fault+0xaa/0x120 [ 344.963007][T13660] ? __might_fault+0xc6/0x120 [ 344.967710][T13660] ? _copy_from_user+0x99/0xc0 [ 344.972504][T13660] ? bpf_test_init+0x15a/0x180 [ 344.977298][T13660] ? xdp_convert_md_to_buff+0x5b/0x330 [ 344.982789][T13660] bpf_prog_test_run_xdp+0x805/0x11e0 [ 344.988198][T13660] ? __pfx_lock_release+0x10/0x10 [ 344.993242][T13660] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 344.999060][T13660] ? __fget_files+0x29/0x470 [ 345.003665][T13660] ? fput+0x1a8/0x230 [ 345.005490][ T5867] Bluetooth: hci0: command tx timeout [ 345.007649][T13660] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 345.018864][T13660] bpf_prog_test_run+0x2e4/0x360 [ 345.023854][T13660] __sys_bpf+0x48d/0x810 [ 345.028148][T13660] ? __pfx___sys_bpf+0x10/0x10 [ 345.032929][T13660] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.038938][T13660] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.045290][T13660] ? do_syscall_64+0x100/0x230 [ 345.050071][T13660] __x64_sys_bpf+0x7c/0x90 [ 345.054503][T13660] do_syscall_64+0xf3/0x230 [ 345.059029][T13660] ? clear_bhb_loop+0x35/0x90 [ 345.063741][T13660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.069646][T13660] RIP: 0033:0x7f2d6db7e719 [ 345.074080][T13660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.093804][T13660] RSP: 002b:00007f2d6ea5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.102248][T13660] RAX: ffffffffffffffda RBX: 00007f2d6dd35f80 RCX: 00007f2d6db7e719 [ 345.110250][T13660] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 345.118796][T13660] RBP: 00007f2d6ea5d090 R08: 0000000000000000 R09: 0000000000000000 [ 345.126792][T13660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.134770][T13660] R13: 0000000000000000 R14: 00007f2d6dd35f80 R15: 00007ffc05e550e8 [ 345.142772][T13660] [ 345.171024][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.272308][T13605] chnl_net:caif_netlink_parms(): no params data found [ 345.311859][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.333470][T13588] hsr_slave_0: entered promiscuous mode [ 345.340294][T13588] hsr_slave_1: entered promiscuous mode [ 345.354580][T13588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.371080][T13588] Cannot create hsr debugfs directory [ 345.453932][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.765746][T13605] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.773012][T13605] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.781211][T13605] bridge_slave_0: entered allmulticast mode [ 345.788510][T13605] bridge_slave_0: entered promiscuous mode [ 345.796772][T13605] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.803897][T13605] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.811852][T13605] bridge_slave_1: entered allmulticast mode [ 345.819801][T13605] bridge_slave_1: entered promiscuous mode [ 345.907182][T13605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.929743][T13605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.996036][ T82] bridge_slave_1: left allmulticast mode [ 346.004640][ T82] bridge_slave_1: left promiscuous mode [ 346.010633][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.027224][ T82] bridge_slave_0: left allmulticast mode [ 346.032898][ T82] bridge_slave_0: left promiscuous mode [ 346.039747][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.471243][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.484023][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.495316][ T82] bond0 (unregistering): Released all slaves [ 346.512115][T13605] team0: Port device team_slave_0 added [ 346.523104][T13605] team0: Port device team_slave_1 added [ 346.603565][ T5867] Bluetooth: hci2: command tx timeout [ 346.652152][T13605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.675108][T13605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.727681][T13605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.754278][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 346.855469][T13697] tipc: Invalid UDP bearer configuration [ 346.855698][T13697] tipc: Enabling of bearer rejected, failed to enable media [ 346.877307][T13605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.884480][T13605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.912409][T13605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.974549][T13701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2052'. [ 347.063228][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 347.075620][ T5862] Bluetooth: hci0: command tx timeout [ 347.122026][T13704] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2054'. [ 347.193888][T13605] hsr_slave_0: entered promiscuous mode [ 347.993722][T13605] hsr_slave_1: entered promiscuous mode [ 348.003951][T13605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.025899][T13605] Cannot create hsr debugfs directory [ 348.333329][T13724] netlink: 'syz.3.2059': attribute type 10 has an invalid length. [ 348.383020][ T82] hsr_slave_0: left promiscuous mode [ 348.393132][ T82] hsr_slave_1: left promiscuous mode [ 348.400783][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.410747][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.419596][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.427666][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.454762][ T82] veth1_macvtap: left promiscuous mode [ 348.460451][ T82] veth0_macvtap: left promiscuous mode [ 348.466425][ T82] veth1_vlan: left promiscuous mode [ 348.471814][ T82] veth0_vlan: left promiscuous mode [ 348.675531][ T5862] Bluetooth: hci2: command tx timeout [ 349.152369][ T82] team0 (unregistering): Port device team_slave_1 removed [ 349.160799][ T5862] Bluetooth: hci0: command tx timeout [ 349.225818][ T82] team0 (unregistering): Port device team_slave_0 removed [ 349.760849][T13724] bond0: (slave team0): Enslaving as an active interface with a down link [ 349.906388][T13743] netlink: 'syz.1.2064': attribute type 2 has an invalid length. [ 349.916710][T13741] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2063'. [ 350.193076][T13588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 350.227216][T13588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 350.292963][T13588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 350.317380][T13588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.438181][T13588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.459351][T13588] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.470855][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.478183][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.528962][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.536233][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.755914][ T5862] Bluetooth: hci2: command tx timeout [ 350.913175][T13605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.949152][T13605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.983991][T13605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.993554][T13764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2068'. [ 351.021922][T13764] netlink: 'syz.1.2068': attribute type 7 has an invalid length. [ 351.030068][T13764] netlink: 'syz.1.2068': attribute type 8 has an invalid length. [ 351.064026][T13605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.071052][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 351.143263][T13588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.354344][T13588] veth0_vlan: entered promiscuous mode [ 351.402337][T13588] veth1_vlan: entered promiscuous mode [ 351.526059][T13605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.537667][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'. [ 351.543487][T13605] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.582081][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.589337][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.637247][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.644581][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.745560][T13605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.797223][T13588] veth0_macvtap: entered promiscuous mode [ 351.806992][T13588] veth1_macvtap: entered promiscuous mode [ 351.823365][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.833927][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.843930][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.854889][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.866434][T13588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.877942][T13588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.888233][T13588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.897109][T13588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.906407][T13588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.915414][T13588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.182048][T13789] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 