last executing test programs: 1m5.971686252s ago: executing program 0 (id=1846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x12}]}, 0x18}], 0x1}, 0x0) 54.774019554s ago: executing program 0 (id=1846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x12}]}, 0x18}], 0x1}, 0x0) 41.314683314s ago: executing program 0 (id=1846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x12}]}, 0x18}], 0x1}, 0x0) 29.180138636s ago: executing program 0 (id=1846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x12}]}, 0x18}], 0x1}, 0x0) 16.864457628s ago: executing program 0 (id=1846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x12}]}, 0x18}], 0x1}, 0x0) 4.882130472s ago: executing program 4 (id=2470): r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, 0x0, 0x0) unshare(0x62040200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0x755, 0xc, 0x8, 0xfffffffe}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0, 0x0, 0x10}, 0x18) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x15, 0x12}}) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r3, @ANYRES16=r6, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a32000000000900030073797a3100000000"], 0x40}}, 0x0) 4.666118311s ago: executing program 2 (id=2471): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xa, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, 0x14, 0xcec681dc9effab3b, 0x70bd25, 0x25dfdbfe, {0x10, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x13, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0xfffffff7}}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x5a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r7, 0x0, 0x200080c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000980)={'nr0\x00', 0x100}) 4.540160919s ago: executing program 0 (id=1846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x12}]}, 0x18}], 0x1}, 0x0) 3.326129672s ago: executing program 2 (id=2472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000500)={@random, @link_local, @val={@val, {0x8100, 0x1, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv6=@udp={0x4, 0x6, "4876b1", 0x58, 0x11, 0xff, @remote, @loopback, {[@hopopts={0x0, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}]}], {0x4e22, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "93e3b4c85850f35c4f743b12d3a27015bab6fc04c43b80c0", "f1c20df9af4ac05300ea6cd65899a7b630045481ce8cb163ad400c47b09d2b00"}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) 3.325702814s ago: executing program 3 (id=2473): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000005600)={0x40, r4, 0x1, 0x0, 0x3, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x20004004) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x8800) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffe2}, {0xc, 0x4}, {0xf, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4004) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.318913568s ago: executing program 4 (id=2474): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000a00), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000000)=""/39, &(0x7f0000000040)=0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d08224", 0x22}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4", 0x28}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9920000", 0xd1}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd", 0x46}], 0x3}}], 0x2, 0xc0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40008c0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.312253268s ago: executing program 3 (id=2475): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='@', 0xfffffffffffffe99, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppoe(r1, &(0x7f0000000200)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_1\x00'}}, 0x1e) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 2.31103266s ago: executing program 4 (id=2476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006080)=@newtfilter={0x74, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x2000000b, 0xfffffff6, 0x40, 0x3, {0x9f, 0x0, 0x101, 0x4, 0x7}, {0x1, 0x2, 0x81, 0x5, 0x3, 0x6cf212f}, 0x0, 0x101, 0x9000000}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x800) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(0xffffffffffffffff) close(0x3) bind$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1.598404759s ago: executing program 1 (id=2478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001800), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r1, 0x201, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 1.523177093s ago: executing program 2 (id=2479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) pipe(&(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410328bd7000fddbde25070000000c0002800500020008000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) 1.424273873s ago: executing program 4 (id=2480): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf00) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x10}, {0x10, 0x3}, {0xf, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x3}}, @enum64={0xe, 0x2, 0x0, 0x13, 0x0, 0xd, [{0xe, 0x158, 0xffffdc96}, {0x8, 0x8, 0x2}]}]}, {0x0, [0x30, 0x2e, 0x0, 0x5f, 0x0, 0x30]}}, &(0x7f00000004c0)=""/144, 0x88, 0x90, 0x1, 0x4, 