last executing test programs: 4.7197805s ago: executing program 3 (id=839): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x0, 0x218, 0x0, 0x218, 0x0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x6}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vcan0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r3) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r7, r9, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r3}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r12, 0x1, 0x70bd2b, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x58, 0x140e, 0x300, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20) bind$bt_sco(r3, &(0x7f0000000000), 0x8) sendmsg$inet(r10, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="135b9e56ac1c4d772c86f70cb3ea6f6a1494b93781467995ce2e62cd9200f849a4931f9b0ecf7020bcfc3a554142d63e8f3dd7a5f8f86873570906dfa5feab5318a7efafb08d5f06ef18d91558f9fe1af78054e0d8c93aff3d74774786bbc7d6b031fa35ae0b1d680ee5f405d5722e647b669502293d2d81257b12d271ce50db711d78de83d255c84a256aaea85ccba88e8caccac9755a3be3c2aab6bc76762dc3f44f7b750704f1e8f399e4d484555afd914009371b256e3d3555f5ac553b", 0xbf}, {&(0x7f0000000bc0)="7f855da862ec03a832609968ab1edfb07942db4543f89795ae4ca64374a1caaa5b642397b4f2d85b1295bc8669da0319a0c5ff77e25c3edd21c4d062085138849c7f22bc13a1a8e5ae9b2797cd328c7c5d4c8bfcabe641c501ea50bf96c9fac80f5c64abc46e95c4942c55fbd0f50c8ab81afb44efb4c52293fd19bc85e53931e796bb8b34b64f7a4c34000a4db7bd03f48096cc84e0cefdc427800bb26e4e7335866bc9bbf9e90a2b972fa1e816ec29d025ece66bcb660bd644571de327bd23e3", 0xc1}], 0x2, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x38}, 0x1) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x17, &(0x7f0000000180)=""/246, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.689310912s ago: executing program 3 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0xd20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x32}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002a000b000000000000000000080000000c00018006000000884800a2"], 0x20}}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r4, 0x5abf7901103d9bd3, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) 3.401314003s ago: executing program 3 (id=851): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000000800020000000000020000000000000001000003000000000000000000000054c90000000000"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 3.186929217s ago: executing program 3 (id=856): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="79da224897ea920bb8a29ddaf7c8d9331db0c7d3b67501fa02b90a17e9dc15a8a4ec10bb2ed9ff99c7acb155739d8eb99e2a45943c4e39ffee2957f8784978a485914b9e65682fe02a0d6f4e270f98ace4430505900fdfafa2647fe025cab959231541999a809c0c7c955d5a139da2e993546910d95c04af6d162bafa3c654d0941549c9853302c38bea8173d231952f66071faa72e2d3396b902fb58493572edf3c92791fe4"], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000480), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001"], 0xd8}}, 0x4000040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) 2.952851288s ago: executing program 0 (id=858): r0 = socket$inet(0x2, 0x3, 0x6) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb3fe817285694ceb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2, 0x0, 0xffff}}}}}}, 0x0) shutdown(r0, 0x0) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) sendto$l2tp(r1, &(0x7f00000000c0)="91544aaa563750a82868dc4f2bee05249b5c5f089295a3e12f8f4d51887bbbd8fa313c8ddc12896dcd5c7e2438f1240c13130b3a0c", 0x35, 0x20000000, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.817287123s ago: executing program 3 (id=859): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030325bd700800000000002bb5076c5ef44677883fc62ec87400000008000300", @ANYRES32=r3, @ANYBLOB="0c009900010000004a000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.708570722s ago: executing program 1 (id=861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x3}, 0x2) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r6, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x47c7b0bafb313532}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@dellinkprop={0x208, 0x6d, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xa3a1, 0x4}, [@IFLA_AF_SPEC={0x1e0, 0x1a, 0x0, 0x1, [@AF_INET6={0x58, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0xffff}, {0x8, 0x7, 0x0, 0x0, 0x3}]}}, @AF_MPLS={0x4}, @AF_INET6={0x84, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7f}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}}]}, @AF_INET6={0x64, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x7c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xe}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_CARRIER={0x5, 0x21, 0xf}]}, 0x208}, 0x1, 0x4801000000000000}, 0x20008000) 2.573002771s ago: executing program 0 (id=863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="06004000bb0966c01dbbbbbbbbbbaaaaaaaaaabb88f580f38feabe526bf93d3c5482d9c6f9f9cf09da879167049d1da878c7d12d4953999babea8c20b5f0207be6"], 0xfdef) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000070214010027bd7000fedbdf250900020073797a31000000000500540081000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c040) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_buf(r4, 0x0, 0x20, &(0x7f0000000700)="1d38aa9dcc17e5d53dffc0a0b71a2db6492be9c4b977156602c02eed2bfae1fd56ecf01f37378b17be8b538a5b30c8452f3877b5e628ba55ae29140327fe43ba08a6b90f1019a5ae74341be70f722160a408072c41c13dfd9c172cc1312fbf977440a98e6b7d3bcb55ce040e69e63b991f2cdb3b6d18747539e765ce273dc03a4d446de50a4acbca57137e5500433392cd8316146978a41df911e6912a1a279cdea3f313ef2f8ae8661da3e9c550015d4a62b8fe678713e4abe1638de6d6702381ff", 0xc2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7, 0x20, 0x8, 0x6, {{0xd, 0x4, 0x2, 0x8, 0x34, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @remote, {[@rr={0x7, 0x1f, 0xe2, [@rand_addr=0x64010101, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@initdev, 0x0}, &(0x7f0000000280)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @loopback}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'pim6reg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x270, 0x30, 0xffff, 0x0, 0x0, {}, [{0x25c, 0x1, [@m_mirred={0x204, 0x14, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x0, 0x6, 0x7, 0x5}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x39e5, 0xffffffffffffffff, 0x1, 0x1}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff7f, 0x8, 0x0, 0x9, 0x7}, 0x5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80c1, 0xffff, 0x7, 0x8, 0x1200000}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x5, 0xe2, 0xfffff1e1}, 0x0, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x3, 0x10000000, 0x3, 0x42c1}, 0x2, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80, 0x3, 0x8, 0x1}, 0x4, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffffffe, 0x10000000, 0x3ff, 0x2}, 0x3, r14}}]}, {0xd5, 0x6, "f419487df89f1e9a9adf588d6f38f5b9b0d4d14b501c1ad6902481d9fc7b062ca54a8f9e406a265d86af23f3e67e3442ad28231237f95ec9e5647469da930ebd982dbf62433fb3a9321e70f24bdec0579f8a48587e924160aeb86ac09c63d4b0f915aafb3a80ee573e3012955032218262e84fc3105f6455ae4d9f100d1cf768c17c56b451a27feb4693af388fa2a4593b3b9854491b8354fc4c68f1509edb26c63da35b6f076680b8758187f496733b44cd6e24d319cd72b893353ee575f7b4f177f0a9a6261a482e8a4ee60ef48364d6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x270}}, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x7, 0x0, &(0x7f0000000180)) 2.451163829s ago: executing program 3 (id=865): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="070800ff4bffbabeff48000086dd", 0xe, 0x2400c011, &(0x7f0000000000)={0x11, 0xf2, r4, 0x1, 0x0, 0x6, @random="6d3d0b2b9ddd"}, 0x14) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}]}]}}]}, 0x9c}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x201, 0x0, 0x0, 0x2, 0x0, 0x20, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x4, 0x100000001, 0x100, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x51, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x28, 0x80, "1ba0a076c6"}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x5}, 0x18) (async) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x1}, 0xff}, 0x18, &(0x7f00000001c0)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x4000001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) 1.913326779s ago: executing program 2 (id=866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0xfffffffffffffdd5, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) 1.911183601s ago: executing program 4 (id=867): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x70bd29, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff02dcdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000060012"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x60040) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x39, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f086dd4de7f9c764360000000200a273ae73c514c72ae347cf5d0b7ccf8b21d912c81eafc04d9056f63d44bfed3a", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r7, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) bind$tipc(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x700, 0x80, 0x6, 0x7, {{0x1d, 0x4, 0x1, 0x2, 0x74, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@end, @timestamp_prespec={0x44, 0x24, 0xdf, 0x3, 0xf, [{@multicast1, 0x4}, {@local, 0x8}, {@loopback, 0x2}, {@loopback, 0x2}]}, @lsrr={0x83, 0x1f, 0xc, [@dev={0xac, 0x14, 0x14, 0x25}, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xa}, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @noop, @generic={0x83, 0xa, "524d14bb2a70c17e"}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x4, [{@multicast2, 0x4}]}, @noop, @noop]}}}}}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@gettfilter={0x5c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x8}, {0xf, 0x11}, {0x10, 0xfff2}}, [{0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd9}, {0x8, 0xb, 0x941b}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}}, 0x0) 1.641454136s ago: executing program 1 (id=868): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000500000000dcdf251b00000008000300", @ANYRES32=r5, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2ce}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000045) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r9, 0x402, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000004) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) r10 = socket$inet(0x2, 0x5, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x6}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) getsockopt$inet_int(r10, 0x0, 0x22, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.640609457s ago: executing program 2 (id=869): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x21, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7, 0x0, 0x0, 0xfffc}, @initr0, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x1c, 0x7, 0xa, 0x100, 0x7}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @generic={0x5, 0x9, 0x8, 0x9, 0xe}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb3c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.506502279s ago: executing program 2 (id=870): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x12, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006911b8000000000005000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xffffffffffffffe9, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1.185218385s ago: executing program 4 (id=871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000400)=@name, &(0x7f0000000480)=0x10, 0x80000) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000000c0)={0x8, 'dvmrp0\x00', {'dvmrp1\x00'}, 0x7f}) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000680)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000001900)="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", 0x146}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000240)="8d838b30c9abdc2b6a5d04642b1856a9394a21243b6b10d4d76ce15c340d71d2978ccf62a879f911a1b8950ba2dd982df028f8ee8d6b20a1ef1d64ac2a370920cb5c6cc093390d0d395d54abd820cbe2e5e8bedbb8d1da69c48d8ffbb462c6a6c9b25f3596e6bfe4c491634c2b4f4f1b959684671bf631af87f1bd416fc63f9e18fc8ceac748d5108f00b694ee6f8a75553c6385c24d24902b3d715127ddf85ec7325df43e9cf85dd88c1bb9a082242182d5f475adc164f1f9400a22c79f82f2c352103dc7", 0xc5}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000340)="5dbe63184a3180a3a5d57450bfd8d0dbe22f85fa49294d77be08cd7a623223550c59c4a8b6da58579801d54dbef514b8506a1e37a00e98f4863663f1fc80ccf0cf5fce90ceb6c68600795c2a748e8019309c74d8ec86f08023d4b6efdfb5cac4f22683b2a8e2b9a79059283e9d8030c04a90e6094ba2d1d23d3b70e6a5b21d6093d9f78796a31ae3e92518", 0x8b}, {&(0x7f0000000500)="c8c17b42c51cdc6d021af34028945f1dc5d6e797cf9052d1913224a76fa55de2b0387f81369684013dd3fdf8ce99a1f536a077e802bb9749e094848cf210d213ca83aefaebd06779a5331fc662b02ec61f6186c5f46ef690fdefd77975a7911bdf754d4f7d6eea979afeec2d1f252628e0fc73c9af7db870d0d276717ac83f4ea23b97b55947f49a9a5b07f93359c6cdde1582f8b7ccf249dc529be4d55679766fc45feff5c2c1c550bad1a573e6fa7b11e687c0fa770515293ef89d2e7acebb264f4aa7ad23e90c273b4008", 