352.625843][T13795] bond0: (slave geneve0): Releasing backup interface [ 352.650301][T13800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2073'. [ 352.706312][T13795] netpci0: Port device wlan1 removed [ 352.818051][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.837150][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.850971][T13788] lo speed is unknown, defaulting to 1000 [ 352.864319][T13605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.960615][T13588] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 353.007060][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.088093][ T3433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.099534][T13809] netlink: 'syz.1.2076': attribute type 10 has an invalid length. [ 353.134461][ T3433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.691189][T13741] Set syz1 is full, maxelem 65536 reached [ 353.780683][T13605] veth0_vlan: entered promiscuous mode [ 353.812130][T13605] veth1_vlan: entered promiscuous mode [ 353.921151][T13605] veth0_macvtap: entered promiscuous mode [ 353.940053][T13605] veth1_macvtap: entered promiscuous mode [ 353.956995][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.967766][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.977857][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.988989][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.998991][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.010087][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.021698][T13605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.063665][T13832] FAULT_INJECTION: forcing a failure. [ 354.063665][T13832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.079564][T13605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.095592][T13832] CPU: 1 UID: 0 PID: 13832 Comm: syz.3.2081 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 354.099008][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.106464][T13832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 354.106483][T13832] Call Trace: [ 354.106491][T13832] [ 354.106502][T13832] dump_stack_lvl+0x241/0x360 [ 354.106538][T13832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.106562][T13832] ? __pfx__printk+0x10/0x10 [ 354.106599][T13832] should_fail_ex+0x3b0/0x4e0 [ 354.106629][T13832] _copy_to_user+0x31/0xb0 [ 354.106653][T13832] bpf_test_finish+0x212/0x890 [ 354.106700][T13832] ? __might_fault+0xaa/0x120 [ 354.106735][T13832] ? __pfx_bpf_test_finish+0x10/0x10 [ 354.106768][T13832] ? _copy_from_user+0x99/0xc0 [ 354.106804][T13832] ? bpf_test_init+0x15a/0x180 [ 354.106837][T13832] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 354.106876][T13832] ? __pfx_lock_release+0x10/0x10 [ 354.106920][T13832] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 354.106950][T13832] ? __fget_files+0x29/0x470 [ 354.137031][T13605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.137728][T13832] ? fput+0x1a8/0x230 [ 354.213067][T13832] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 354.218938][T13832] bpf_prog_test_run+0x2e4/0x360 [ 354.223928][T13832] __sys_bpf+0x48d/0x810 [ 354.228211][T13832] ? __pfx___sys_bpf+0x10/0x10 [ 354.233021][T13832] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.239040][T13832] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.245514][T13832] ? do_syscall_64+0x100/0x230 [ 354.250337][T13832] __x64_sys_bpf+0x7c/0x90 [ 354.254766][T13832] do_syscall_64+0xf3/0x230 [ 354.259291][T13832] ? clear_bhb_loop+0x35/0x90 [ 354.264020][T13832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.269942][T13832] RIP: 0033:0x7f2366d7e719 [ 354.274389][T13832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.294028][T13832] RSP: 002b:00007f2367aa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.302468][T13832] RAX: ffffffffffffffda RBX: 00007f2366f35f80 RCX: 00007f2366d7e719 [ 354.310470][T13832] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 354.318474][T13832] RBP: 00007f2367aa8090 R08: 0000000000000000 R09: 0000000000000000 [ 354.326566][T13832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.334572][T13832] R13: 0000000000000000 R14: 00007f2366f35f80 R15: 00007ffea9dae408 [ 354.342594][T13832] [ 354.373264][T13605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.382920][T13605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.392033][T13605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.401043][T13605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.477644][T13837] netlink: 'syz.3.2082': attribute type 7 has an invalid length. [ 354.501506][T13837] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2082'. [ 354.571675][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2082'. [ 354.583810][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.592258][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.599806][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'. [ 354.599861][T13837] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2082'. [ 354.666956][T13605] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 354.706894][T13605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.734399][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2082'. [ 354.746748][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.754640][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.826086][T13845] lo speed is unknown, defaulting to 1000 [ 354.963312][T13851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2086'. [ 355.000733][T13851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2086'. [ 355.303817][T13847] bond0 (unregistering): Released all slaves [ 355.678747][ T3562] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.957248][ T3562] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.016719][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'. [ 356.026445][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 356.117164][ T3562] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.266480][ T3562] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.337863][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.358715][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.367868][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.390961][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.398761][ T5867] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.406281][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.467175][ T3562] bridge_slave_1: left allmulticast mode [ 356.472908][ T3562] bridge_slave_1: left promiscuous mode [ 356.486088][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.508519][ T3562] bridge_slave_0: left allmulticast mode [ 356.514236][ T3562] bridge_slave_0: left promiscuous mode [ 356.530893][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.932470][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.946649][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.958516][ T3562] bond0 (unregistering): Released all slaves [ 356.970227][T13870] lo speed is unknown, defaulting to 1000 [ 357.224210][T13877] FAULT_INJECTION: forcing a failure. [ 357.224210][T13877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.293084][T13877] CPU: 0 UID: 0 PID: 13877 Comm: syz.1.2092 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 357.304359][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 357.314461][T13877] Call Trace: [ 357.317784][T13877] [ 357.320751][T13877] dump_stack_lvl+0x241/0x360 [ 357.325479][T13877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.330729][T13877] ? __pfx__printk+0x10/0x10 [ 357.335382][T13877] should_fail_ex+0x3b0/0x4e0 [ 357.340114][T13877] _copy_to_user+0x31/0xb0 [ 357.344581][T13877] bpf_test_finish+0x2e6/0x890 [ 357.349432][T13877] ? __might_fault+0xaa/0x120 [ 357.354138][T13877] ? __pfx_bpf_test_finish+0x10/0x10 [ 357.359458][T13877] ? _copy_from_user+0x99/0xc0 [ 357.364253][T13877] ? bpf_test_init+0x15a/0x180 [ 357.369102][T13877] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 357.374586][T13877] ? __pfx_lock_release+0x10/0x10 [ 357.379637][T13877] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.385459][T13877] ? __fget_files+0x29/0x470 [ 357.390087][T13877] ? fput+0x1a8/0x230 [ 357.394171][T13877] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.400019][T13877] bpf_prog_test_run+0x2e4/0x360 [ 357.405016][T13877] __sys_bpf+0x48d/0x810 [ 357.409297][T13877] ? __pfx___sys_bpf+0x10/0x10 [ 