0x0, @void, @value}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x54051}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="4c1fac", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r8, 0x1) setsockopt(r8, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r9, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socket$packet(0x11, 0x2, 0x300) 1.415802707s ago: executing program 3 (id=2481): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008840) 1.21984962s ago: executing program 1 (id=2482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000200), 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCNRDECOBS(r4, 0xff03) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078005001400200000000800084000000000050001000600000011000300686173683a6e65742c6e6574000000000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x10, 0x8, 0x0, @void, @value}, 0x20) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2, @private2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0xffffff1f, 0x8000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44841}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x8}}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8001}}]}]}}}]}, 0x64}}, 0x0) 1.217145712s ago: executing program 3 (id=2483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x71548499, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}, @jmp={0x5, 0x1, 0xb, 0x7, 0x4, 0x50, 0xfffffffffffffffc}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0xfffffffffffffff8, 0x1d765bd3b3a72dea}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x11, &(0x7f0000000100)=""/17, 0x41100, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0x2, 0x25, 0xe9e3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x1, 0x3, 0x9, 0x9}, {0x4, 0x2, 0xd, 0x1}, {0x5, 0x2, 0xc, 0x8}, {0x4, 0x1, 0x1, 0x7}, {0x4, 0x1, 0x9, 0xa}, {0x0, 0x5, 0xf, 0x7}, {0x4, 0x1, 0x1, 0x4}, {0x2, 0x4, 0x2, 0x6}, {0x4, 0x5, 0x5, 0x8}], 0x10, 0x5, @void, @value}, 0x94) writev(r0, &(0x7f0000000340), 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x31}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x98000000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xd4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)="787fdd4566087a065de342332e01a2a2e488ba963bfc7dc43853fca447848eacdd5b38", 0x23}], 0x1, &(0x7f0000000580)=[{0x28, 0x10b, 0x79, "2ca8b43b9bfe31713cf5926050a03ccadcbfec"}, {0xf0, 0x1b54d1cf798b7080, 0xefa7, "ed14c1eb7195e30ad16dba4aeadb6aed71085fda3e126aa3a4bc3ee02a32acbff6631dbe99c90fb0e71ff7eba03c53c55bcf194eada54d2dd3d3a22766b22128ce032a7b33227ae6f7775704e0bb7ee4a213e9e8003e3f7cfd27a1547ef4db5fe0c8adcf92392fcbf381b114908c5acc3edc63c5039833d856fdd3e095e9fe811f3ef50665bdae358046ece581220f9a1b52dbe4b3ed9016cd04f6d3f3087ccd199075f376f9800060fd5d818d90e2596e2a13524e0069eec02d82a7fe758f680cba64b92c64e7cbd16368fbf51504b3089d33e0ca9694d81fc48c"}], 0x118}}], 0x1, 0x20000805) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000780)={0x3, 'ip_vti0\x00', {0x8}}) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x6c, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = socket$inet(0x2, 0x800, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000940)={0x8, 'veth1\x00', {'veth0_to_team\x00'}, 0x59d}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x10000, 0x3, {{0x8, 0x4, 0x3, 0x17, 0x20, 0x68, 0x0, 0x1, 0x29, 0x0, @broadcast, @local, {[@generic={0x88, 0xc, "5385cfd852a31bc06994"}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000000f00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a40)=@delqdisc={0x468, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {0xfff1, 0xfff2}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x3, 0x401, 0x2, 0x4, 0x8, 0x4}}, {0xc, 0x2, [0x5, 0x2, 0x2, 0xfff]}}, {{0x1c, 0x1, {0x20, 0x7a, 0x2, 0x37, 0x1, 0x4a9, 0xfffffff8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xe, 0x8, 0x2, 0x100000, 0x0, 0x80, 0xc, 0x2}}, {0x8, 0x2, [0x0, 0x3]}}, {{0x1c, 0x1, {0xcb, 0x24, 0x8e4, 0x0, 0x0, 0x9, 0xdb, 0x6}}, {0x10, 0x2, [0xe320, 0x9, 0xfff2, 0x2, 0x7, 0x3]}}, {{0x1c, 0x1, {0xff, 0x2, 0x7f, 0x4a, 0x2, 0x8, 0x7fffffff, 0x9}}, {0x16, 0x2, [0x101, 0xbc, 0x6a, 0x1b4, 0x9, 0x200, 0x5, 0x5, 0x8]}}, {{0x1c, 0x1, {0x0, 0x9, 0x39, 0x1, 0x2, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x9]}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7, "c34f978a48d08d52ed98d1c1b8087a1c"}}}, @TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xb3, 0x5, 0x4, 0x1, 0x3, 0x4, 0x6}}, {0x10, 0x2, [0x2, 0xe5, 0xd2, 0x8, 0x101, 0x7]}}, {{0x1c, 0x1, {0x3, 0xfd, 0x9b, 0x0, 0x2, 0x5d0a268c, 0x8, 0x3}}, {0xa, 0x2, [0x101, 0x1, 0x7]}}, {{0x1c, 0x1, {0x0, 0xd, 0xe, 0x182cae65, 0x0, 0x1, 0xc, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x3, 0xff, 0x9, 0x3, 0x1, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0xf227]}}, {{0x1c, 0x1, {0x2, 0x3, 0x101, 0x5, 0x1, 0x2, 0x67, 0x8}}, {0x14, 0x2, [0x800, 0x3ff, 0x9, 0x4, 0x6, 0x8, 0x7f, 0xc0e0]}}, {{0x1c, 0x1, {0x6, 0x9, 0x5, 0x0, 0x1, 0x7fffffff, 0x4000, 0x9}}, {0x16, 0x2, [0x200, 0x9, 0x3, 0x960, 0xbb16, 0x2, 0x800, 0xf337, 0x4]}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xe0}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x8, 0x10, 0x0, 0x7, 0xfffffffe, 0x4}}, {0xc, 0x2, [0x101, 0x8001, 0x4, 0x0]}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0x3, 