0xcc}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.180346333s ago: executing program 1 (id=872): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 1.135325656s ago: executing program 2 (id=873): r0 = socket(0x1f, 0x5, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000200000000000000000000008510000007000000850000002a000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000721000b70500000800000085000000a50000009500000000000000", @ANYRESDEC=r1, @ANYRESOCT=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket(0x1f, 0x5, 0x6) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000200000000000000000000008510000007000000850000002a000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000721000b70500000800000085000000a50000009500000000000000", @ANYRESDEC=r1, @ANYRESOCT=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) 986.034686ms ago: executing program 1 (id=874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000004380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004600)={0x44, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1d}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 976.949749ms ago: executing program 2 (id=875): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a30000000000800410072786500140033"], 0x38}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x25a5, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req={0x8, 0x5, 0x7ff, 0x9}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="15000000009a1e6b617d699cb79008000300", @ANYRES32=r3], 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x128, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xfffffffffffffdb7}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x128}}, 0x0) 955.428018ms ago: executing program 4 (id=876): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_int(r1, &(0x7f00000002c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000180)=0x8000000000000000, 0x8) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x5}) (async) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x27) 856.596585ms ago: executing program 0 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0)='4', 0x1) (async, rerun: 32) tee(r4, r3, 0xffffffffffffffff, 0x2) (async, rerun: 32) r6 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'full', 0x20, 0x3, 0x20, 0x801}, 0x2f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) poll(&(0x7f0000000040)=[{r1, 0x16842e9bd142d0d5}], 0x1, 0x94) listen(r1, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{r0, 0x10}, {r2, 0x20}, {r7, 0x26c0}, {r1, 0x108}, {r2, 0x100}, {r5, 0x95}], 0x6, &(0x7f00000003c0)={r8, r9+60000000}, &(0x7f0000000400)={[0x1b]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x7f) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7000, 0x8, 0x3, 0x5, 0x4, 0x5, 0xfff7, 0x1004]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r12, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x69, 0x5b}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3d}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x200048d4}, 0x40100) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x3c}}, 0x4001) 809.069715ms ago: executing program 4 (id=878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000086"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000604948980e484e2029d57900003c0000003c00000006000000040000000000000e0400000000000000000000000100000d04000000000000000100000000000000000000040000000004000000000000"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000086"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000604948980e484e2029d57900003c0000003c00000006000000040000000000000e0400000000000000000000000100000d04000000000000000100000000000000000000040000000004000000000000"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 746.12967ms ago: executing program 1 (id=879): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x8, 0x4}]}}]}, 0x38}, 0x1, 0x8100000018000000}, 0x1010) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 630.759449ms ago: executing program 0 (id=880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) ppoll(&(0x7f0000000780)=[{0xffffffffffffffff, 0x10e0}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff0a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x8}]}}}]}, 0x3c}}, 0x0) 541.223467ms ago: executing program 4 (id=881): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0xa, 0xf7ff}) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100884}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x300, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x28000880}, 0x20000040) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000140), 0x0}, 0x20) 529.64193ms ago: executing program 0 (id=882): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000000000000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000080000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000120010000000000000000000000000000000040000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ac1414000000000000000000000000000000000000000000fc"], 0xec}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 429.783487ms ago: executing program 4 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\b\x00'/12, @ANYRES32, @ANYBLOB="a5e2fface2d658fc893253c85283d2407736010ebcb1602da611f07ceaacd35a2af47e7e4e1a023c4fa93b36cc615b6fd484b92f29d623816d5170c9f74022d7b594f4a45f16649c", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200d8e621140000010000009500007b00000000850000000800000095e0000000000000", @ANYRES16=r2], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @local}}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8144fe1cace81ed0b7fece0b42a9ecbee5de6ccd40dd2e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162389a868a1e1fc60a", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f00000000c0)=0x80, 0x4) connect$inet(r6, &(0x7f00000003c0)={0x2, 0x0, @empty}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r6, 0x0, 0x19, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r6, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}, 0xffffff40}], 0x1, 0x2020, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x158, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0xa2, 0xc, "3efba365d3c32f669b02b18e57c2362bcd769569e2ac92826c113c1989d3bd7a384b8816eb78ca2e8af232cf7b7399c04720727ee6e9fb63e2da1744759dc2d21f774245258c1e03dda80fe34fe264cb7952f6def539e0d70b8705f4f9f9eaeae224b34ee9edd04480e83c02682dc2450d2652c5b9d77ae753f9d5dd6dcdc18114b7ffd38c3a524bd387afe9d08f8f254615c43d5bea4ef31bec613b95e1"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x215c756}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x194}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r8, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0003"], 0x54}}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1411, 0xd60a6ac58d39c19, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8040) 296.938836ms ago: executing program 0 (id=884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80084000"], 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x28, r7, 0xcc071acbf25dbf8f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xa0, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "6def087f14c651065ac2a8128ab0ba291a43a70230b2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x884}, 0x20000000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x280, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_DESC={0x180, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e88}]}]}, @NFTA_SET_DESC_CONCAT={0xd4, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbae3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x904}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5414}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x51e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fd5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc44d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x480}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x844}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6840}]}, @NFTA_SET_EXPRESSIONS={0xd0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_HASH_OFFSET={0x8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x7d}]}}}, {0x5c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x9258c0ed9d129a54}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x76}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xa1}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x40}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}], {0x14}}, 0x2a8}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="127eca672abe493d", 0x8, 0x20004000, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) 295.973041ms ago: executing program 1 (id=885): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) read(r0, &(0x7f0000000a40)=""/4096, 0x1000) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)=0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x11, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, r5, 0x24000}}, 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x8, 0xfffff505, 0x3, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r6, 0x9}, &(0x7f0000000180)=0x8) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000a00)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 0s ago: executing program 2 (id=886): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'wg0\x00', {0x2, 0x0, @loopback}}) clock_gettime(0x0, &(0x7f0000005d80)) (async) clock_gettime(0x0, &(0x7f0000005d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/91, 0x5b}], 0x5, &(0x7f0000000480)=""/23, 0x17}, 0xa}, {{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000540)=""/128, 0x80}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0xfffffffffffffffd}, {&(0x7f00000015c0)=""/105, 0x69}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/102, 0x66}, {&(0x7f00000026c0)=""/165, 0xa5}, {&(0x7f0000002780)=""/149, 0x95}, {&(0x7f0000002840)=""/190, 0xbe}], 0x9, &(0x7f00000029c0)=""/40, 0x28}}, {{&(0x7f0000002a00)=@phonet, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002a80)=""/175, 0xaf}, {&(0x7f0000002b40)=""/62, 0x3e}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/229, 0xe5}, {&(0x7f0000003c80)=""/235, 0xeb}, {&(0x7f0000003d80)=""/62, 0x3e}, {&(0x7f0000003dc0)=""/232, 0xe8}, {&(0x7f0000003ec0)=""/24, 0x18}], 0x8, &(0x7f0000003f80)=""/112, 0x70}, 0xff}, {{&(0x7f0000004000)=@hci, 0x80, &(0x7f0000005380)=[{&(0x7f0000004080)}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/103, 0x67}, {&(0x7f0000005140)=""/121, 0x79}, {&(0x7f00000051c0)=""/227, 0xe3}, {&(0x7f00000052c0)=""/161, 0xa1}], 0x6, &(0x7f0000005400)=""/64, 0x40}, 0x8000}, {{&(0x7f0000005440)=@ieee802154, 0x80, &(0x7f00000056c0)=[{&(0x7f00000054c0)=""/186, 0xba}, {&(0x7f0000005580)=""/167, 0xa7}, {&(0x7f0000005640)=""/85, 0x55}], 0x3, &(0x7f0000005700)=""/146, 0x92}, 0x7}, {{&(0x7f00000057c0)=@nfc, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005840)=""/196, 0xc4}, {&(0x7f0000005940)=""/114, 0x72}, {&(0x7f00000059c0)=""/222, 0xde}], 0x3, &(0x7f0000005b00)=""/206, 0xce}}], 0x6, 0x100, &(0x7f0000005dc0)={r1, r2+10000000}) (async) recvmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/91, 0x5b}], 0x5, &(0x7f0000000480)=""/23, 0x17}, 0xa}, {{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000540)=""/128, 0x80}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0xfffffffffffffffd}, {&(0x7f00000015c0)=""/105, 0x69}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/102, 0x66}, {&(0x7f00000026c0)=""/165, 0xa5}, {&(0x7f0000002780)=""/149, 0x95}, {&(0x7f0000002840)=""/190, 0xbe}], 0x9, &(0x7f00000029c0)=""/40, 0x28}}, {{&(0x7f0000002a00)=@phonet, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002a80)=""/175, 0xaf}, {&(0x7f0000002b40)=""/62, 0x3e}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/229, 0xe5}, {&(0x7f0000003c80)=""/235, 0xeb}, {&(0x7f0000003d80)=""/62, 0x3e}, {&(0x7f0000003dc0)=""/232, 0xe8}, {&(0x7f0000003ec0)=""/24, 0x18}], 0x8, &(0x7f0000003f80)=""/112, 0x70}, 0xff}, {{&(0x7f0000004000)=@hci, 0x80, &(0x7f0000005380)=[{&(0x7f0000004080)}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/103, 0x67}, {&(0x7f0000005140)=""/121, 0x79}, {&(0x7f00000051c0)=""/227, 0xe3}, {&(0x7f00000052c0)=""/161, 0xa1}], 0x6, &(0x7f0000005400)=""/64, 0x40}, 0x8000}, {{&(0x7f0000005440)=@ieee802154, 0x80, &(0x7f00000056c0)=[{&(0x7f00000054c0)=""/186, 0xba}, {&(0x7f0000005580)=""/167, 0xa7}, {&(0x7f0000005640)=""/85, 0x55}], 0x3, &(0x7f0000005700)=""/146, 0x92}, 0x7}, {{&(0x7f00000057c0)=@nfc, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005840)=""/196, 0xc4}, {&(0x7f0000005940)=""/114, 0x72}, {&(0x7f00000059c0)=""/222, 0xde}], 0x3, &(0x7f0000005b00)=""/206, 0xce}}], 0x6, 0x100, &(0x7f0000005dc0)={r1, r2+10000000}) bpf$ITER_CREATE(0x21, &(0x7f0000005e00), 0x8) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000005e00), 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000005e40)={0x8, 'bridge_slave_1\x00', {'bridge_slave_0\x00'}, 