357.414096][T13877] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.420197][T13877] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.426549][T13877] ? do_syscall_64+0x100/0x230 [ 357.431348][T13877] __x64_sys_bpf+0x7c/0x90 [ 357.435778][T13877] do_syscall_64+0xf3/0x230 [ 357.440305][T13877] ? clear_bhb_loop+0x35/0x90 [ 357.445099][T13877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.451020][T13877] RIP: 0033:0x7f2f4737e719 [ 357.455445][T13877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.475152][T13877] RSP: 002b:00007f2f48110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.483580][T13877] RAX: ffffffffffffffda RBX: 00007f2f47535f80 RCX: 00007f2f4737e719 [ 357.491579][T13877] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 357.499568][T13877] RBP: 00007f2f48110090 R08: 0000000000000000 R09: 0000000000000000 [ 357.507565][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.515633][T13877] R13: 0000000000000000 R14: 00007f2f47535f80 R15: 00007fff2b3424f8 [ 357.523627][T13877] [ 357.637236][T13888] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.829872][T13888] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.871417][T13892] sch_tbf: peakrate 4 is lower than or equals to rate 33554432 ! [ 357.959111][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.973840][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.983189][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.991872][ T3562] hsr_slave_0: left promiscuous mode [ 357.998790][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.006654][ T3562] hsr_slave_1: left promiscuous mode [ 358.012394][ T5867] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.021281][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.029008][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.040867][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.067507][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.081542][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.141032][ T3562] veth1_macvtap: left promiscuous mode [ 358.160871][ T3562] veth0_macvtap: left promiscuous mode [ 358.175319][ T3562] veth1_vlan: left promiscuous mode [ 358.180684][ T3562] veth0_vlan: left promiscuous mode [ 358.438967][ T5862] Bluetooth: hci0: command tx timeout [ 358.731938][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 358.781671][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 359.306458][T13888] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.348536][T13907] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2099'. [ 359.417607][T13888] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.453281][T13911] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 359.464047][T13900] lo speed is unknown, defaulting to 1000 [ 359.497362][T13870] chnl_net:caif_netlink_parms(): no params data found [ 359.617015][T13911] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 359.674856][T13911] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 359.723079][T13888] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.740163][T13888] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.780427][T13888] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.861137][T13888] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.872483][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 360.055652][T13870] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.062873][T13870] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.071265][T13870] bridge_slave_0: entered allmulticast mode [ 360.078543][T13870] bridge_slave_0: entered promiscuous mode [ 360.087574][T13870] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.094732][T13870] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.102479][T13870] bridge_slave_1: entered allmulticast mode [ 360.109783][T13870] bridge_slave_1: entered promiscuous mode [ 360.115950][ T5862] Bluetooth: hci2: command tx timeout [ 360.160675][T13870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.172702][T13870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.266201][T13870] team0: Port device team_slave_0 added [ 360.305778][T13870] team0: Port device team_slave_1 added [ 360.340903][T13900] chnl_net:caif_netlink_parms(): no params data found [ 360.415364][T13870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.428353][T13870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.464822][T13870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.515731][ T5862] Bluetooth: hci0: command tx timeout [ 360.553135][T13870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.560598][T13870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.587068][T13870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.776416][ T3562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.964339][ T3562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.043246][T13870] hsr_slave_0: entered promiscuous mode [ 361.058247][T13870] hsr_slave_1: entered promiscuous mode [ 361.074270][T13870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.085661][T13870] Cannot create hsr debugfs directory [ 361.138252][ T3562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.416920][ T3562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.500502][T13900] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.516694][T13900] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.524040][T13900] bridge_slave_0: entered allmulticast mode [ 361.541840][T13900] bridge_slave_0: entered promiscuous mode [ 361.556282][T13900] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.563522][T13900] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.571048][T13900] bridge_slave_1: entered allmulticast mode [ 361.578269][T13900] bridge_slave_1: entered promiscuous mode [ 361.751896][T13900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.807407][T13900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.919945][T13900] team0: Port device team_slave_0 added [ 361.951207][T13900] team0: Port device team_slave_1 added [ 362.072028][T13979] dummy0: entered promiscuous mode [ 362.095498][T13979] macsec1: entered promiscuous mode [ 362.100906][T13979] macsec1: entered allmulticast mode [ 362.106783][T13979] dummy0: entered allmulticast mode [ 362.133955][T13979] dummy0: left allmulticast mode [ 362.141935][T13979] dummy0: left promiscuous mode [ 362.195564][ T5862] Bluetooth: hci2: command tx timeout [ 362.270788][T13900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.293437][T13900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.355323][T13900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.377721][T13900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.384725][T13900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.455315][T13900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.495884][ T3562] bridge_slave_1: left allmulticast mode [ 362.501764][ T3562] bridge_slave_1: left promiscuous mode [ 362.512143][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.549935][ T3562] bridge_slave_0: left allmulticast mode [ 362.565339][ T3562] bridge_slave_0: left promiscuous mode [ 362.571173][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.605612][ T5862] Bluetooth: hci0: command tx timeout [ 363.149543][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.162083][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.176868][ T3562] bond0 (unregistering): Released all slaves [ 363.202759][T13986] tipc: Enabled bearer , priority 10 [ 363.623879][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2118'. [ 363.759871][T13900] hsr_slave_0: entered promiscuous mode [ 363.783146][T13900] hsr_slave_1: entered promiscuous mode [ 363.792502][T13900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.811141][T13900] Cannot create hsr debugfs directory [ 364.063264][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 364.164147][ T3562] hsr_slave_0: left promiscuous mode [ 364.183293][ T3562] hsr_slave_1: left promiscuous mode [ 364.198651][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.215326][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.246095][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.260315][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.275341][ T5862] Bluetooth: hci2: command tx timeout [ 364.288755][T14022] netlink: 'syz.1.2120': attribute type 15 has an invalid length. [ 364.297999][T14022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'. [ 364.347866][ T3562] veth1_macvtap: left promiscuous mode [ 364.353916][ T3562] veth0_macvtap: left promiscuous mode [ 364.359834][ T3562] veth1_vlan: left promiscuous mode [ 364.365449][ T3562] veth0_vlan: left promiscuous mode [ 364.675301][ T5862] Bluetooth: hci0: command tx timeout [ 365.188744][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 365.252773][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 365.989495][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 366.307672][T13870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 366.338876][T13870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 366.365302][ T5862] Bluetooth: hci2: command tx timeout [ 366.418509][T14031] siw: device registration error -23 [ 366.434837][T13870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.478703][T14034] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.577780][T13870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.616781][T14044] netlink: 'syz.3.2128': attribute type 1 has an invalid length. [ 366.700864][T14044] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.711563][T14044] bond3: (slave bond4): making interface the new active one [ 366.721276][T14044] bond3: (slave bond4): Enslaving as an active interface with an up link [ 367.009605][T13900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.030822][T13900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.055991][T13900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.088949][T13900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.158674][T13870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.254052][T13870] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.297901][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.305159][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.333359][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.340585][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.492209][T13900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.534575][T13900] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.564628][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.571894][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.649454][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.656784][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.151219][T13870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.241566][T13900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.332771][T13870] veth0_vlan: entered promiscuous mode [ 368.385951][T13870] veth1_vlan: entered promiscuous mode [ 368.436535][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 368.470654][T13870] veth0_macvtap: entered promiscuous mode [ 368.498499][T13870] veth1_macvtap: entered promiscuous mode [ 368.537517][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.548818][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.566920][T14120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2147'. [ 368.576262][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.596934][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 368.615457][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.647028][T13870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.706629][T13870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.732606][T14119] lo speed is unknown, defaulting to 1000 [ 368.739964][T13870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.764895][T13870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.792843][T13870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.819596][T13870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.049586][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.051155][T13900] veth0_vlan: entered promiscuous mode [ 369.068765][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.120999][T13900] veth1_vlan: entered promiscuous mode [ 369.171535][T13870] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 369.195938][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.269142][ T8874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.305754][ T8874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.410630][T13900] veth0_macvtap: entered promiscuous mode [ 369.477006][T13900] veth1_macvtap: entered promiscuous mode [ 369.598488][T13900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.625914][T13900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.655330][T13900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.676791][T13900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.689809][T13900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.711623][T13900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.736299][T13900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.773828][T13900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.794687][T13900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.820085][T13900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.860414][T13900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.882495][T13900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.895058][T13900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.903840][T13900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.148732][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.223648][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.238816][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.316925][T13900] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 370.337055][T13900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.374029][ T3433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.394862][ T3433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.530080][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.794780][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.903517][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.264342][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.274163][ T35] bridge_slave_1: left allmulticast mode [ 371.280047][ T35] bridge_slave_1: left promiscuous mode [ 371.285921][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.296696][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.306724][ T35] bridge_slave_0: left allmulticast mode [ 371.312431][ T35] bridge_slave_0: left promiscuous mode [ 371.319153][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.327178][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.337541][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.353259][ T5867] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 371.364559][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.767272][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.779872][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.790931][ T35] bond0 (unregistering): Released all slaves [ 371.827827][T14155] lo speed is unknown, defaulting to 1000 [ 372.199208][T14155] chnl_net:caif_netlink_parms(): no params data found [ 372.222159][ T35] hsr_slave_0: left promiscuous mode [ 372.278805][ T35] hsr_slave_1: left promiscuous mode [ 372.305968][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.337026][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.452932][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.462716][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.531115][ T35] veth1_macvtap: left promiscuous mode [ 372.545696][ T35] veth0_macvtap: left promiscuous mode [ 372.557176][ T35] veth1_vlan: left promiscuous mode [ 372.569627][ T35] veth0_vlan: left promiscuous mode [ 372.609288][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.620453][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.629429][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.638381][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.647524][ T5863] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 372.662962][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.204484][ T35] team0 (unregistering): Port device team_slave_1 removed [ 373.268374][ T35] team0 (unregistering): Port device team_slave_0 removed [ 373.395880][ T5863] Bluetooth: hci0: command tx timeout [ 373.819318][T14166] lo speed is unknown, defaulting to 1000 [ 374.069650][T14187] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 374.086744][T14187] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 374.162698][T14194] syz.0.2163 uses old SIOCAX25GETINFO [ 374.170299][T14155] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.179489][T14155] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.190813][T14155] bridge_slave_0: entered allmulticast mode [ 374.224100][T14155] bridge_slave_0: entered promiscuous mode [ 374.238817][T14174] lo speed is unknown, defaulting to 1000 [ 374.246072][T14155] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.261335][T14155] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.276968][T14155] bridge_slave_1: entered allmulticast mode [ 