0x1, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x2, 0x8, 0x9, 0x2, 0x80, 0xdcaf, 0x3}}, {0xa, 0x2, [0x0, 0x7, 0x7]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0x2, 0x80000000, 0x2, 0x2, 0xc, 0x5}}, {0xe, 0x2, [0x8, 0xfff, 0x2, 0xfff, 0x9]}}, {{0x1c, 0x1, {0x2, 0x6, 0xadd, 0x0, 0x2, 0x9, 0xfffffffb, 0x1}}, {0x6, 0x2, [0x8]}}]}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x3, 0x7, 0x2, 0x4, 0x6, 0x7}}, {0x12, 0x2, [0x100, 0x15fe, 0x5, 0xe5bb, 0x6, 0x6, 0x7fff]}}, {{0x1c, 0x1, {0xfa, 0x2, 0x2, 0x80, 0x1, 0x9, 0x385b0d2c, 0x5}}, {0xe, 0x2, [0xc0, 0x400, 0x1, 0x6, 0x3]}}, {{0x1c, 0x1, {0xa8, 0x9, 0x7, 0x7, 0x0, 0x4, 0x5, 0x6}}, {0x10, 0x2, [0x2, 0x401, 0x2, 0x0, 0xc000, 0x7]}}, {{0x1c, 0x1, {0x1c, 0x7, 0x9, 0x5, 0x1, 0x3, 0xfff, 0x4}}, {0xc, 0x2, [0x7ff, 0xe, 0x4, 0x5]}}, {{0x1c, 0x1, {0x6a, 0x6, 0x3, 0x7, 0x2, 0xfffffc00, 0xbcea, 0x5}}, {0xe, 0x2, [0x0, 0xf5, 0x5, 0x3, 0x4]}}, {{0x1c, 0x1, {0x0, 0x7, 0x9, 0x4, 0x2, 0x5dcf42d3, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x5, 0xb, 0x7, 0x2, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x101]}}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x8010}, 0x44000) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x54, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x448c0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r1) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x130, r9, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5, 0x3, '-'}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @private1, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @local, 0x8}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20008040}, 0x24004080) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x30, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8aa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x51}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40040) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000001540)={&(0x7f0000001400)={0x13c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r11, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x4000) (async) sendmsg$NL80211_CMD_TESTMODE(r8, &(0x7f0000002840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002800)={&(0x7f0000001700)={0x10d0, r3, 0x2, 0x70bd25, 0x7, {{}, {@void, @val={0xc, 0x99, {0x81, 0x14}}}}, [@NL80211_ATTR_TESTDATA={0x53, 0x45, "7b31ead65857e6a9edbe1efd017e172a7713016556b25c8ff78e676cc46e277180f4778c5b0d5523716509f864c05dfe4df8b096bd6820e784dc4a63b3c44858e4cfac465b0c8caaf27854471c86f5"}, @NL80211_ATTR_TESTDATA={0x47, 0x45, "9336993554648665870eacc19e0b71f44389b2168d6802f29b738bbb374c571154430946c3f34983e0274a3c5f4ea06c6fdd18e4d2338ad1c21f1fed7c202745d557c4"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xf, 0x45, "0ddabcdbcca4f55bd1e58c"}]}, 0x10d0}}, 0x1) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x400000, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, &(0x7f0000002900), &(0x7f0000002940)=0x4) syz_extract_tcp_res$synack(&(0x7f0000002980), 0x1, 0x0) 1.094064463s ago: executing program 2 (id=2484): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d010200150001"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300430000000101010000000000000800000000010000000100000506000000000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) 954.185985ms ago: executing program 2 (id=2485): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400000}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="316b0ee9aa421df6d0d08af573008b55551c7c698b5cff3399a11ecd9578fbb46ea020de27ff25e9dd12f565be571f110754d2847b79d3bd9b2364b7bfdc5d484ec82a8b8a4ed41771af1465d92bce72e6a27aa400e1a5ac0a3a0ac41b81285c001c635fc1b11d2b84d095745640d0762736a9b6b4a9657b3f0d207e884fb3a6b594c9e171b222fea9434c4c13827416a336b5d67eb488c9ff0a94e84f4344f2175277387049241485558385daba29e00e7081d96aacc3d5", 0xb8}, {&(0x7f0000000100)="f06aef1ad18aabfd5d5b20702fe540b99a8252674e05916f2e5122ec93225144c7f8c69b392a0af711dbfebf8e9548a8962ceaf7d525d58555c5891b3c692a07d105285e1178e16ecd1f1ca6f2f48affaa8757d405e6ad921858cadceca4b29eb2a30f9812c572ea0f37a53d691459159fac3265d1d0f347f673539c679b680b629ea91dca9b93e2251409d9ad3e528b1de302556fda510020660a20c6281d7449c2a18590598f19962c559e31f0c4d59a2022c8f40e5cd8bc8b58e5c150eb3f8d0a1997c8064727c5467a394ca1d4", 0xcf}, {&(0x7f00000005c0)="9dd2460f3880f7f9f1afe9693d7e7e4369527b71bdac9fbd1f952077abda2e5c7aaa950da9fccade01e8d8eef0ce7d7aec62e2e338926a1e0ad73b103d7a06ce4c5063f654bdfeaaec64a5d451cf97d28d5a2ef908fdccc28aaf2afc9621daeadc24188c3730d182cb2e4603d09e6075205e9bbe02bb77b81f6b74939e871736c4001cc77e88d36307f9fc456457f8368f4c68ce988d25f7e4417bb0c3bb46fbb69062b3e0f427e07f26a6fd1cfec7de9dcaea02e924f0a27d510bd1143a75cfdd49174beadf91bbdc6789d0fc4d811db0ba86dbe83baa638401f097b313e8494ef7dbacd5f8a4f32b8937d30e916b", 0xef}, {&(0x7f0000000440)="36952f3bffbbb141c3d44551fde52a2a9e1dd9cba33f1a37d470058bbeda4de6210e39c30a46ce0921987ea258aa11dc391eeb62ac8163cb9f5a8170f5b084d7aab17108bd7bfc2c6da9846425be4a6289198cee47138486174830bc035682f206f7c0362eb1cceb0ee8219ee21947a4fd64aede7c814a53ae34907e711e2ecf3b6b0370a11ba7dfb39b8755781a9e016d0b3fdb26247bf402a7638ff10750968bc8c4dbe3f3d337df3cfeffda4b9edd51fa3dc6df47e47863ccf58ab40d97f0bb6daaf1cf26a00ebbefa6b32ab1d672f0c0873ee97abe", 