0x5}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000005e80)={@multicast2, @multicast2, 0x0}, &(0x7f0000005ec0)=0xc) recvfrom$phonet(r3, &(0x7f0000005f00)=""/168, 0xa8, 0x0, &(0x7f0000005fc0)={0x23, 0x2, 0x6, 0x81}, 0x10) (async) recvfrom$phonet(r3, &(0x7f0000005f00)=""/168, 0xa8, 0x0, &(0x7f0000005fc0)={0x23, 0x2, 0x6, 0x81}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000007100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000006000)=""/4096, 0x1000, 0x1, &(0x7f0000007000)=""/244, 0xf4}, &(0x7f0000007140)=0x40) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000007100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000006000)=""/4096, 0x1000, 0x1, &(0x7f0000007000)=""/244, 0xf4}, &(0x7f0000007140)=0x40) r5 = socket$inet(0x2, 0x3, 0x2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000007180)=""/254, &(0x7f0000007280)=0xfe) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000072c0)) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000007300)={r0}) ioctl$SIOCGETVIFCNT(r7, 0x89e0, &(0x7f0000007340)) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000007380), &(0x7f00000073c0)=0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000007480)={'ip6tnl0\x00', &(0x7f0000007400)={'syztnl0\x00', r4, 0x4, 0x4, 0x3, 0x5, 0x26, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8, 0x0, 0x5, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000007540)={'syztnl0\x00', &(0x7f00000074c0)={'syztnl1\x00', r9, 0x29, 0x6, 0x81, 0x2, 0x15, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x20, 0x7, 0xd}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000007540)={'syztnl0\x00', &(0x7f00000074c0)={'syztnl1\x00', r9, 0x29, 0x6, 0x81, 0x2, 0x15, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x20, 0x7, 0xd}}) getsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000007580)={@rand_addr, @private}, &(0x7f00000075c0)=0xc) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000007600)={@in6={{0xa, 0x4e22, 0xbe, @private1, 0xffff7fff}}, 0x0, 0x0, 0x2e, 0x0, "8c51428a1b6437ae96b841270870fba4661f07d63b37333a2efa8b2a1f311a865ede416e8eb55e1a43678717a66a41ac6fc41dbb57bbcd80a4c94dbd2e7d26c5315c4b7b9609ef84d91b4afc8efb3fbe"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000007600)={@in6={{0xa, 0x4e22, 0xbe, @private1, 0xffff7fff}}, 0x0, 0x0, 0x2e, 0x0, "8c51428a1b6437ae96b841270870fba4661f07d63b37333a2efa8b2a1f311a865ede416e8eb55e1a43678717a66a41ac6fc41dbb57bbcd80a4c94dbd2e7d26c5315c4b7b9609ef84d91b4afc8efb3fbe"}, 0xd8) setsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000007700)=0xfffffffa, 0x4) r10 = accept4$phonet_pipe(r6, 0x0, &(0x7f0000007740), 0x81c00) ioctl$SIOCPNGETOBJECT(r10, 0x89e0, &(0x7f0000007780)=0xd) recvmmsg(r5, &(0x7f0000007a80)=[{{&(0x7f00000077c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000007940)=[{&(0x7f0000007840)=""/224, 0xe0}], 0x1, &(0x7f0000007980)=""/216, 0xd8}, 0x81}], 0x1, 0x40010101, &(0x7f0000007ac0)={0x0, 0x989680}) (async) recvmmsg(r5, &(0x7f0000007a80)=[{{&(0x7f00000077c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000007940)=[{&(0x7f0000007840)=""/224, 0xe0}], 0x1, &(0x7f0000007980)=""/216, 0xd8}, 0x81}], 0x1, 0x40010101, &(0x7f0000007ac0)={0x0, 0x989680}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007b40), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000007cc0)={&(0x7f0000007b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007c80)={&(0x7f0000007b80)={0xd8, r12, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1ff}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x10}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x160}, @NL80211_ATTR_SCAN_SSIDS={0x88, 0x2d, 0x0, 0x1, [{0x1f, 0x0, @random="834796b4799e94372a1762f2a945b1f2275a0932b8571680177429"}, {0x17, 0x0, @random="d2d5e13d5df9c7a0517a6419a14d6572348bb7"}, {0x22, 0x0, @random="856a3596490b82a8211e52b1a93d3be53c14ae60a2bc72df2777d20f4f2a"}, {0xa, 0x0, @default_ibss_ssid}, {0x1a, 0x0, @random="a8beaee950effa00ab77fcd354c75ae727406db7f929"}]}, @NL80211_ATTR_BSSID={0xa}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44001}, 0xe94b196b5d47d778) accept$inet6(0xffffffffffffffff, &(0x7f0000007d00)={0xa, 0x0, 0x0, @dev}, &(0x7f0000007d40)=0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 71.587383][ T5821] cgroup: Unknown subsys name 'net' [ 71.729128][ T5821] cgroup: Unknown subsys name 'cpuset' [ 71.737372][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.362292][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.664138][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.688593][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.703922][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.711691][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.720144][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.727801][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.736377][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.744108][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.752370][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.760849][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.765875][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.768519][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.782249][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.783611][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.790869][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.797189][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.804055][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.818104][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.827002][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.835257][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.842917][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.846831][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.863139][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.867676][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.875332][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.885390][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.885802][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.900062][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.919457][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.926985][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.292128][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 76.323566][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 76.426046][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 76.507884][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 76.528525][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.535793][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.543134][ T5831] bridge_slave_0: entered allmulticast mode [ 76.550330][ T5831] bridge_slave_0: entered promiscuous mode [ 76.559702][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.566963][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.574094][ T5831] bridge_slave_1: entered allmulticast mode [ 76.581401][ T5831] bridge_slave_1: entered promiscuous mode [ 76.608193][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.615643][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.622857][ T5837] bridge_slave_0: entered allmulticast mode [ 76.630457][ T5837] bridge_slave_0: entered promiscuous mode [ 76.639188][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.648633][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.656158][ T5837] bridge_slave_1: entered allmulticast mode [ 76.662832][ T5837] bridge_slave_1: entered promiscuous mode [ 76.739207][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.751242][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.758570][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.765797][ T5836] bridge_slave_0: entered allmulticast mode [ 76.772453][ T5836] bridge_slave_0: entered promiscuous mode [ 76.795053][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.806523][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.824003][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.834003][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.841316][ T5836] bridge_slave_1: entered allmulticast mode [ 76.850996][ T5836] bridge_slave_1: entered promiscuous mode [ 76.872353][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.941537][ T5831] team0: Port device team_slave_0 added [ 76.952884][ T5837] team0: Port device team_slave_0 added [ 76.970742][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.990682][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.998062][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.005531][ T5844] bridge_slave_0: entered allmulticast mode [ 77.012148][ T5844] bridge_slave_0: entered promiscuous mode [ 77.021396][ T5831] team0: Port device team_slave_1 added [ 77.039778][ T5837] team0: Port device team_slave_1 added [ 77.055709][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.064975][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 77.077823][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.085011][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.092360][ T5844] bridge_slave_1: entered allmulticast mode [ 77.099536][ T5844] bridge_slave_1: entered promiscuous mode [ 77.165623][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.172608][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.198775][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.211230][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.218945][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.244988][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.257542][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.264623][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.290946][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.305930][ T5836] team0: Port device team_slave_0 added [ 77.321557][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.333357][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.343129][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.350344][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.376430][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.409920][ T5836] team0: Port device team_slave_1 added [ 77.458128][ T5844] team0: Port device team_slave_0 added [ 77.497928][ T5844] team0: Port device team_slave_1 added [ 77.518423][ T5831] hsr_slave_0: entered promiscuous mode [ 77.524663][ T5831] hsr_slave_1: entered promiscuous mode [ 77.531929][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.539191][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.565467][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.578070][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.585298][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.611425][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.646522][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.653526][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.679691][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.727463][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.734494][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.760798][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.792716][ T5836] hsr_slave_0: entered promiscuous mode [ 77.799137][ T5836] hsr_slave_1: entered promiscuous mode [ 77.805508][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.813341][ T5836] Cannot create hsr debugfs directory [ 77.819286][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.826820][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.834008][ T5835] bridge_slave_0: entered allmulticast mode [ 77.841195][ T5835] bridge_slave_0: entered promiscuous mode [ 77.849485][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.856822][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.863969][ T5835] bridge_slave_1: entered allmulticast mode [ 77.871238][ T5835] bridge_slave_1: entered promiscuous mode [ 77.880978][ T5837] hsr_slave_0: entered promiscuous mode [ 77.887656][ T5837] hsr_slave_1: entered promiscuous mode [ 77.893655][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.901606][ T5837] Cannot create hsr debugfs directory [ 77.906886][ T5834] Bluetooth: hci1: command tx timeout [ 77.985611][ T5834] Bluetooth: hci2: command tx timeout [ 77.995769][ T5849] Bluetooth: hci3: command tx timeout [ 77.995781][ T5848] Bluetooth: hci0: command tx timeout [ 78.007420][ T5834] Bluetooth: hci4: command tx timeout [ 78.021847][ T5844] hsr_slave_0: entered promiscuous mode [ 78.028298][ T5844] hsr_slave_1: entered promiscuous mode [ 78.034212][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.042374][ T5844] Cannot create hsr debugfs directory [ 78.064830][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.106037][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.162120][ T5835] team0: Port device team_slave_0 added [ 78.189966][ T5835] team0: Port device team_slave_1 added [ 