374.307797][T14155] bridge_slave_1: entered promiscuous mode [ 374.429789][T14155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.494205][T14155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.495312][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 374.556901][T14155] team0: Port device team_slave_0 added [ 374.617561][T14155] team0: Port device team_slave_1 added [ 374.676852][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2166'. [ 374.760250][ T5863] Bluetooth: hci2: command tx timeout [ 374.806449][T14155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.813462][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.840664][T14155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.853927][T14155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.862164][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.922829][T14155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.018774][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.233245][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.312202][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 375.360108][T14155] hsr_slave_0: entered promiscuous mode [ 375.397106][T14155] hsr_slave_1: entered promiscuous mode [ 375.429699][T14155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.441304][T14226] netlink: 'syz.0.2172': attribute type 10 has an invalid length. [ 375.456013][T14155] Cannot create hsr debugfs directory [ 375.480810][ T5863] Bluetooth: hci0: command 0x041b tx timeout [ 375.507789][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.526945][T14226] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 375.536564][T14226] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 375.615547][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.678195][T14174] chnl_net:caif_netlink_parms(): no params data found [ 375.808470][T14236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2175'. [ 375.855306][T14240] xt_nfacct: accounting object `syz1' does not exists [ 376.302644][ T35] bridge_slave_1: left allmulticast mode [ 376.325744][ T35] bridge_slave_1: left promiscuous mode [ 376.331499][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.405965][ T35] bridge_slave_0: left allmulticast mode [ 376.415479][ T35] bridge_slave_0: left promiscuous mode [ 376.421290][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.845353][ T5862] Bluetooth: hci2: command tx timeout [ 377.135474][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.148888][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.160855][ T35] bond0 (unregistering): Released all slaves [ 377.201978][T14174] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.215142][T14174] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.245565][T14174] bridge_slave_0: entered allmulticast mode [ 377.253547][T14174] bridge_slave_0: entered promiscuous mode [ 377.331360][T14249] veth1_macvtap: left promiscuous mode [ 377.416532][T14174] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.423787][T14174] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.432228][T14174] bridge_slave_1: entered allmulticast mode [ 377.462882][T14174] bridge_slave_1: entered promiscuous mode [ 377.522874][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 377.555957][ T5862] Bluetooth: hci0: command 0x041b tx timeout [ 377.662725][T14174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.686260][T14282] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 377.735161][T14287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'. [ 377.744196][T14287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'. [ 377.806517][T14174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.028259][T14174] team0: Port device team_slave_0 added [ 378.075736][T14174] team0: Port device team_slave_1 added [ 378.239191][ T35] hsr_slave_0: left promiscuous mode [ 378.250388][ T35] hsr_slave_1: left promiscuous mode [ 378.272104][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.294486][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.305978][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.313745][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.382700][ T35] veth1_macvtap: left promiscuous mode [ 378.394268][ T35] veth0_macvtap: left promiscuous mode [ 378.397765][T14311] netlink: 'syz.1.2195': attribute type 1 has an invalid length. [ 378.403955][ T35] veth1_vlan: left promiscuous mode [ 378.413315][ T35] veth0_vlan: left promiscuous mode [ 378.611084][T14321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2198'. [ 378.915645][ T5862] Bluetooth: hci2: command tx timeout [ 379.231050][ T35] team0 (unregistering): Port device team_slave_1 removed [ 379.283679][ T35] team0 (unregistering): Port device team_slave_0 removed [ 379.635559][ T5862] Bluetooth: hci0: command 0x041b tx timeout [ 379.831643][T14174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.843023][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.871413][T14174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.892366][T14311] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 379.898288][T14323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2199'. [ 379.980095][T14174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.025476][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.035214][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2202'. [ 380.069422][T14174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.470584][T14174] hsr_slave_0: entered promiscuous mode [ 380.498218][T14174] hsr_slave_1: entered promiscuous mode [ 380.510882][T14174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.528906][T14174] Cannot create hsr debugfs directory [ 380.578452][T14155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 380.591622][T14155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 380.698657][T14155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.712191][T14155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.999705][ T5862] Bluetooth: hci2: command tx timeout [ 381.034518][T14155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.086237][T14155] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.100949][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.108133][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.127835][T14373] netlink: 'syz.1.2216': attribute type 16 has an invalid length. [ 381.142395][T14373] netlink: 64090 bytes leftover after parsing attributes in process `syz.1.2216'. [ 381.196842][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.204003][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.364326][T14174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 381.401271][T14174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.437569][T14174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 381.472197][T14174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 381.569761][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2218'. [ 381.591573][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 381.611589][T14381] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2218'. [ 381.622029][T14155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.715206][ T5862] Bluetooth: hci0: command 0x041b tx timeout [ 381.773163][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 381.798419][T14174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.821440][T14174] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.856382][T14155] veth0_vlan: entered promiscuous mode [ 381.863775][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.871037][ T8874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.891876][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.899123][ T8874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.916472][T14391] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 381.949865][T14155] veth1_vlan: entered promiscuous mode [ 382.029018][T14393] mac80211_hwsim hwsim9 wlan1: Device is already in use. [ 382.097463][T14155] veth0_macvtap: entered promiscuous mode [ 382.134272][T14155] veth1_macvtap: entered promiscuous mode [ 382.207528][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.229969][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.260139][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.283490][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.301831][T14155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.333650][T14155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.358668][T14155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.385504][T14155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.404694][T14155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.425226][T14155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.522856][T14174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.638689][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.702985][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.753853][T14155] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 