0xd7}, {&(0x7f0000000300)="d9e53f9e2deec2f9bab7fead62cf5c14cfa7d5d8f2b5a1346d0193743f70a5a23566b7f7e260bc4d96e42f4931959e91e8ae3e9d78", 0x35}, {&(0x7f0000000340)="dd26af535818dd2ce0a7f0a702f5c532ffffdfac18c77626fc236fc12fbdc1730e5a2a156694323f0dc8", 0x2a}, {&(0x7f0000000380)="a135c837828e022095bc63301c91187979e5078a2e931661bd7c59e8116f3e561368d0405235c14dd027ec482eaba029", 0x30}], 0x7}}], 0x1, 0x10000) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000380)={0x3, 0x5}, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x8, 0x8004, 0xc43, 0x1}, &(0x7f0000000400)=0x10) 953.378372ms ago: executing program 1 (id=2486): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8, 0x10, 0x7, 0x7, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x68, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0x5, "b6e117"}, @timestamp={0x44, 0x20, 0x27, 0x0, 0x2, [0x971c, 0x3bc, 0xfff, 0x532, 0x6, 0x10000, 0x5]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x3, [@fwd={0xd}, @ptr={0xd, 0x0, 0x0, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x6, 0x1}}, @enum64={0xb, 0x4, 0x0, 0x13, 0x0, 0x9, [{0x7, 0x95, 0x1}, {0x6, 0xffff, 0xe}, {0x10, 0x8629, 0xb2}, {0xd, 0xfffffffb, 0xe7}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x7f, 0x4}, @enum64={0xf, 0x5, 0x0, 0x13, 0x0, 0x0, [{0x7, 0x5ff, 0x424}, {0xf, 0x6, 0x5}, {0xb, 0x6, 0x4}, {0x5, 0x101, 0x7}, {0xf, 0xfffffff7, 0xfffffffe}]}]}, {0x0, [0x2e]}}, &(0x7f0000000a40)=""/4096, 0xdf, 0x1000, 0x1, 0xffffb103, 0x0, @void, @value}, 0x28) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x101, 0x0, 0x12280, r2, 0xfff, '\x00', r3, r4, 0x1, 0x0, 0x1, 0x8, @void, @value, @value=r5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 870.296083ms ago: executing program 3 (id=2487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x10) 870.042156ms ago: executing program 4 (id=2488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES64=r0], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 719.660998ms ago: executing program 1 (id=2489): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x200040c0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0381, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) close(r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x2, 'veth0_to_batadv\x00'}) socket$unix(0x1, 0x1, 0x0) sendmsg(r0, 0x0, 0x8001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 676.621382ms ago: executing program 3 (id=2490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000500)={@random, @link_local, @val={@val, {0x8100, 0x1, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv6=@udp={0x4, 0x6, "4876b1", 0x58, 0x11, 0xff, @remote, @loopback, {[@hopopts={0x0, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}]}], {0x4e22, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "93e3b4c85850f35c4f743b12d3a27015bab6fc04c43b80c0", "f1c20df9af4ac05300ea6cd65899a7b630045481ce8cb163ad400c47b09d2b00"}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) 606.416668ms ago: executing program 4 (id=2491): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet(0x2, 0x800, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private2, @in=@private}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, 0x0, 0x0, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r4, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r4, r7, 0x2f, 0x18, 0x4, @void, @value=r7}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r8, 0x0, 0x4}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x1ff) r9 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 604.013294ms ago: executing program 2 (id=2501): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140), 0x4) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)={0x210, 0x0, 0xb0fbdffbeb6d3c28, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcbc6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x50000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x676}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1978}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbf30}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5ed, @private0, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x87c6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xf06d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40003}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff8101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb83f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x24040899}, 0x20000804) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$netlink(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0xc014) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40800) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c0000000c0000000000000000000200"], 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 353.111093ms ago: executing program 1 (id=2492): socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r1], 0x28}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001340)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001440)=0xe8) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480)={r1, r2, r3}, 0xc) (async) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480)={r1, r2, r3}, 