78.243397][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.250479][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.278628][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.327923][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.334899][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.361307][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.494927][ T5835] hsr_slave_0: entered promiscuous mode [ 78.501640][ T5835] hsr_slave_1: entered promiscuous mode [ 78.508234][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.516132][ T5835] Cannot create hsr debugfs directory [ 78.554138][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.566331][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.596528][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.606264][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.667150][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.694539][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.725547][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.743806][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.785585][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.810703][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.822026][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.842736][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.900605][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.911933][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.924124][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.949070][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.046783][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.069053][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.080290][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.091615][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.109904][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.161923][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.178135][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.207705][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.238671][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.245998][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.261818][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.272510][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.304098][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.311267][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.320593][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.327704][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.339167][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.346323][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.357628][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.364718][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.392309][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.399464][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.451590][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.519839][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.540668][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.576600][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.583717][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.610279][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.617796][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.660812][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.778173][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.839167][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.846359][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.886719][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.894393][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.985657][ T5834] Bluetooth: hci1: command tx timeout [ 80.044360][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.060876][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.068209][ T5834] Bluetooth: hci0: command tx timeout [ 80.068248][ T5834] Bluetooth: hci2: command tx timeout [ 80.076027][ T5849] Bluetooth: hci4: command tx timeout [ 80.084950][ T5849] Bluetooth: hci3: command tx timeout [ 80.110418][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.199226][ T5836] veth0_vlan: entered promiscuous mode [ 80.211489][ T5836] veth1_vlan: entered promiscuous mode [ 80.241797][ T5836] veth0_macvtap: entered promiscuous mode [ 80.251969][ T5836] veth1_macvtap: entered promiscuous mode [ 80.291861][ T5837] veth0_vlan: entered promiscuous mode [ 80.325652][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.348837][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.369025][ T5837] veth1_vlan: entered promiscuous mode [ 80.378129][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.401143][ T5831] veth0_vlan: entered promiscuous mode [ 80.413215][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.431487][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.443372][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.460662][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.511696][ T5831] veth1_vlan: entered promiscuous mode [ 80.549265][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.621509][ T5837] veth0_macvtap: entered promiscuous mode [ 80.667927][ T5837] veth1_macvtap: entered promiscuous mode [ 80.693445][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.707170][ T5831] veth0_macvtap: entered promiscuous mode [ 80.717480][ T5831] veth1_macvtap: entered promiscuous mode [ 80.725609][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.797977][ T5835] veth0_vlan: entered promiscuous mode [ 80.812834][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.822145][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.829908][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.846666][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.862452][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.879986][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.890819][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.902322][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.913436][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.924764][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.940944][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.951860][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.962955][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.974944][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.984247][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.993073][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.002102][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.035607][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.052649][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.067211][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.077930][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.090004][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.103236][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.112874][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.128208][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.130451][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.141199][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.168841][ T5835] veth1_vlan: entered promiscuous mode [ 81.294524][ T5844] veth0_vlan: entered promiscuous mode [ 81.303680][ T5835] veth0_macvtap: entered promiscuous mode [ 81.324944][ T5844] veth1_vlan: entered promiscuous mode [ 81.338399][ T5835] veth1_macvtap: entered promiscuous mode [ 81.379108][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.393484][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.466073][ T5844] veth0_macvtap: entered promiscuous mode [ 81.492960][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.503972][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.516030][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.526865][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.537636][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.563737][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.576695][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.599840][ T5844] veth1_macvtap: entered promiscuous mode [ 81.626851][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.639705][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.654204][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.677538][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.688341][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.699831][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.709718][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.724864][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.743510][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.767248][ T5927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.771650][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.788736][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.800890][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.808646][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.823965][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.835759][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.846179][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.859195][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.869437][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.880299][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.891723][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.937606][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.948104][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.958131][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.970056][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.987280][ T5932] Zero length message leads to an empty skb [ 82.008910][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.027434][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.038793][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.050815][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.075519][ T5849] Bluetooth: hci1: command tx timeout [ 82.085438][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.115458][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.125722][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.136474][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.146595][ T5834] Bluetooth: hci4: command tx timeout [ 82.152021][ T5834] Bluetooth: hci2: command tx timeout [ 82.152393][ T5848] Bluetooth: hci0: command tx timeout [ 82.159858][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.163661][ T5849] Bluetooth: hci3: command tx timeout [ 82.176337][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.185048][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.194222][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.197418][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.203905][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.211604][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.222405][ T5935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10'. [ 82.442551][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.475033][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.536157][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.553702][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.566425][ T29] audit: type=1804 audit(1741885808.313:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/cgroup.controllers" dev="tmpfs" ino=18 res=1 errno=0 [ 82.653073][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.675668][ T29] audit: type=1800 audit(1741885808.323:3): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="cgroup.controllers" dev="tmpfs" ino=18 res=0 errno=0 [ 82.699668][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.757628][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.807783][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.886122][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 83.510914][ T5980] Bluetooth: MGMT ver 1.23 [ 83.537166][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 83.590559][ T5984] tipc: Failed to clone mcast rcv buffer [ 83.609284][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 84.031986][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 84.148109][ T5849] Bluetooth: hci1: command tx timeout [ 84.225616][ T5849] Bluetooth: hci3: command tx timeout [ 84.226010][ T5848] Bluetooth: hci0: command tx timeout [ 84.231428][ T5849] Bluetooth: hci2: command tx timeout [ 84.236577][ T5841] Bluetooth: hci4: command tx timeout [ 85.556730][ T6028] FAULT_INJECTION: forcing a failure. [ 85.556730][ T6028] name failslab, interval 1, probability 0, space 0, times 0 [ 85.616979][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.0.30 Not tainted 6.14.0-rc5-syzkaller-00149-gd2b9d97e89c7 #0 [ 85.617012][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.617029][ T6028] Call Trace: [ 85.617036][ T6028] [ 85.617044][ T6028] dump_stack_lvl+0x241/0x360 [ 85.617081][ T6028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.617110][ T6028] ? __pfx__printk+0x10/0x10 [ 85.617130][ T6028] ? kasan_save_free_info+0x40/0x50 [ 85.617179][ T6028] ? kfree+0x196/0x430 [ 85.617204][ T6028] ? tipc_dest_pop+0x1b3/0x250 [ 85.617235][ T6028] ? tipc_sk_mcast_rcv+0x892/0x1400 [ 85.617277][ T6028] ? __tipc_sendmsg+0x2902/0x35d0 [ 85.617298][ T6028] ? tipc_sendmsg+0x55/0x70 [ 85.617320][ T6028] ? __sock_sendmsg+0x221/0x270 [ 85.617343][ T6028] ? ____sys_sendmsg+0x53a/0x860 [ 85.617360][ T6028] ? __sys_sendmsg+0x269/0x350 [ 85.617381][ T6028] should_fail_ex+0x40a/0x550 [ 85.617415][ T6028] should_failslab+0xac/0x100 [ 85.617444][ T6028] kmem_cache_alloc_node_noprof+0x77/0x380 [ 85.617470][ T6028] ? __alloc_skb+0x1c3/0x440 [ 85.617502][ T6028] __alloc_skb+0x1c3/0x440 [ 85.617527][ T6028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.617559][ T6028] ? __pfx___alloc_skb+0x10/0x10 [ 85.617585][ T6028] ? kasan_quarantine_put+0xdc/0x230 [ 85.617602][ T6028] ? lockdep_hardirqs_on+0x99/0x150 [ 85.617628][ T6028] __pskb_copy_fclone+0xb3/0x1090 [ 85.617653][ T6028] ? tipc_dest_pop+0x1b3/0x250 [ 85.617684][ T6028] tipc_sk_mcast_rcv+0x70f/0x1400 [ 85.617731][ T6028] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 85.617777][ T6028] ? __raw_spin_lock_init+0x45/0x100 [ 85.617813][ T6028] tipc_mcast_xmit+0x12ad/0x19c0 [ 85.617835][ T6028] ? __might_fault+0xc6/0x120 [ 85.617852][ T6028] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 85.617868][ T6028] ? _copy_from_iter+0x31b/0x1c40 [ 85.617886][ T6028] ? kmem_cache_alloc_node_noprof+0x22c/0x380 [ 85.617917][ T6028] ? __build_skb_around+0x245/0x3d0 [ 85.617947][ T6028] ? __alloc_skb+0x2d5/0x440 [ 85.617974][ T6028] ? __pfx__copy_from_iter+0x10/0x10 [ 85.617999][ T6028] ? __pfx___alloc_skb+0x10/0x10 [ 85.618029][ T6028] ? __check_object_size+0x98/0x730 [ 85.618057][ T6028] ? tipc_msg_build+0x4aa/0x1040 [ 85.618144][ T6028] ? rcu_is_watching+0x15/0xb0 [ 85.618188][ T6028] __tipc_sendmsg+0x2902/0x35d0 [ 85.618225][ T6028] ? __pfx___tipc_sendmsg+0x10/0x10 [ 85.618258][ T6028] ? __pfx_validate_chain+0x10/0x10 [ 85.618281][ T6028] ? mark_lock+0x9a/0x360 [ 85.618302][ T6028] ? __pfx_woken_wake_function+0x10/0x10 [ 85.618333][ T6028] ? __lock_acquire+0x1397/0x2100 [ 85.618382][ T6028] ? mark_lock+0x9a/0x360 [ 85.618405][ T6028] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.618437][ T6028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.618478][ T6028] ? __local_bh_enable_ip+0x168/0x200 [ 85.618500][ T6028] ? tipc_sendmsg+0x47/0x70 [ 85.618521][ T6028] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 85.618540][ T6028] ? do_raw_spin_unlock+0x13c/0x8b0 [ 85.618568][ T6028] ? __pfx_tipc_sendmsg+0x10/0x10 [ 85.618590][ T6028] tipc_sendmsg+0x55/0x70 [ 85.618615][ T6028] __sock_sendmsg+0x221/0x270 [ 85.618644][ T6028] ____sys_sendmsg+0x53a/0x860 [ 85.618671][ T6028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.618688][ T6028] ? __fget_files+0x2a/0x410 [ 85.618720][ T6028] ? __fget_files+0x2a/0x410 [ 85.618757][ T6028] __sys_sendmsg+0x269/0x350 [ 85.618781][ T6028] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.618813][ T6028] ? do_sys_openat2+0x17a/0x1d0 [ 85.618865][ T6028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.618895][ T6028] ? do_syscall_64+0x100/0x230 [ 85.618922][ T6028] ? do_syscall_64+0xb6/0x230 [ 85.618951][ T6028] do_syscall_64+0xf3/0x230 [ 85.618979][ T6028] ? clear_bhb_loop+0x35/0x90 [ 85.619011][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.619045][ T6028] RIP: 0033:0x7f3ff798d169 [ 85.619067][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.619082][ T6028] RSP: 002b:00007f3ff87e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.619114][ T6028] RAX: ffffffffffffffda RBX: 00007f3ff7ba5fa0 RCX: 00007f3ff798d169 [ 85.619128][ T6028] RDX: 0000000000000000 RSI: 00004000000006c0 RDI: 0000000000000004 [ 85.619140][ T6028] RBP: 00007f3ff87e1090 R08: 0000000000000000 R09: 0000000000000000 [ 85.619151][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.619162][ T6028] R13: 0000000000000000 R14: 00007f3ff7ba5fa0 R15: 00007fff22196458 [ 85.619190][ T6028] [ 85.686143][ T6028] tipc: Failed to clone mcast rcv buffer [ 86.588991][ T6070] netlink: 'syz.2.43': attribute type 2 has an invalid length. [ 86.616417][ T6066] sctp: failed to load transform for md5: -2 [ 86.700048][ T6071] netlink: 'syz.0.42': attribute type 21 has an invalid length. [ 86.802067][ T6071] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 86.883105][ T6085] openvswitch: netlink: IP tunnel TTL not specified. [ 87.001312][ T46] cfg80211: failed to load regulatory.db [ 87.104568][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.47'. [ 87.134658][ T6095] tipc: Started in network mode [ 87.160568][ T6095] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 87.203425][ T6095] tipc: Enabled bearer , priority 10 [ 87.253292][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 87.420916][ T6108] xt_hashlimit: invalid rate [ 87.476440][ T6110] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.716771][ T6116] netlink: 'syz.3.56': attribute type 24 has an invalid length. [ 87.734204][ T6119] netlink: 'syz.1.55': attribute type 7 has an invalid length. [ 87.764338][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 87.846647][ T6121] Cannot find del_set index 65531 as target [ 88.353344][ T5911] tipc: Node number set to 4269801491 [ 88.418926][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 88.703313][ T6152] syzkaller1: entered promiscuous mode [ 88.723403][ T6152] syzkaller1: entered allmulticast mode [ 88.843963][ T6158] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 3, id = 0 [ 89.486955][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'. [ 89.503690][ T6183] syz.3.80 uses obsolete (PF_INET,SOCK_PACKET) [ 90.296842][ T6229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.92'. [ 90.331881][ T6229] netlink: 43 bytes leftover after parsing attributes in process `syz.1.92'. [ 90.379775][ T6229] netlink: 'syz.1.92': attribute type 6 has an invalid length. [ 90.417305][ T6229] netlink: 'syz.1.92': attribute type 5 has an invalid length. [ 90.447194][ T6229] netlink: 43 bytes leftover after parsing attributes in process `syz.1.92'. [ 91.067342][ T6268] vlan2: entered promiscuous mode [ 91.096383][ T6268] bond0: entered promiscuous mode [ 91.101501][ T6268] bond_slave_0: entered promiscuous mode [ 91.137564][ T6268] bond_slave_1: entered promiscuous mode [ 91.184049][ T6268] bond0: left promiscuous mode [ 91.191157][ T6268] bond_slave_0: left promiscuous mode [ 91.202156][ T6273] netlink: 108 bytes leftover after parsing attributes in process `syz.0.107'. [ 91.207577][ T6268] bond_slave_1: left promiscuous mode [ 91.759044][ T6296] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 91.830077][ T6295] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 92.213037][ T6319] netlink: 224 bytes leftover after parsing attributes in process `syz.1.117'. [ 92.949761][ T6355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.124'. [ 93.022019][ T6355] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 93.414895][ T6383] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 93.503468][ T6311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.116'. [ 94.143860][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 94.215356][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 94.792466][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 94.836904][ T6450] netlink: 792 bytes leftover after parsing attributes in process `syz.2.143'. [ 94.909587][ T6455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.147'. [ 94.934045][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 95.327971][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 95.405880][ T6474] sctp: failed to load transform for md5: -2 [ 95.453496][ T6471] sctp: failed to load transform for md5: -2 [ 95.632440][ T6489] netlink: 'syz.1.152': attribute type 21 has an invalid length. [ 95.664699][ T6489] netlink: 'syz.1.152': attribute type 11 has an invalid length. [ 96.160791][ T6521] xt_hashlimit: invalid interval [ 96.217007][ T6521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.158'. [ 96.274437][ T6521] netlink: 'syz.1.158': attribute type 5 has an invalid length. [ 96.354964][ T6521] pimreg: entered allmulticast mode [ 96.541835][ T6540] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 96.615868][ T6540] netlink: 'syz.2.164': attribute type 2 has an invalid length. [ 96.649990][ T6546] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 96.785416][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 97.502255][ T974] IPVS: starting estimator thread 0... [ 97.528911][ T6589] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 97.685537][ T6594] IPVS: using max 20 ests per chain, 48000 per kthread [ 98.148266][ T6615] Cannot find set identified by id 0 to match [ 98.282632][ T6618] __nla_validate_parse: 6 callbacks suppressed [ 98.282652][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 98.355300][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 98.394631][ T6618] netlink: 'syz.1.184': attribute type 4 has an invalid length. [ 99.397982][ T6655] netlink: 'syz.4.195': attribute type 1 has an invalid length. [ 99.442590][ T6655] netlink: 224 bytes leftover after parsing attributes in process `syz.4.195'. [ 99.657098][ T6663] tipc: Started in network mode [ 99.680792][ T6663] tipc: Node identity c65f74648617, cluster identity 4711 [ 99.710469][ T6663] tipc: Enabled bearer , priority 0 [ 99.922487][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 100.053247][ T6668] syzkaller0: entered promiscuous mode [ 100.072194][ T6668] syzkaller0: entered allmulticast mode [ 100.085864][ T6668] tipc: Resetting bearer [ 100.134164][ T6677] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 100.181682][ T6657] tipc: Resetting bearer [ 100.429495][ T6686] xt_bpf: check failed: parse error [ 100.771926][ T46] tipc: Node number set to 1078490212 [ 100.797694][ T6705] ax25_connect(): syz.2.208 uses autobind, please contact jreuter@yaina.de [ 101.173554][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.211'. [ 102.032660][ T6657] tipc: Disabling bearer [ 102.406460][ T6734] veth1_macvtap: left promiscuous mode [ 102.441374][ T6734] macsec0: entered promiscuous mode [ 102.993805][ T6762] netlink: 68 bytes leftover after parsing attributes in process `syz.1.220'. [ 103.043659][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 103.081527][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 103.092417][ T6764] netlink: 'syz.0.219': attribute type 15 has an invalid length. [ 103.144825][ T6771] dummy0: entered allmulticast mode [ 103.213350][ T6771] batman_adv: batadv0: Adding interface: dummy0 [ 103.231708][ T6771] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.286356][ T6771] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 103.330587][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 103.340172][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.356365][ T6767] batadv_slave_0: entered promiscuous mode [ 103.538526][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 103.572956][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 103.749994][ T6793] Cannot find add_set index 0 as target [ 104.021721][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 104.060631][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 104.101178][ T6808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.233'. [ 104.340546][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 104.353589][ T6819] Bluetooth: MGMT ver 1.23 [ 104.811042][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 104.855631][ T6838] netlink: 'syz.1.242': attribute type 62 has an invalid length. [ 104.899417][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 104.913417][ T6844] netlink: 'syz.4.243': attribute type 9 has an invalid length. [ 104.963152][ T6844] netlink: 'syz.4.243': attribute type 6 has an invalid length. [ 104.990129][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.243'. [ 105.408812][ T6867] netlink: 'syz.3.247': attribute type 3 has an invalid length. [ 106.193051][ T6890] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:65535 [ 106.234507][ T6892] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 106.273229][ T6892] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 106.335380][ T6888] nbd0: detected capacity change from 0 to 256 [ 106.369506][ T6896] warning: `syz.0.256' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.391312][ T5841] block nbd0: Receive control failed (result -104) [ 106.684618][ T6916] openvswitch: netlink: nsh attr 0 has unexpected len 188 expected 0 [ 106.711908][ T6916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.956824][ T6930] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.287191][ T6950] syzkaller0: create flow: hash 187750630 index 2 [ 107.535342][ T2998] syzkaller0: tun_net_xmit 76 [ 107.559480][ T2998] syzkaller0: tun_net_xmit 48 [ 107.564626][ T5884] syzkaller0: tun_net_xmit 76 [ 107.594931][ T6939] syzkaller0: delete flow: hash 187750630 index 2 [ 108.112301][ T6982] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 109.418476][ T6983] veth0: entered promiscuous mode [ 109.424226][ T6982] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.429080][ T6986] veth0: left promiscuous mode [ 109.708461][ T7005] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 109.716864][ T7008] __nla_validate_parse: 5 callbacks suppressed [ 109.716883][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 109.774783][ T7009] xt_policy: neither incoming nor outgoing policy selected [ 109.839754][ T7008] ipvlan2: entered allmulticast mode [ 109.875202][ T7008] veth0_vlan: entered allmulticast mode [ 109.928069][ T7005] macvlan0: entered promiscuous mode [ 109.939229][ T7005] macvlan0: entered allmulticast mode [ 109.964517][ T7005] veth1_vlan: entered allmulticast mode [ 110.008592][ T7005] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 110.227746][ T7033] atomic_op ffff88805f323998 conn xmit_atomic 0000000000000000 [ 110.269236][ T7031] netlink: 'syz.1.288': attribute type 64 has an invalid length. [ 110.280604][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 110.314005][ T7036] veth3: entered allmulticast mode [ 110.411325][ T7042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.291'. [ 110.446760][ T7048] netlink: 6 bytes leftover after parsing attributes in process `syz.2.292'. [ 110.478158][ T7048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.511944][ T7050] netlink: 36 bytes leftover after parsing attributes in process `syz.4.289'. [ 111.032038][ T7080] x_tables: duplicate underflow at hook 3 [ 111.138080][ T7085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.300'. [ 111.389409][ T7099] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 111.570916][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 111.573941][ T7099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.599217][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 111.637398][ T7108] netlink: 48 bytes leftover after parsing attributes in process `syz.3.305'. [ 111.777154][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 111.889603][ T7099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.969817][ T7123] ax25_connect(): syz.1.308 uses autobind, please contact jreuter@yaina.de [ 112.054225][ T7099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.237708][ T7099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.300501][ T7140] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 112.332195][ T7140] team0: Port device geneve0 added [ 112.459446][ T7099] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.521506][ T7099] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.583556][ T7099] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.649417][ T7099] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.902261][ T7165] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 112.955264][ T7165] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 113.359496][ T7182] netlink: 'syz.3.327': attribute type 4 has an invalid length. [ 113.525415][ T7189] x_tables: duplicate underflow at hook 2 [ 113.563737][ T7191] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 114.241413][ T7228] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.250031][ T7228] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.258316][ T7228] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.266629][ T7228] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.297409][ T7228] vxlan0: entered promiscuous mode [ 114.319272][ T7228] vxlan0: entered allmulticast mode [ 114.334614][ T7228] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.343201][ T7228] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.351864][ T7228] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.360299][ T7228] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.628874][ T7233] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 114.710312][ C1] Illegal XDP return value 16128 on prog (id 94) dev lo, expect packet loss! [ 114.748680][ T7232] tipc: Started in network mode [ 114.753706][ T7232] tipc: Node identity 5610bce14c93, cluster identity 4711 [ 114.765948][ T7232] tipc: Enabled bearer , priority 0 [ 114.850630][ T7230] tipc: Resetting bearer [ 115.420784][ T7278] __nla_validate_parse: 23 callbacks suppressed [ 115.420805][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 115.598619][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.358'. [ 115.836567][ T25] tipc: Node number set to 444841185 [ 116.640611][ T7230] tipc: Disabling bearer [ 117.094950][ T7305] netlink: 'syz.2.364': attribute type 2 has an invalid length. [ 117.172621][ T7305] netlink: 'syz.2.364': attribute type 6 has an invalid length. [ 117.257010][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.363'. [ 117.384116][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 117.724203][ T7346] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 117.752912][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 117.857785][ T7322] veth1_vlan (unregistering): left allmulticast mode [ 117.921572][ T7322] bond0: (slave macvlan0): Releasing backup interface [ 118.052963][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 118.217624][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 118.227822][ T7371] xt_nat: multiple ranges no longer supported [ 118.247658][ T7371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.377'. [ 118.267489][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 118.636127][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 118.706981][ T7401] sctp: [Deprecated]: syz.4.389 (pid 7401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.706981][ T7401] Use struct sctp_sack_info instead [ 118.822534][ T7409] netlink: 'syz.1.392': attribute type 21 has an invalid length. [ 118.835359][ T7409] netlink: 'syz.1.392': attribute type 4 has an invalid length. [ 118.849930][ T7409] netlink: 'syz.1.392': attribute type 5 has an invalid length. [ 118.878975][ T7409] netlink: 'syz.1.392': attribute type 14 has an invalid length. [ 119.103857][ T7418] erspan0: entered promiscuous mode [ 119.134155][ T7418] macvtap1: entered promiscuous mode [ 119.166235][ T7418] macvtap1: entered allmulticast mode [ 119.186480][ T7418] erspan0: entered allmulticast mode [ 119.190984][ T7430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.225537][ T7432] erspan0: left allmulticast mode [ 119.244489][ T7432] erspan0: left promiscuous mode [ 119.428029][ T29] audit: type=1804 audit(1741885845.183:4): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.400" name="/newroot/82/cgroup.controllers" dev="tmpfs" ino=433 res=1 errno=0 [ 119.470782][ T29] audit: type=1800 audit(1741885845.213:5): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.400" name="cgroup.controllers" dev="tmpfs" ino=433 res=0 errno=0 [ 119.666749][ T7451] netlink: 'syz.1.404': attribute type 75 has an invalid length. [ 119.998747][ T7467] tipc: Enabled bearer , priority 0 [ 120.040633][ T7467] bond1: entered allmulticast mode [ 120.052160][ T7467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.162942][ T7474] "syz.3.411" (7474) uses obsolete ecb(arc4) skcipher [ 120.362643][ T7482] bridge0: port 1(bridge_slave_0) entered listening state [ 120.751589][ T7515] netlink: 'syz.3.420': attribute type 4 has an invalid length. [ 121.865605][ T7510] __nla_validate_parse: 11 callbacks suppressed [ 121.865626][ T7510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.420'. [ 122.053484][ T7520] syz.3.423: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.079300][ T7523] tipc: Invalid UDP bearer configuration [ 122.079344][ T7523] tipc: Enabling of bearer rejected, failed to enable media [ 122.098000][ T7520] CPU: 1 UID: 0 PID: 7520 Comm: syz.3.423 Not tainted 6.14.0-rc5-syzkaller-00149-gd2b9d97e89c7 #0 [ 122.098028][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.098041][ T7520] Call Trace: [ 122.098048][ T7520] [ 122.098057][ T7520] dump_stack_lvl+0x241/0x360 [ 122.098089][ T7520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.098112][ T7520] ? __pfx__printk+0x10/0x10 [ 122.098136][ T7520] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 122.098164][ T7520] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 122.098192][ T7520] warn_alloc+0x278/0x410 [ 122.098215][ T7520] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 122.098250][ T7520] ? __pfx_warn_alloc+0x10/0x10 [ 122.098272][ T7520] ? kasan_save_track+0x3f/0x80 [ 122.098292][ T7520] ? __kasan_kmalloc+0x98/0xb0 [ 122.098316][ T7520] ? xsk_setsockopt+0x4aa/0x810 [ 122.098335][ T7520] ? do_sock_setsockopt+0x3af/0x720 [ 122.098365][ T7520] ? __x64_sys_setsockopt+0x1ee/0x280 [ 122.098394][ T7520] ? do_syscall_64+0xf3/0x230 [ 122.098421][ T7520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.098459][ T7520] __vmalloc_node_range_noprof+0x126/0x1380 [ 122.098522][ T7520] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.098562][ T7520] ? __kasan_kmalloc+0x98/0xb0 [ 122.098591][ T7520] vmalloc_user_noprof+0x74/0x80 [ 122.098610][ T7520] ? xskq_create+0xb6/0x170 [ 122.098631][ T7520] xskq_create+0xb6/0x170 [ 122.098655][ T7520] xsk_init_queue+0xa1/0x100 [ 122.098679][ T7520] xsk_setsockopt+0x4aa/0x810 [ 122.098702][ T7520] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.098723][ T7520] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.098756][ T7520] ? aa_sock_opt_perm+0x79/0x120 [ 122.098791][ T7520] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.098810][ T7520] do_sock_setsockopt+0x3af/0x720 [ 122.098847][ T7520] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 122.098883][ T7520] ? __fget_files+0x395/0x410 [ 122.098910][ T7520] ? __fget_files+0x2a/0x410 [ 122.098966][ T7520] __x64_sys_setsockopt+0x1ee/0x280 [ 122.099003][ T7520] do_syscall_64+0xf3/0x230 [ 122.099030][ T7520] ? clear_bhb_loop+0x35/0x90 [ 122.099059][ T7520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.099085][ T7520] RIP: 0033:0x7fcde9f8d169 [ 122.099100][ T7520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.099115][ T7520] RSP: 002b:00007fcdead81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.099135][ T7520] RAX: ffffffffffffffda RBX: 00007fcdea1a5fa0 RCX: 00007fcde9f8d169 [ 122.099148][ T7520] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 122.099158][ T7520] RBP: 00007fcdea00e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 122.099169][ T7520] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.099180][ T7520] R13: 0000000000000000 R14: 00007fcdea1a5fa0 R15: 00007ffebe70dee8 [ 122.099208][ T7520] [ 122.099223][ T7520] Mem-Info: [ 122.114562][ T7526] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.421'. [ 122.121977][ T7523] sctp: [Deprecated]: syz.0.424 (pid 7523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.121977][ T7523] Use struct sctp_sack_info instead [ 122.141435][ T7527] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.421'. [ 122.175195][ T7520] active_anon:4522 inactive_anon:0 isolated_anon:0 [ 122.175195][ T7520] active_file:1174 inactive_file:38313 isolated_file:0 [ 122.175195][ T7520] unevictable:768 dirty:42 writeback:0 [ 122.175195][ T7520] slab_reclaimable:10255 slab_unreclaimable:98651 [ 122.175195][ T7520] mapped:28451 shmem:1446 pagetables:795 [ 122.175195][ T7520] sec_pagetables:0 bounce:0 [ 122.175195][ T7520] kernel_misc_reclaimable:0 [ 122.175195][ T7520] free:1345612 free_pcp:481 free_cma:0 [ 122.287992][ T7531] netlink: 'syz.3.423': attribute type 10 has an invalid length. [ 122.365271][ T7520] Node 0 active_anon:18188kB inactive_anon:0kB active_file:4696kB inactive_file:153180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113804kB dirty:168kB writeback:0kB shmem:4248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10932kB pagetables:3380kB sec_pagetables:0kB all_unreclaimable? no [ 122.490941][ T7531] veth1_macvtap: left promiscuous mode [ 122.567887][ T7520] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 122.599894][ T7520] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.642336][ T7520] lowmem_reserve[]: 0 2490 2490 0 0 [ 122.648267][ T7520] Node 0 DMA32 free:1463924kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:17952kB inactive_anon:0kB active_file:4696kB inactive_file:152852kB unevictable:1536kB writepending:168kB present:3129332kB managed:2549852kB mlocked:0kB bounce:0kB free_pcp:1664kB local_pcp:960kB free_cma:0kB [ 122.682013][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 122.691476][ T7540] netlink: 176 bytes leftover after parsing attributes in process `syz.4.427'. [ 122.705253][ T7540] netlink: 'syz.4.427': attribute type 5 has an invalid length. [ 122.714834][ T7545] netlink: 'syz.1.428': attribute type 3 has an invalid length. [ 122.729947][ T7520] lowmem_reserve[]: 0 0 0 0 0 [ 122.734798][ T7520] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.804901][ T7520] lowmem_reserve[]: 0 0 0 0 0 [ 122.853308][ T7520] Node 1 Normal