382.789993][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.835518][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.843486][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.083344][T14446] lo speed is unknown, defaulting to 1000 [ 383.192273][T14453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2235'. [ 383.223324][T14174] veth0_vlan: entered promiscuous mode [ 383.263352][T14174] veth1_vlan: entered promiscuous mode [ 383.320631][T14174] veth0_macvtap: entered promiscuous mode [ 383.341204][T14174] veth1_macvtap: entered promiscuous mode [ 383.427158][T14174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.443120][T14174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.461450][T14174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.473421][T14174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.484597][T14174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.496036][T14174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.508492][T14174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.519428][T14174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.531806][T14174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.543593][T14174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.566121][T14174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.605325][T14174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.614193][T14174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.645533][T14174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.755786][T14460] netlink: 560 bytes leftover after parsing attributes in process `syz.0.2238'. [ 383.914833][ T3433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.943695][T14460] bridge0: entered allmulticast mode [ 383.982940][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 383.989736][T14463] pim6reg: entered allmulticast mode [ 384.021216][T14460] bridge0 (unregistering): left allmulticast mode [ 384.071359][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.081131][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.109828][T14174] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 384.123070][T14174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.160674][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.182814][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.242765][ T3433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.583815][ T3433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.673877][ T3433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.773538][ T3433] bridge_slave_1: left allmulticast mode [ 384.780578][ T3433] bridge_slave_1: left promiscuous mode [ 384.786726][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.796526][ T3433] bridge_slave_0: left allmulticast mode [ 384.802229][ T3433] bridge_slave_0: left promiscuous mode [ 384.808736][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.176169][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'. [ 385.290731][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.300952][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.325590][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.336973][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.352158][ T5863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 385.360815][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.530078][ T3433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.543627][ T3433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.554611][ T3433] bond0 (unregistering): Released all slaves [ 385.572835][T14478] netlink: 'syz.1.2241': attribute type 21 has an invalid length. [ 385.584926][T14478] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2241'. [ 385.660759][T14475] lo speed is unknown, defaulting to 1000 [ 386.013239][ T3433] hsr_slave_0: left promiscuous mode [ 386.022146][ T3433] hsr_slave_1: left promiscuous mode [ 386.029460][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.037821][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.048194][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.056738][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.081224][ T3433] veth1_macvtap: left promiscuous mode [ 386.087019][ T3433] veth0_macvtap: left promiscuous mode [ 386.092600][ T3433] veth1_vlan: left promiscuous mode [ 386.098332][ T3433] veth0_vlan: left promiscuous mode [ 386.823275][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.848755][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.864236][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.869242][ T3433] team0 (unregistering): Port device team_slave_1 removed [ 386.887723][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.898024][ T5863] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.922787][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.982322][ T3433] team0 (unregistering): Port device team_slave_0 removed [ 387.411169][ T5863] Bluetooth: hci0: command tx timeout [ 387.557028][T14475] chnl_net:caif_netlink_parms(): no params data found [ 387.597699][T14487] IPVS: Error joining to the multicast group [ 387.755713][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'. [ 387.858820][T14497] lo speed is unknown, defaulting to 1000 [ 387.927499][T14475] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.934670][T14475] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.991669][T14475] bridge_slave_0: entered allmulticast mode [ 388.024660][T14475] bridge_slave_0: entered promiscuous mode [ 388.050245][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'. [ 388.060586][T14475] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.076199][T14521] Bluetooth: MGMT ver 1.23 [ 388.081072][T14475] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.091858][T14475] bridge_slave_1: entered allmulticast mode [ 388.099494][T14475] bridge_slave_1: entered promiscuous mode [ 388.180707][T14475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.200626][T14475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.315770][T14475] team0: Port device team_slave_0 added [ 388.334658][T14475] team0: Port device team_slave_1 added [ 388.371162][T14524] lo speed is unknown, defaulting to 1000 [ 388.476111][T14475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.495093][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.607593][T14475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.658090][T14475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.704612][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.769908][T14475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.980825][ T3433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.010755][ T5863] Bluetooth: hci2: command tx timeout [ 389.053781][T14525] lo speed is unknown, defaulting to 1000 [ 389.231262][T14554] netlink: 'syz.1.2256': attribute type 10 has an invalid length. [ 389.394372][ T3433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.476005][ T5863] Bluetooth: hci0: command tx timeout [ 389.522762][T14475] hsr_slave_0: entered promiscuous mode [ 389.595898][T14475] hsr_slave_1: entered promiscuous mode [ 389.605547][T14475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.613162][T14475] Cannot create hsr debugfs directory [ 389.814811][ T3433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.883029][T14497] chnl_net:caif_netlink_parms(): no params data found [ 390.086987][ T3433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.704870][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2259'. [ 390.728643][T14564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2259'. [ 390.894957][ T3433] bridge_slave_1: left allmulticast mode [ 390.912067][ T3433] bridge_slave_1: left promiscuous mode [ 390.922148][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.937065][ T3433] bridge_slave_0: left allmulticast mode [ 390.945437][ T3433] bridge_slave_0: left promiscuous mode [ 390.951226][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.958275][T14572] nft_compat: unsupported protocol 6 [ 391.085720][ T5863] Bluetooth: hci2: command tx timeout [ 391.433346][ T3433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.448135][ T3433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.462979][ T3433] bond0 (unregistering): Released all slaves [ 