0xc) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x2, @dev}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x907, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) (async) accept4(r6, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x800) pselect6(0x40, &(0x7f0000000140)={0x10, 0x40, 0xf15a, 0x5, 0x80000001, 0xcd, 0xe2, 0x5e}, &(0x7f0000000180)={0x3, 0x7, 0xfffffffffffffffa, 0xc, 0xcc, 0x1, 0x6, 0x8}, &(0x7f00000001c0)={0x3, 0x3, 0xf, 0x0, 0x1afa, 0xafb, 0x9, 0x5}, &(0x7f0000000240)={r7, r8+10000000}, &(0x7f0000001300)={&(0x7f00000012c0)={[0x5]}, 0x8}) (async) pselect6(0x40, &(0x7f0000000140)={0x10, 0x40, 0xf15a, 0x5, 0x80000001, 0xcd, 0xe2, 0x5e}, &(0x7f0000000180)={0x3, 0x7, 0xfffffffffffffffa, 0xc, 0xcc, 0x1, 0x6, 0x8}, &(0x7f00000001c0)={0x3, 0x3, 0xf, 0x0, 0x1afa, 0xafb, 0x9, 0x5}, &(0x7f0000000240)={r7, r8+10000000}, &(0x7f0000001300)={&(0x7f00000012c0)={[0x5]}, 0x8}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendto$packet(r6, &(0x7f00000002c0)="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", 0x1000, 0x800, &(0x7f00000000c0)={0x11, 0xc, r10, 0x1, 0x7, 0x6, @local}, 0x14) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r12 = accept$alg(r11, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r12, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="553e12df315719c90300be1f03774b1d49d6fc51d5b109bd4b334ed63cae0165464c25ea05c92fbdd6b7", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000000440)="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", 0x101}, {&(0x7f00000003c0)="74b31b1aa3cb406966a15bae4de20b2cd49a1d9202545c860e3140a0ad38c8b2db313446e6da0dfbd2679ed27219e874ac8fc49f40", 0x35}], 0x4}], 0x952f, 0x840) recvmsg(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000000300)=""/150, 0x96}], 0x2}, 0x10001) (async) recvmsg(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000000300)=""/150, 0x96}], 0x2}, 0x10001) close(r0) (async) close(r0) 0s ago: executing program 1 (id=2493): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1df7ce8318d0fb90, 0x11, r0, 0x3cd2e000) (async) r1 = socket(0x18, 0x0, 0x0) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x4, @link_local, 'vcan0\x00'}}, 0x1e) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_ZONE={0x6}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9a}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000100) kernel console output (not intermixed with test programs): ity 10 [ 212.606789][T11018] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 212.694649][T11018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.725028][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1556'. [ 212.735463][T11023] bond2: (slave gretap1): making interface the new active one [ 212.754033][T11023] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 212.969423][T11031] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 213.028707][ T5879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 213.120841][T11041] ax25_connect(): syz.0.1562 uses autobind, please contact jreuter@yaina.de [ 213.178091][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1563'. [ 213.593218][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1566'. [ 213.697942][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 213.706347][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 213.717882][ T5879] tipc: Node number set to 2886997162 [ 213.867226][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1569'. [ 213.877840][T11062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1569'. [ 213.917430][T11065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1571'. [ 213.962314][T11065] dummy0: entered promiscuous mode [ 213.972087][T11065] team0: entered promiscuous mode [ 213.983011][T11065] team_slave_0: entered promiscuous mode [ 213.992730][T11065] team_slave_1: entered promiscuous mode [ 214.001629][T11065] bond0: entered promiscuous mode [ 214.006857][T11065] bond_slave_0: entered promiscuous mode [ 214.013060][T11065] bond_slave_1: entered promiscuous mode [ 214.019179][T11065] bridge2: entered promiscuous mode [ 214.025117][T11065] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 214.033232][T11065] Cannot create hsr debugfs directory [ 214.458026][T11091] netlink: 'syz.0.1579': attribute type 8 has an invalid length. [ 214.468066][ T26] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 214.924469][T11081] lo speed is unknown, defaulting to 1000 [ 215.068077][ T9703] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 215.252782][T11134] netlink: 'syz.1.1586': attribute type 4 has an invalid length. [ 216.254819][ T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 216.325374][T11178] __nla_validate_parse: 5 callbacks suppressed [ 216.325394][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 216.370600][T11178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1601'. [ 216.488337][T11178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.498076][T11178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.520562][T11178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.530950][T11178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.541521][T11178] geneve2: entered promiscuous mode [ 216.552116][T11178] geneve2: entered allmulticast mode [ 216.828038][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1607'. [ 216.836630][T11191] syzkaller0: entered promiscuous mode [ 216.868499][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1607'. [ 216.870991][T11191] syzkaller0: entered allmulticast mode [ 217.587935][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 217.795379][T11216] xt_CT: No such helper "pptp" [ 218.018575][T11229] sctp: [Deprecated]: syz.4.1612 (pid 11229) Use of int in maxseg socket option. [ 218.018575][T11229] Use struct sctp_assoc_value instead [ 218.059360][T11229] atomic_op ffff888030d79998 conn xmit_atomic 0000000000000000 [ 219.518053][ T5882] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec [ 219.543817][T11184] lo speed is unknown, defaulting to 1000 [ 219.550168][T11224] 8021q: VLANs not supported on ipvlan1 [ 219.844955][T11240] netlink: 'syz.4.1613': attribute type 1 has an invalid length. [ 219.855638][T11191] lo speed is unknown, defaulting to 1000 [ 219.994768][T11249] bond1: (slave gretap2): making interface the new active one [ 220.064842][T11249] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 220.131472][T11206] lo speed is unknown, defaulting to 1000 [ 220.282697][T11261] netlink: 'syz.0.1617': attribute type 21 has an invalid length. [ 220.304751][T11261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1617'. [ 220.345780][T11259] lo speed is unknown, defaulting to 1000 [ 220.488719][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 220.875813][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1621'. [ 220.903824][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1621'. [ 220.939226][T11280] team0: entered promiscuous mode [ 220.948026][T11280] team_slave_0: entered promiscuous mode [ 220.967849][T11280] team_slave_1: entered promiscuous mode [ 221.005069][T11280] team0: left promiscuous mode [ 221.015993][T11280] team_slave_0: left promiscuous mode [ 221.021983][T11280] team_slave_1: left promiscuous mode [ 221.305512][T11295] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 221.500184][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 221.735932][ T52] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 221.780024][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 222.379500][T11340] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1640'. [ 222.562874][T11345] FAULT_INJECTION: forcing a failure. [ 222.562874][T11345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.578514][T11345] CPU: 0 UID: 0 PID: 11345 Comm: syz.2.1641 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 222.578541][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.578554][T11345] Call Trace: [ 222.578561][T11345] [ 222.578569][T11345] dump_stack_lvl+0x241/0x360 [ 222.578598][T11345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.578619][T11345] ? __pfx__printk+0x10/0x10 [ 222.578640][T11345] ? __pfx_lock_release+0x10/0x10 [ 222.578685][T11345] should_fail_ex+0x40a/0x550 [ 222.578719][T11345] _copy_from_iter+0x1df/0x1c40 [ 222.578753][T11345] ? __virt_addr_valid+0x183/0x530 [ 222.578771][T11345] ? __pfx_lock_release+0x10/0x10 [ 222.578825][T11345] ? __alloc_skb+0x28f/0x440 [ 222.578846][T11345] ? __pfx__copy_from_iter+0x10/0x10 [ 222.578873][T11345] ? __virt_addr_valid+0x183/0x530 [ 222.578892][T11345] ? __virt_addr_valid+0x183/0x530 [ 222.578909][T11345] ? __virt_addr_valid+0x45f/0x530 [ 222.578930][T11345] ? __phys_addr_symbol+0x2f/0x70 [ 222.578949][T11345] ? __check_object_size+0x47a/0x730 [ 222.578982][T11345] netlink_sendmsg+0x742/0xcb0 [ 222.579025][T11345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.579061][T11345] ? aa_sock_msg_perm+0x91/0x160 [ 222.579098][T11345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.579127][T11345] __sock_sendmsg+0x221/0x270 [ 222.579160][T11345] ____sys_sendmsg+0x53a/0x860 [ 222.579193][T11345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.579215][T11345] ? __fget_files+0x2a/0x410 [ 222.579249][T11345] ? __fget_files+0x2a/0x410 [ 222.579288][T11345] __sys_sendmsg+0x269/0x350 [ 222.579317][T11345] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.579356][T11345] ? do_sys_openat2+0x17a/0x1d0 [ 222.579412][T11345] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.579446][T11345] ? do_syscall_64+0x100/0x230 [ 222.579477][T11345] ? do_syscall_64+0xb6/0x230 [ 222.579505][T11345] do_syscall_64+0xf3/0x230 [ 222.579531][T11345] ? clear_bhb_loop+0x35/0x90 [ 222.579562][T11345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.579590][T11345] RIP: 0033:0x7f03b638d169 [ 222.579607][T11345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.579625][T11345] RSP: 002b:00007f03b7178038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.579647][T11345] RAX: ffffffffffffffda RBX: 00007f03b65a5fa0 RCX: 00007f03b638d169 [ 222.579669][T11345] RDX: 0000000000000084 RSI: 00004000000000c0 RDI: 0000000000000003 [ 222.579682][T11345] RBP: 00007f03b7178090 R08: 0000000000000000 R09: 0000000000000000 [ 222.579694][T11345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.579706][T11345] R13: 0000000000000000 R14: 00007f03b65a5fa0 R15: 00007fff90502de8 [ 222.579736][T11345] [ 223.066667][ T64] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 223.159714][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 223.186214][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1645'. [ 223.321423][T11364] nbd: socks must be embedded in a SOCK_ITEM attr [ 223.644387][T11380] xt_CT: No such helper "syz1" [ 224.136779][T11402] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1656'. [ 224.206350][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1656'. [ 224.546776][ T64] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 225.603248][T11467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1676'. [ 225.676066][T11471] netlink: 'syz.4.1679': attribute type 2 has an invalid length. [ 225.700036][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 225.703974][T11473] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1680'. [ 225.740734][T11471] netlink: 'syz.4.1679': attribute type 9 has an invalid length. [ 225.783659][T11473] ip6t_srh: unknown srh match flags 5294 [ 225.827869][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 225.972780][T11481] FAULT_INJECTION: forcing a failure. [ 225.972780][T11481] name failslab, interval 1, probability 0, space 0, times 0 [ 226.018268][T11481] CPU: 0 UID: 0 PID: 11481 Comm: syz.2.1682 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 226.018298][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.018310][T11481] Call Trace: [ 226.018316][T11481] [ 226.018336][T11481] dump_stack_lvl+0x241/0x360 [ 226.018374][T11481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.018395][T11481] ? __pfx__printk+0x10/0x10 [ 226.018416][T11481] ? __kmalloc_noprof+0xb5/0x4c0 [ 226.018461][T11481] ? __pfx___might_resched+0x10/0x10 [ 226.018486][T11481] ? aa_get_newest_label+0xff/0x6f0 [ 226.018521][T11481] should_fail_ex+0x40a/0x550 [ 226.018555][T11481] should_failslab+0xac/0x100 [ 226.018583][T11481] __kmalloc_noprof+0xdd/0x4c0 [ 226.018610][T11481] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 226.018634][T11481] ? apparmor_capable+0x13b/0x1b0 [ 226.018660][T11481] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 226.018692][T11481] genl_rcv_msg+0x80b/0xec0 [ 226.018722][T11481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.018773][T11481] ? __pfx_lock_acquire+0x10/0x10 [ 226.018801][T11481] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 226.018830][T11481] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 226.018847][T11481] ? __pfx_nl80211_post_doit+0x10/0x10 [ 226.018877][T11481] ? __pfx___might_resched+0x10/0x10 [ 226.018913][T11481] netlink_rcv_skb+0x206/0x480 [ 226.018943][T11481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.018968][T11481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.019010][T11481] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 226.019054][T11481] genl_rcv+0x28/0x40 [ 226.019073][T11481] netlink_unicast+0x7f6/0x990 [ 226.019108][T11481] ? __pfx_netlink_unicast+0x10/0x10 [ 226.019132][T11481] ? __virt_addr_valid+0x45f/0x530 [ 226.019152][T11481] ? __phys_addr_symbol+0x2f/0x70 [ 226.019169][T11481] ? __check_object_size+0x47a/0x730 [ 226.019200][T11481] netlink_sendmsg+0x8de/0xcb0 [ 226.019242][T11481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.019296][T11481] ? aa_sock_msg_perm+0x91/0x160 [ 226.019334][T11481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.019370][T11481] __sock_sendmsg+0x221/0x270 [ 226.019404][T11481] ____sys_sendmsg+0x53a/0x860 [ 226.019438][T11481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.019460][T11481] ? __fget_files+0x2a/0x410 [ 226.019494][T11481] ? __fget_files+0x2a/0x410 [ 226.019535][T11481] __sys_sendmsg+0x269/0x350 [ 226.019577][T11481] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.019613][T11481] ? do_sys_openat2+0x17a/0x1d0 [ 226.019669][T11481] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.019700][T11481] ? do_syscall_64+0x100/0x230 [ 226.019740][T11481] ? do_syscall_64+0xb6/0x230 [ 226.019766][T11481] do_syscall_64+0xf3/0x230 [ 226.019789][T11481] ? clear_bhb_loop+0x35/0x90 [ 226.019818][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.019842][T11481] RIP: 0033:0x7f03b638d169 [ 226.019859][T11481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.019874][T11481] RSP: 002b:00007f03b7178038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.019894][T11481] RAX: ffffffffffffffda RBX: 00007f03b65a5fa0 RCX: 00007f03b638d169 [ 226.019907][T11481] RDX: 0000000000000084 RSI: 00004000000000c0 RDI: 0000000000000003 [ 226.019919][T11481] RBP: 00007f03b7178090 R08: 0000000000000000 R09: 0000000000000000 [ 226.019929][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.019940][T11481] R13: 0000000000000000 R14: 00007f03b65a5fa0 R15: 00007fff90502de8 [ 226.019967][T11481] [ 226.888054][T11510] __nla_validate_parse: 1 callbacks suppressed [ 226.888073][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 226.892558][T11509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1694'. [ 227.311972][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 227.347256][T11522] FAULT_INJECTION: forcing a failure. [ 227.347256][T11522] name failslab, interval 1, probability 0, space 0, times 0 [ 227.387610][T11522] CPU: 0 UID: 0 PID: 11522 Comm: syz.0.1697 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 227.387638][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.387650][T11522] Call Trace: [ 227.387656][T11522] [ 227.387664][T11522] dump_stack_lvl+0x241/0x360 [ 