free:3904792kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 122.929444][ T7520] lowmem_reserve[]: 0 0 0 0 0 [ 122.934295][ T7520] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.991000][ T7520] Node 0 DMA32: 114*4kB (UM) 222*8kB (UME) 272*16kB (UME) 360*32kB (UME) 127*64kB (UME) 50*128kB (UME) 34*256kB (UME) 14*512kB (UM) 14*1024kB (UME) 8*2048kB (UME) 338*4096kB (UM) = 1463672kB [ 123.050166][ T7520] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 123.095002][ T7520] Node 1 Normal: 224*4kB (UE) 51*8kB (UME) 38*16kB (UME) 217*32kB (UME) 94*64kB (UME) 22*128kB (UME) 16*256kB (UM) 10*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3904792kB [ 123.151780][ T7520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.169052][ T7520] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.182481][ T7520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.214420][ T7520] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.241714][ T7520] 40937 total pagecache pages [ 123.255234][ T7520] 0 pages in swap cache [ 123.259606][ T7520] Free swap = 124996kB [ 123.299681][ T7520] Total swap = 124996kB [ 123.303922][ T7520] 2097051 pages RAM [ 123.326803][ T7520] 0 pages HighMem/MovableOnly [ 123.331546][ T7520] 427866 pages reserved [ 123.356234][ T7520] 0 pages cma reserved [ 123.360355][ T7586] batman_adv: batadv0: Removing interface: dummy0 [ 123.469979][ T7586] bridge_slave_0: left allmulticast mode [ 123.476056][ T7586] bridge_slave_0: left promiscuous mode [ 123.481912][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.520692][ T7586] bridge_slave_1: left allmulticast mode [ 123.536192][ T7586] bridge_slave_1: left promiscuous mode [ 123.548927][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.581887][ T7586] bond0: (slave bond_slave_0): Releasing backup interface [ 123.604009][ T7586] bond0: (slave bond_slave_1): Releasing backup interface [ 123.642846][ T7586] team0: Port device team_slave_0 removed [ 123.664578][ T7586] team0: Port device team_slave_1 removed [ 123.681459][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.689341][ T7586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.698621][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.707418][ T7586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.725672][ T7587] team0: Mode changed to "activebackup" [ 124.127613][ T7631] syzkaller0: entered promiscuous mode [ 124.133230][ T7631] syzkaller0: entered allmulticast mode [ 124.523190][ T7663] vlan2: entered promiscuous mode [ 124.561726][ T7663] bond0: entered promiscuous mode [ 124.606401][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.453'. [ 124.643209][ T7663] bond0: left promiscuous mode [ 124.676771][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 124.823001][ T7681] geneve2: entered promiscuous mode [ 124.863282][ T7681] geneve2: entered allmulticast mode [ 125.279698][ T7717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'. [ 125.416110][ T7721] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.462'. [ 125.732005][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.739515][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.231636][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.279239][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.690941][ T7708] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.700063][ T7708] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.710782][ T7708] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.720122][ T7708] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.863222][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 126.982908][ T7735] vlan2: entered allmulticast mode [ 127.014568][ T7735] bond0: entered allmulticast mode [ 127.102596][ T7735] bond0: left allmulticast mode [ 127.165492][ T7737] IPv6: sit1: Disabled Multicast RS [ 127.545589][ T7767] netlink: 60 bytes leftover after parsing attributes in process `syz.0.479'. [ 127.565375][ T7767] unsupported nlmsg_type 40 [ 127.589695][ T7770] netlink: 60 bytes leftover after parsing attributes in process `syz.0.479'. [ 127.741217][ T7781] netlink: 9 bytes leftover after parsing attributes in process `syz.4.481'. [ 127.761989][ T7781] 0·: renamed from hsr_slave_1 (while UP) [ 127.782465][ T7781] 0·: entered allmulticast mode [ 127.801550][ T7781] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 127.929977][ T7791] netlink: 64 bytes leftover after parsing attributes in process `syz.2.485'. [ 128.129354][ T7805] netlink: 'syz.4.489': attribute type 10 has an invalid length. [ 128.144765][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 128.208148][ T7808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 128.496723][ T7810] netlink: 128 bytes leftover after parsing attributes in process `syz.3.491'. [ 129.129471][ T7805] team0: Device hsr_slave_0 failed to register rx_handler [ 129.613568][ T7843] delete_channel: no stack [ 129.811037][ T7859] IPv6: sit2: Disabled Multicast RS [ 129.837614][ T7860] syz.2.505 uses old SIOCAX25GETINFO [ 130.082019][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.089635][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.282595][ T7875] netlink: 'syz.2.511': attribute type 10 has an invalid length. [ 130.303786][ T7875] hsr0: entered promiscuous mode [ 130.337508][ T7875] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 130.349150][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 130.364633][ T7875] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 130.388310][ T7875] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 130.426997][ T7884] : entered promiscuous mode [ 130.578524][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 130.605972][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 131.338899][ T7941] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 131.463926][ T7951] tipc: Can't bind to reserved service type 2 [ 131.774893][ T7969] netlink: 'syz.4.545': attribute type 2 has an invalid length. [ 131.799798][ T7969] netlink: 'syz.4.545': attribute type 5 has an invalid length. [ 132.577257][ T8009] netlink: 'syz.4.557': attribute type 10 has an invalid length. [ 132.611123][ T8009] bridge0: port 1(team0) entered blocking state [ 132.628306][ T8009] bridge0: port 1(team0) entered disabled state [ 132.632285][ T8013] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 132.648029][ T8009] team0: entered allmulticast mode [ 132.669318][ T8009] team0: entered promiscuous mode [ 132.693022][ T8015] __nla_validate_parse: 5 callbacks suppressed [ 132.693038][ T8015] netlink: 76 bytes leftover after parsing attributes in process `syz.2.561'. [ 132.839224][ T8027] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 133.041779][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.048293][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.148272][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 133.167558][ T8046] xt_hashlimit: size too large, truncated to 1048576 [ 133.196893][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.572'. [ 133.531399][ T8068] netlink: 'syz.1.579': attribute type 11 has an invalid length. [ 133.889569][ T8090] netlink: 44 bytes leftover after parsing attributes in process `syz.4.586'. [ 133.987219][ T8095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.009906][ T8099] x_tables: duplicate underflow at hook 1 [ 134.028953][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.044854][ T8099] netlink: 'syz.1.588': attribute type 5 has an invalid length. [ 134.046693][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.176343][ T8103] netlink: 108 bytes leftover after parsing attributes in process `syz.3.591'. [ 134.190672][ T8106] netlink: 'syz.2.592': attribute type 142 has an invalid length. [ 134.210502][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.591'. [ 134.227898][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 134.423228][ T8116] ipvlan0: entered promiscuous mode [ 134.429062][ T8116] ipvlan0: entered allmulticast mode [ 134.438889][ T8116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.595'. [ 134.462781][ T8116] netlink: 64 bytes leftover after parsing attributes in process `syz.0.595'. [ 134.561461][ T8120] netlink: 5328 bytes leftover after parsing attributes in process `syz.4.596'. [ 134.571596][ T8126] xt_l2tp: v2 tid > 0xffff: 150994944 [ 134.583395][ T8127] xt_l2tp: v2 tid > 0xffff: 150994944 [ 134.674309][ T8131] xt_l2tp: v2 tid > 0xffff: 150994944 [ 135.338571][ T8158] nbd: must specify an index to disconnect [ 135.446380][ T8164] trusted_key: syz.0.611 sent an empty control message without MSG_MORE. [ 135.980500][ T8192] ip6t_srh: unknown srh invflags A757 [ 136.195031][ T8210] netlink: 'syz.4.626': attribute type 2 has an invalid length. [ 136.223028][ T8203] bond1: entered promiscuous mode [ 136.248015][ T8203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.307207][ T8213] netlink: 'syz.0.628': attribute type 39 has an invalid length. [ 136.685666][ T8243] netlink: 'syz.0.636': attribute type 30 has an invalid length. [ 136.721109][ T8243] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 136.752779][ T8245] sctp: [Deprecated]: syz.3.638 (pid 8245) Use of int in max_burst socket option. [ 136.752779][ T8245] Use struct sctp_assoc_value instead [ 136.868609][ T58] block nbd0: Possible stuck request ffff888025a3e000: control (read@0,4096B). Runtime 30 seconds [ 137.350822][ T8280] sctp: [Deprecated]: syz.0.648 (pid 8280) Use of int in maxseg socket option. [ 137.350822][ T8280] Use struct sctp_assoc_value instead [ 137.402665][ T8282] xt_bpf: check failed: parse error [ 137.484248][ T8284] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 137.566576][ T8289] netlink: 'syz.0.651': attribute type 2 has an invalid length. [ 137.708401][ T8297] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 137.961475][ T8303] raw_sendmsg: syz.4.655 forgot to set AF_INET. Fix it! [ 138.154106][ T8320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.307044][ T8326] TCP: TCP_TX_DELAY enabled [ 138.393581][ T8334] __nla_validate_parse: 10 callbacks suppressed [ 138.393602][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 138.504798][ T8339] veth0: entered promiscuous mode [ 138.569075][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 138.594080][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 138.608436][ T8337] netlink: 'syz.0.666': attribute type 3 has an invalid length. [ 138.616302][ T8337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.666'. [ 138.659056][ T8349] netlink: 'syz.3.669': attribute type 2 has an invalid length. [ 138.844648][ T8361] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 139.013072][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 139.083403][ T8375] netlink: 64 bytes leftover after parsing attributes in process `syz.2.676'. [ 139.118239][ T8377] netlink: 'syz.3.677': attribute type 7 has an invalid length. [ 139.126832][ T8377] netlink: 140 bytes leftover after parsing attributes in process `syz.3.677'. [ 139.184518][ T8379] netlink: 'syz.2.678': attribute type 1 has an invalid length. [ 139.193109][ T8379] netlink: 'syz.2.678': attribute type 1 has an invalid length. [ 139.330337][ T8338] veth0: left promiscuous mode [ 139.577104][ T8397] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 139.606644][ T8399] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 139.608693][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 139.772547][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 139.828641][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 140.042640][ T8415] syz.2.687 (8415) used greatest stack depth: 18032 bytes left [ 140.063410][ T8421] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 140.079403][ T8421] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 140.176993][ T8425] bridge0: port 3(gretap0) entered blocking state [ 140.183537][ T8425] bridge0: port 3(gretap0) entered disabled state [ 140.191983][ T8425] gretap0: entered allmulticast mode [ 140.199933][ T8425] gretap0: entered promiscuous mode [ 140.205944][ T8425] bridge0: port 3(gretap0) entered blocking state [ 140.212463][ T8425] bridge0: port 3(gretap0) entered forwarding state [ 140.699199][ T8455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.022060][ T8481] netlink: 'syz.2.707': attribute type 1 has an invalid length. [ 141.056025][ T8481] netlink: 'syz.2.707': attribute type 3 has an invalid length. [ 141.063741][ T8481] NCSI netlink: No device for ifindex 813332851 [ 141.449649][ T8506] openvswitch: netlink: Message has 1 unknown bytes. [ 141.493885][ T8506] openvswitch: netlink: Message has 1 unknown bytes. [ 141.596305][ T8517] netlink: 'syz.3.721': attribute type 9 has an invalid length. [ 141.688505][ T8521] Cannot find add_set index 0 as target [ 141.734921][ T8521] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 141.744052][ T8521] tipc: Started in network mode [ 141.751915][ T8521] tipc: Node identity aaaaaaaaaa1, cluster identity 4711 [ 141.760632][ T8521] tipc: Enabled bearer , priority 28 [ 141.953940][ T8538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.991658][ T8540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.204200][ T8553] : renamed from bond0 (while UP) [ 142.261269][ T8551] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 142.765219][ T25] tipc: Node number set to 12233386 [ 142.900714][ T8595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.143529][ T8608] netlink: 'syz.3.749': attribute type 2 has an invalid length. [ 143.184949][ T8610] netlink: 'syz.4.750': attribute type 10 has an invalid length. [ 143.193854][ T8611] netlink: 'syz.4.750': attribute type 10 has an invalid length. [ 143.221183][ T8611] geneve0: entered promiscuous mode [ 143.235458][ T8611] geneve0: entered allmulticast mode [ 143.257352][ T8611] team0: Port device geneve0 added [ 143.541731][ T8629] __nla_validate_parse: 16 callbacks suppressed [ 143.541752][ T8629] netlink: 164 bytes leftover after parsing attributes in process `syz.3.755'. [ 143.648800][ T8634] x_tables: duplicate underflow at hook 3 [ 143.739919][ T8639] netlink: 108 bytes leftover after parsing attributes in process `syz.4.758'. [ 143.772074][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 143.879425][ T8639] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.885648][ T25] IPVS: starting estimator thread 0... [ 143.975175][ T8648] IPVS: using max 20 ests per chain, 48000 per kthread [ 144.163527][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.768'. [ 144.182341][ T8667] vlan1: entered promiscuous mode [ 144.221829][ T8668] tipc: Enabling of bearer rejected, failed to enable media [ 144.252371][ T8666] vlan1: left promiscuous mode [ 144.531939][ T8684] netlink: 52 bytes leftover after parsing attributes in process `syz.3.775'. [ 145.389450][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 145.440624][ T8722] netlink: 2 bytes leftover after parsing attributes in process `syz.4.790'. [ 145.598238][ T8733] validate_nla: 2 callbacks suppressed [ 145.598259][ T8733] netlink: 'syz.1.794': attribute type 8 has an invalid length. [ 145.782227][ T8742] xt_socket: unknown flags 0x3c [ 145.903833][ T8754] sctp: [Deprecated]: syz.4.797 (pid 8754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.903833][ T8754] Use struct sctp_sack_info instead [ 146.073317][ T8759] netlink: 'syz.1.801': attribute type 18 has an invalid length. [ 146.157627][ T8765] netlink: 96 bytes leftover after parsing attributes in process `syz.3.803'. [ 146.179313][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 146.444341][ T8785] netlink: 'syz.3.810': attribute type 7 has an invalid length. [ 146.601338][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 146.621914][ T8794] netlink: 'syz.3.815': attribute type 153 has an invalid length. [ 146.823214][ T8806] netlink: 'syz.3.820': attribute type 13 has an invalid length. [ 146.830256][ T8801] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.887988][ T8806] veth0_macvtap: left promiscuous mode [ 146.925975][ T8806] macvtap0: entered allmulticast mode [ 146.938990][ T8806] macvtap0: refused to change device tx_queue_len [ 146.967628][ T8807] ip6t_srh: unknown srh invflags 5F00 [ 146.974049][ T8809] macsec0: entered promiscuous mode [ 146.996005][ T8809] macsec0: left promiscuous mode [ 147.912146][ T8863] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 148.177931][ T8877] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 148.806462][ T8895] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 149.233764][ T8908] tipc: Enabling not permitted [ 149.255266][ T8908] tipc: Enabling of bearer rejected, failed to enable media [ 149.278550][ T8904] pim6reg1: entered promiscuous mode [ 149.284022][ T8904] pim6reg1: entered allmulticast mode [ 149.307918][ T5887] hid-generic 0005:046D:0A0E.0001: item fetching failed at offset 0/1 [ 149.353280][ T8915] gtp0: entered promiscuous mode [ 149.370437][ T5887] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22 [ 149.385247][ T8915] gtp0: entered allmulticast mode [ 149.483538][ T8923] __nla_validate_parse: 4 callbacks suppressed [ 149.483558][ T8923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.857'. [ 149.580786][ T8928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.857'. [ 149.779647][ T8932] netlink: 'syz.4.860': attribute type 29 has an invalid length. [ 149.819090][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 149.867865][ T8935] netlink: 'syz.4.860': attribute type 29 has an invalid length. [ 149.868693][ T8943] netlink: 'syz.2.864': attribute type 9 has an invalid length. [ 149.883577][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 149.884912][ T8932] team0: left allmulticast mode [ 149.897845][ T8932] geneve0: left allmulticast mode [ 149.903070][ T8932] team0: left promiscuous mode [ 149.910203][ T8932] geneve0: left promiscuous mode [ 149.918113][ T8932] bridge0: port 1(team0) entered disabled state [ 150.516432][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'. [ 150.570443][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.949211][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.959708][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.967654][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.984487][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.992778][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.001211][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.214076][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.380306][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.525195][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.592272][ T9001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.875'. [ 151.602759][ T9008] netlink: 128 bytes leftover after parsing attributes in process `syz.4.878'. [ 151.631742][ T9001] netlink: 216 bytes leftover after parsing attributes in process `syz.2.875'. [ 151.641667][ T9008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.878'. [ 151.988462][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 152.060425][ T11] bridge_slave_1: left allmulticast mode [ 152.081644][ T11] bridge_slave_1: left promiscuous mode [ 152.090596][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.109033][ T11] bridge_slave_0: left allmulticast mode [ 152.114848][ T11] bridge_slave_0: left promiscuous mode [ 152.123186][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.125705][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 152.554647][ T11] team0: Port device geneve0 removed [ 152.742479][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.756449][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.769430][ T11] bond0 (unregistering): Released all slaves [ 152.790511][ T9029] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.831839][ T9039] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 152.844454][ T9039] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 152.852864][ T9039] CPU: 0 UID: 0 PID: 9039 Comm: syz.0.884 Not tainted 6.14.0-rc5-syzkaller-00149-gd2b9d97e89c7 #0 [ 152.863442][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.873517][ T9039] RIP: 0010:tipc_udp_nl_dump_remoteip+0x579/0x9c0 [ 152.879967][ T9039] Code: 81 d0 00 00 00 48 89 44 24 58 48 8d 81 c8 00 00 00 48 89 44 24 40 45 31 ff 48 89 5c 24 10 4c 89 74 24 50 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 88 d6 81 f6 49 8b 04 24 48 89 44 [ 152.899579][ T9039] RSP: 0018:ffffc9000c88f040 EFLAGS: 00010246 [ 152.905670][ T9039] RAX: 0000000000000000 RBX: ffff88814d7ee5e8 RCX: ffff88806a518c80 [ 152.913647][ T9039] RDX: ffffc9000f462000 RSI: 00000000000001f5 RDI: 00000000000001f6 [ 152.921622][ T9039] RBP: ffffc9000c88f190 R08: ffffffff89d0bf66 R09: 1ffffffff2079ece [ 152.929592][ T9039] R10: dffffc0000000000 R11: fffffbfff2079ecf R12: 0000000000000000 [ 152.937571][ T9039] R13: dffffc0000000000 R14: ffff888062284098 R15: 0000000000000000 [ 152.945547][ T9039] FS: 00007f3ff879f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 152.954487][ T9039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.961088][ T9039] CR2: 0000001b30809ff8 CR3: 000000005cdde000 CR4: 00000000003526f0 [ 152.969066][ T9039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.977037][ T9039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.985008][ T9039] Call Trace: [ 152.988295][ T9039] [ 152.991231][ T9039] ? __die_body+0x5f/0xb0 [ 152.995577][ T9039] ? die_addr+0xb0/0xe0 [ 152.999741][ T9039] ? exc_general_protection+0x3dd/0x5d0 [ 153.005326][ T9039] ? asm_exc_general_protection+0x26/0x30 [ 153.011065][ T9039] ? lockdep_rtnl_is_held+0x26/0x40 [ 153.016266][ T9039] ? tipc_udp_nl_dump_remoteip+0x579/0x9c0 [ 153.022134][ T9039] ? __pfx_tipc_udp_nl_dump_remoteip+0x10/0x10 [ 153.028306][ T9039] ? __pfx___alloc_skb+0x10/0x10 [ 153.033252][ T9039] genl_dumpit+0x10d/0x1b0 [ 153.037688][ T9039] netlink_dump+0x64d/0xe10 [ 153.042198][ T9039] ? __pfx_netlink_dump+0x10/0x10 [ 153.047225][ T9039] ? __asan_memset+0x23/0x50 [ 153.051809][ T9039] ? genl_start+0x4ae/0x6d0 [ 153.056319][ T9039] __netlink_dump_start+0x5a2/0x790 [ 153.061523][ T9039] genl_rcv_msg+0x894/0xec0 [ 153.066032][ T9039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.071059][ T9039] ? __pfx_genl_start+0x10/0x10 [ 153.075908][ T9039] ? __pfx_genl_dumpit+0x10/0x10 [ 153.080873][ T9039] ? __pfx_genl_done+0x10/0x10 [ 153.085734][ T9039] ? __pfx_lock_acquire+0x10/0x10 [ 153.090768][ T9039] ? __pfx_tipc_udp_nl_dump_remoteip+0x10/0x10 [ 153.096930][ T9039] ? __pfx___might_resched+0x10/0x10 [ 153.102253][ T9039] netlink_rcv_skb+0x206/0x480 [ 153.107043][ T9039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.112070][ T9039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.117366][ T9039] genl_rcv+0x28/0x40 [ 153.121353][ T9039] netlink_unicast+0x7f6/0x990 [ 153.126135][ T9039] ? __pfx_netlink_unicast+0x10/0x10 [ 153.131425][ T9039] ? __virt_addr_valid+0x45f/0x530 [ 153.136556][ T9039] ? __phys_addr_symbol+0x2f/0x70 [ 153.141579][ T9039] ? __check_object_size+0x47a/0x730 [ 153.146887][ T9039] netlink_sendmsg+0x8de/0xcb0 [ 153.151665][ T9039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.156970][ T9039] ? aa_sock_msg_perm+0x91/0x160 [ 153.161916][ T9039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.167205][ T9039] __sock_sendmsg+0x221/0x270 [ 153.171884][ T9039] ____sys_sendmsg+0x53a/0x860 [ 153.176649][ T9039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.181936][ T9039] ? __fget_files+0x2a/0x410 [ 153.186540][ T9039] ? __fget_files+0x2a/0x410 [ 153.191167][ T9039] __sys_sendmsg+0x269/0x350 [ 153.195762][ T9039] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.200888][ T9039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.207220][ T9039] ? do_syscall_64+0x100/0x230 [ 153.211997][ T9039] ? do_syscall_64+0xb6/0x230 [ 153.216680][ T9039] do_syscall_64+0xf3/0x230 [ 153.221193][ T9039] ? clear_bhb_loop+0x35/0x90 [ 153.225873][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.231788][ T9039] RIP: 0033:0x7f3ff798d169 [ 153.236210][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.255819][ T9039] RSP: 002b:00007f3ff879f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.264237][ T9039] RAX: ffffffffffffffda RBX: 00007f3ff7ba6160 RCX: 00007f3ff798d169 [ 153.272211][ T9039] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000007 [ 153.280178][ T9039] RBP: 00007f3ff7a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.288150][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.296122][ T9039] R13: 0000000000000000 R14: 00007f3ff7ba6160 R15: 00007fff22196458 [ 153.304100][ T9039] [ 153.307118][ T9039] Modules linked in: [ 153.312473][ T9039] ---[ end trace 0000000000000000 ]--- [ 153.321816][ T5841] Bluetooth: hci3: command tx timeout [ 153.333029][ T9039] RIP: 0010:tipc_udp_nl_dump_remoteip+0x579/0x9c0 [ 153.341820][ T9039] Code: 81 d0 00 00 00 48 89 44 24 58 48 8d 81 c8 00 00 00 48 89 44 24 40 45 31 ff 48 89 5c 24 10 4c 89 74 24 50 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 88 d6 81 f6 49 8b 04 24 48 89 44 [ 153.362699][ T9039] RSP: 0018:ffffc9000c88f040 EFLAGS: 00010246 [ 153.369526][ T9039] RAX: 0000000000000000 RBX: ffff88814d7ee5e8 RCX: ffff88806a518c80 [ 153.377692][ T9039] RDX: ffffc9000f462000 RSI: 00000000000001f5 RDI: 00000000000001f6 [ 153.386468][ T9039] RBP: ffffc9000c88f190 R08: ffffffff89d0bf66 R09: 1ffffffff2079ece [ 153.394534][ T9039] R10: dffffc0000000000 R11: fffffbfff2079ecf R12: 0000000000000000 [ 153.402555][ T9039] R13: dffffc0000000000 R14: ffff888062284098 R15: 0000000000000000 [ 153.410577][ T9039] FS: 00007f3ff879f6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 153.420142][ T9039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.426894][ T9039] CR2: 000000110c379fa3 CR3: 000000005cdde000 CR4: 00000000003526f0 [ 153.435547][ T9039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.443548][ T9039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.451584][ T9039] Kernel panic - not syncing: Fatal exception [ 153.458029][ T9039] Kernel Offset: disabled [ 153.462350][ T9039] Rebooting in 86400 seconds..