391.474569][T14497] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.482518][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.495511][T14497] bridge_slave_0: entered allmulticast mode [ 391.502374][T14497] bridge_slave_0: entered promiscuous mode [ 391.518603][T14497] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.534851][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.543029][T14497] bridge_slave_1: entered allmulticast mode [ 391.561955][T14497] bridge_slave_1: entered promiscuous mode [ 391.565416][ T5863] Bluetooth: hci0: command tx timeout [ 391.605661][T14575] ipvlan1: invalid flags given to default FDB implementation [ 391.799672][T14497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.873565][T14497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.947582][T14497] team0: Port device team_slave_0 added [ 391.967772][T14497] team0: Port device team_slave_1 added [ 392.048305][T14497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.063155][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.090089][T14497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.199955][T14497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.225380][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.280380][T14497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.328107][ T3433] hsr_slave_0: left promiscuous mode [ 392.334337][ T3433] hsr_slave_1: left promiscuous mode [ 392.341531][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.349279][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.359832][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.367580][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.393373][ T3433] veth1_macvtap: left promiscuous mode [ 392.399331][ T3433] veth0_macvtap: left promiscuous mode [ 392.404923][ T3433] veth1_vlan: left promiscuous mode [ 392.410616][ T3433] veth0_vlan: left promiscuous mode [ 393.158789][ T5863] Bluetooth: hci2: command tx timeout [ 393.257910][ T3433] team0 (unregistering): Port device team_slave_1 removed [ 393.342346][ T3433] team0 (unregistering): Port device team_slave_0 removed [ 393.645465][ T5863] Bluetooth: hci0: command tx timeout [ 393.935409][T14497] hsr_slave_0: entered promiscuous mode [ 393.953260][T14497] hsr_slave_1: entered promiscuous mode [ 393.969434][T14497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.983996][T14497] Cannot create hsr debugfs directory [ 394.058163][T14612] lo speed is unknown, defaulting to 1000 [ 394.313932][T14475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.370924][T14475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.379330][T14619] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 394.389566][T14621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2273'. [ 394.422500][T14475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.460826][T14619] netlink: 'syz.3.2273': attribute type 4 has an invalid length. [ 394.476814][T14475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.516756][T14619] netlink: 'syz.3.2273': attribute type 4 has an invalid length. [ 394.614228][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 394.616095][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 394.924747][T14633] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2278'. [ 394.967071][T14475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.003286][T14475] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.039347][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.046563][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.082649][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.089862][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.215903][T14497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.235991][ T5862] Bluetooth: hci2: command tx timeout [ 395.245107][T14497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.267947][T14497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.278800][T14497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.404927][T14642] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 395.458631][T14497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.586551][T14497] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.612863][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.620081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.656839][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.664011][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.718054][T14475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.885665][T14475] veth0_vlan: entered promiscuous mode [ 395.911667][T14475] veth1_vlan: entered promiscuous mode [ 395.948569][T14658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2286'. [ 395.971878][T14658] hsr_slave_0: left promiscuous mode [ 396.126369][T14475] veth0_macvtap: entered promiscuous mode [ 396.167048][T14475] veth1_macvtap: entered promiscuous mode [ 396.208998][T14672] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2288'. [ 396.234160][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.260207][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.274298][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.296059][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.313051][T14475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.358115][ T5862] Bluetooth: hci0: command 0x0c20 tx timeout [ 396.366401][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 396.388242][T14475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.419026][T14497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.480687][T14475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.513886][T14475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.542619][T14475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.552605][T14475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.715399][T14696] ------------[ cut here ]------------ [ 396.721374][T14696] WARNING: CPU: 0 PID: 14696 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 396.730980][T14696] Modules linked in: [ 396.734930][T14696] CPU: 0 UID: 0 PID: 14696 Comm: syz.1.2293 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 396.745960][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 396.756137][T14696] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 396.762085][T14696] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 0a 3f 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 ba 3a 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 e8 3e 08 f8 85 ed 0f 8e 49 [ 396.781903][T14696] RSP: 0018:ffffc9000316f078 EFLAGS: 00010287 [ 396.788086][T14696] RAX: ffffffff898caf56 RBX: 00000000fffbffea RCX: 0000000000040000 [ 396.796153][T14696] RDX: ffffc9000ad66000 RSI: 0000000000000a43 RDI: 0000000000000a44 [ 396.804173][T14696] RBP: dffffc0000000000 R08: ffffffff898caf46 R09: 1ffff11005df2334 [ 396.812222][T14696] R10: dffffc0000000000 R11: ffffed1005df2335 R12: dffffc0000000000 [ 396.820271][T14696] R13: ffff88802ef918c0 R14: 00000000ffffffea R15: 0000000000000000 [ 396.828318][T14696] FS: 00007f2f481106c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 396.837328][T14696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.843943][T14696] CR2: 0000000020100000 CR3: 000000004b180000 CR4: 00000000003526f0 [ 396.851998][T14696] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.860046][T14696] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.868093][T14696] Call Trace: [ 396.871413][T14696] [ 396.874393][T14696] ? __warn+0x168/0x4e0 [ 396.878643][T14696] ? sk_skb_reason_drop+0x87/0x380 [ 396.883790][T14696] ? report_bug+0x2b3/0x500 [ 396.888367][T14696] ? sk_skb_reason_drop+0x87/0x380 [ 396.893525][T14696] ? handle_bug+0x60/0x90 [ 396.897949][T14696] ? exc_invalid_op+0x1a/0x50 [ 396.902765][T14696] ? asm_exc_invalid_op+0x1a/0x20 [ 396.907875][T14696] ? sk_skb_reason_drop+0x76/0x380 [ 396.913032][T14696] ? sk_skb_reason_drop+0x86/0x380 [ 396.918241][T14696] ? sk_skb_reason_drop+0x87/0x380 [ 396.923402][T14696] ? sk_skb_reason_drop+0x86/0x380 [ 396.928602][T14696] ? ip_rcv_finish_core+0x129f/0x1b50 [ 396.934025][T14696] ip_rcv_finish_core+0xfde/0x1b50 [ 396.939197][T14696] ip_sublist_rcv+0x3b1/0xab0 [ 396.943913][T14696] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 396.949207][T14696] ? skb_orphan+0xae/0xd0 [ 396.953573][T14696] ? __pfx_ip_rcv_finish+0x10/0x10 [ 396.958787][T14696] ip_list_rcv+0x42b/0x480 [ 396.963258][T14696] ? __pfx_ip_list_rcv+0x10/0x10 [ 396.968297][T14696] ? __pfx_ip_list_rcv+0x10/0x10 [ 396.973283][T14696] __netif_receive_skb_list_core+0x94e/0x980 [ 396.979392][T14696] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 396.986092][T14696] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 396.992643][T14696] ? read_tsc+0x9/0x20 [ 396.996815][T14696] ? timekeeping_get_ns+0x2c0/0x420 [ 397.002073][T14696] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 397.008488][T14696] netif_receive_skb_list_internal+0xa51/0xe30 [ 397.014691][T14696] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 397.021092][T14696] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 397.027859][T14696] ? __pfx_eth_type_trans+0x10/0x10 [ 397.033252][T14696] ? __phys_addr+0xba/0x170 [ 397.037831][T14696] ? build_skb_around+0x111/0x260 [ 397.042919][T14696] ? __xdp_build_skb_from_frame+0x313/0x650 [ 397.048874][T14696] netif_receive_skb_list+0x55/0x4b0 [ 397.054179][T14696] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 397.059711][T14696] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 397.065725][T14696] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 397.071336][T14696] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 397.077240][T14696] ? synchronize_rcu+0x11b/0x360 [ 397.082214][T14696] ? __pfx_synchronize_rcu+0x10/0x10 [ 397.087578][T14696] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 397.093859][T14696] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 397.099867][T14696] ? _copy_from_user+0x99/0xc0 [ 397.104709][T14696] ? bpf_test_init+0x15a/0x180 [ 397.109542][T14696] ? xdp_convert_md_to_buff+0x5b/0x330 [ 397.115166][T14696] bpf_prog_test_run_xdp+0x805/0x11e0 [ 397.120602][T14696] ? __pfx_lock_release+0x10/0x10 [ 397.125731][T14696] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 397.131554][T14696] ? __fget_files+0x29/0x470 [ 397.136198][T14696] ? fput+0x1a8/0x230 [ 397.140223][T14696] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 397.146151][T14696] bpf_prog_test_run+0x2e4/0x360 [ 397.151176][T14696] __sys_bpf+0x48d/0x810 [ 397.155524][T14696] ? __pfx___sys_bpf+0x10/0x10 [ 397.160338][T14696] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 397.166380][T14696] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 397.172826][T14696] ? do_syscall_64+0x100/0x230 [ 397.177694][T14696] __x64_sys_bpf+0x7c/0x90 [ 397.182158][T14696] do_syscall_64+0xf3/0x230 [ 397.186755][T14696] ? clear_bhb_loop+0x35/0x90 [ 397.191468][T14696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.197453][T14696] RIP: 0033:0x7f2f4737e719 [ 397.201913][T14696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.221682][T14696] RSP: 002b:00007f2f48110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.230194][T14696] RAX: ffffffffffffffda RBX: 00007f2f47535f80 RCX: 00007f2f4737e719 [ 397.238244][T14696] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 397.246297][T14696] RBP: 00007f2f473f175e R08: 0000000000000000 R09: 0000000000000000 [ 397.254313][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.262364][T14696] R13: 0000000000000000 R14: 00007f2f47535f80 R15: 00007fff2b3424f8 [ 397.270414][T14696] [ 397.273453][T14696] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 397.280749][T14696] CPU: 0 UID: 0 PID: 14696 Comm: syz.1.2293 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 397.291551][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 397.301651][T14696] Call Trace: [ 397.304965][T14696] [ 397.307942][T14696] dump_stack_lvl+0x241/0x360 [ 397.312645][T14696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.317855][T14696] ? __pfx__printk+0x10/0x10 [ 397.322452][T14696] ? _printk+0xd5/0x120 [ 397.326653][T14696] ? __init_begin+0x41000/0x41000 [ 397.331721][T14696] ? vscnprintf+0x5d/0x90 [ 397.336099][T14696] panic+0x349/0x880 [ 397.340050][T14696] ? __warn+0x177/0x4e0 [ 397.344219][T14696] ? __pfx_panic+0x10/0x10 [ 397.348658][T14696] ? show_trace_log_lvl+0x3b2/0x410 [ 397.353918][T14696] __warn+0x34b/0x4e0 [ 397.357917][T14696] ? sk_skb_reason_drop+0x87/0x380 [ 397.363058][T14696] report_bug+0x2b3/0x500 [ 397.367416][T14696] ? sk_skb_reason_drop+0x87/0x380 [ 397.372561][T14696] handle_bug+0x60/0x90 [ 397.376770][T14696] exc_invalid_op+0x1a/0x50 [ 397.381317][T14696] asm_exc_invalid_op+0x1a/0x20 [ 397.386206][T14696] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 397.391982][T14696] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 0a 3f 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 ba 3a 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 e8 3e 08 f8 85 ed 0f 8e 49 [ 397.411620][T14696] RSP: 0018:ffffc9000316f078 EFLAGS: 00010287 [ 397.417707][T14696] RAX: ffffffff898caf56 RBX: 00000000fffbffea RCX: 0000000000040000 [ 397.425700][T14696] RDX: ffffc9000ad66000 RSI: 0000000000000a43 RDI: 0000000000000a44 [ 397.433712][T14696] RBP: dffffc0000000000 R08: ffffffff898caf46 R09: 1ffff11005df2334 [ 397.441719][T14696] R10: dffffc0000000000 R11: ffffed1005df2335 R12: dffffc0000000000 [ 397.449723][T14696] R13: ffff88802ef918c0 R14: 00000000ffffffea R15: 0000000000000000 [ 397.457720][T14696] ? sk_skb_reason_drop+0x76/0x380 [ 397.462867][T14696] ? sk_skb_reason_drop+0x86/0x380 [ 397.468022][T14696] ? sk_skb_reason_drop+0x86/0x380 [ 397.473170][T14696] ? ip_rcv_finish_core+0x129f/0x1b50 [ 397.478573][T14696] ip_rcv_finish_core+0xfde/0x1b50 [ 397.483739][T14696] ip_sublist_rcv+0x3b1/0xab0 [ 397.488449][T14696] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 397.493660][T14696] ? skb_orphan+0xae/0xd0 [ 397.498000][T14696] ? __pfx_ip_rcv_finish+0x10/0x10 [ 397.503131][T14696] ip_list_rcv+0x42b/0x480 [ 397.507573][T14696] ? __pfx_ip_list_rcv+0x10/0x10 [ 397.512535][T14696] ? __pfx_ip_list_rcv+0x10/0x10 [ 397.517507][T14696] __netif_receive_skb_list_core+0x94e/0x980 [ 397.523517][T14696] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 397.530139][T14696] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 397.536672][T14696] ? read_tsc+0x9/0x20 [ 397.540750][T14696] ? timekeeping_get_ns+0x2c0/0x420 [ 397.545984][T14696] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 397.552334][T14696] netif_receive_skb_list_internal+0xa51/0xe30 [ 397.558507][T14696] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 397.564947][T14696] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 397.571645][T14696] ? __pfx_eth_type_trans+0x10/0x10 [ 397.576865][T14696] ? __phys_addr+0xba/0x170 [ 397.581398][T14696] ? build_skb_around+0x111/0x260 [ 397.586632][T14696] ? __xdp_build_skb_from_frame+0x313/0x650 [ 397.592556][T14696] netif_receive_skb_list+0x55/0x4b0 [ 397.597870][T14696] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 397.603353][T14696] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 397.609264][T14696] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 397.614833][T14696] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 397.620649][T14696] ? synchronize_rcu+0x11b/0x360 [ 397.625623][T14696] ? __pfx_synchronize_rcu+0x10/0x10 [ 397.630970][T14696] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 397.637353][T14696] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 397.643271][T14696] ? _copy_from_user+0x99/0xc0 [ 397.648071][T14696] ? bpf_test_init+0x15a/0x180 [ 397.652887][T14696] ? xdp_convert_md_to_buff+0x5b/0x330 [ 397.658365][T14696] bpf_prog_test_run_xdp+0x805/0x11e0 [ 397.663756][T14696] ? __pfx_lock_release+0x10/0x10 [ 397.668820][T14696] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 397.674640][T14696] ? __fget_files+0x29/0x470 [ 397.679273][T14696] ? fput+0x1a8/0x230 [ 397.683297][T14696] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 397.689232][T14696] bpf_prog_test_run+0x2e4/0x360 [ 397.694197][T14696] __sys_bpf+0x48d/0x810 [ 397.698476][T14696] ? __pfx___sys_bpf+0x10/0x10 [ 397.703257][T14696] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 397.709256][T14696] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 397.715798][T14696] ? do_syscall_64+0x100/0x230 [ 397.720586][T14696] __x64_sys_bpf+0x7c/0x90 [ 397.725022][T14696] do_syscall_64+0xf3/0x230 [ 397.729565][T14696] ? clear_bhb_loop+0x35/0x90 [ 397.734291][T14696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.740213][T14696] RIP: 0033:0x7f2f4737e719 [ 397.744648][T14696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.764285][T14696] RSP: 002b:00007f2f48110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.772716][T14696] RAX: ffffffffffffffda RBX: 00007f2f47535f80 RCX: 00007f2f4737e719 [ 397.780715][T14696] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 397.788718][T14696] RBP: 00007f2f473f175e R08: 0000000000000000 R09: 0000000000000000 [ 397.796704][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.804684][T14696] R13: 0000000000000000 R14: 00007f2f47535f80 R15: 00007fff2b3424f8 [ 397.812677][T14696] [ 397.816028][T14696] Kernel Offset: disabled [ 397.820389][T14696] Rebooting in 86400 seconds..