227.387690][T11522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.387707][T11522] ? __pfx__printk+0x10/0x10 [ 227.387731][T11522] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 227.387758][T11522] ? __pfx___might_resched+0x10/0x10 [ 227.387786][T11522] should_fail_ex+0x40a/0x550 [ 227.387818][T11522] should_failslab+0xac/0x100 [ 227.387843][T11522] kmem_cache_alloc_node_noprof+0x77/0x380 [ 227.387867][T11522] ? __alloc_skb+0x1c3/0x440 [ 227.387890][T11522] __alloc_skb+0x1c3/0x440 [ 227.387909][T11522] ? ____sys_sendmsg+0x53a/0x860 [ 227.387933][T11522] ? __pfx___alloc_skb+0x10/0x10 [ 227.387975][T11522] ? netlink_ack_tlv_len+0x6e/0x200 [ 227.388005][T11522] netlink_ack+0x145/0xa60 [ 227.388030][T11522] ? __pfx_lock_acquire+0x10/0x10 [ 227.388058][T11522] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 227.388080][T11522] ? __pfx___might_resched+0x10/0x10 [ 227.388115][T11522] netlink_rcv_skb+0x294/0x480 [ 227.388145][T11522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.388169][T11522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.388210][T11522] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 227.388273][T11522] genl_rcv+0x28/0x40 [ 227.388291][T11522] netlink_unicast+0x7f6/0x990 [ 227.388323][T11522] ? __pfx_netlink_unicast+0x10/0x10 [ 227.388345][T11522] ? __virt_addr_valid+0x45f/0x530 [ 227.388364][T11522] ? __phys_addr_symbol+0x2f/0x70 [ 227.388381][T11522] ? __check_object_size+0x47a/0x730 [ 227.388410][T11522] netlink_sendmsg+0x8de/0xcb0 [ 227.388448][T11522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.388480][T11522] ? aa_sock_msg_perm+0x91/0x160 [ 227.388514][T11522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.388540][T11522] __sock_sendmsg+0x221/0x270 [ 227.388569][T11522] ____sys_sendmsg+0x53a/0x860 [ 227.388598][T11522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.388618][T11522] ? __fget_files+0x2a/0x410 [ 227.388647][T11522] ? __fget_files+0x2a/0x410 [ 227.388680][T11522] __sys_sendmsg+0x269/0x350 [ 227.388705][T11522] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.388736][T11522] ? do_sys_openat2+0x17a/0x1d0 [ 227.388786][T11522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.388815][T11522] ? do_syscall_64+0x100/0x230 [ 227.388841][T11522] ? do_syscall_64+0xb6/0x230 [ 227.388864][T11522] do_syscall_64+0xf3/0x230 [ 227.388887][T11522] ? clear_bhb_loop+0x35/0x90 [ 227.388914][T11522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.388937][T11522] RIP: 0033:0x7f4faaf8d169 [ 227.388971][T11522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.388986][T11522] RSP: 002b:00007f4fabd55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.389024][T11522] RAX: ffffffffffffffda RBX: 00007f4fab1a5fa0 RCX: 00007f4faaf8d169 [ 227.389038][T11522] RDX: 0000000000000084 RSI: 00004000000000c0 RDI: 0000000000000003 [ 227.389050][T11522] RBP: 00007f4fabd55090 R08: 0000000000000000 R09: 0000000000000000 [ 227.389062][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.389073][T11522] R13: 0000000000000000 R14: 00007f4fab1a5fa0 R15: 00007ffd302e3108 [ 227.389102][T11522] [ 227.826653][T11529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1702'. [ 227.840235][T11530] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1699'. [ 227.849505][T11530] netlink: 'syz.1.1699': attribute type 1 has an invalid length. [ 228.221007][T11551] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1708'. [ 228.248240][T11553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1708'. [ 228.280499][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 228.475607][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1713'. [ 228.499410][T11562] x_tables: duplicate underflow at hook 1 [ 228.689080][T11568] syz.4.1716: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 228.715427][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.4.1716 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 228.715455][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.715468][T11568] Call Trace: [ 228.715474][T11568] [ 228.715482][T11568] dump_stack_lvl+0x241/0x360 [ 228.715511][T11568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.715534][T11568] ? __pfx__printk+0x10/0x10 [ 228.715557][T11568] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 228.715583][T11568] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 228.715610][T11568] warn_alloc+0x278/0x410 [ 228.715633][T11568] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 228.715652][T11568] ? __pfx_warn_alloc+0x10/0x10 [ 228.715673][T11568] ? kasan_save_track+0x3f/0x80 [ 228.715692][T11568] ? __kasan_kmalloc+0x98/0xb0 [ 228.715715][T11568] ? xsk_setsockopt+0x4aa/0x810 [ 228.715741][T11568] ? do_sock_setsockopt+0x3af/0x720 [ 228.715761][T11568] ? __x64_sys_setsockopt+0x1ee/0x280 [ 228.715780][T11568] ? do_syscall_64+0xf3/0x230 [ 228.715802][T11568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.715837][T11568] __vmalloc_node_range_noprof+0x126/0x1380 [ 228.715891][T11568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.715916][T11568] ? __kasan_kmalloc+0x98/0xb0 [ 228.715943][T11568] vmalloc_user_noprof+0x74/0x80 [ 228.715962][T11568] ? xskq_create+0xb6/0x170 [ 228.715979][T11568] xskq_create+0xb6/0x170 [ 228.716000][T11568] xsk_init_queue+0xa1/0x100 [ 228.716021][T11568] xsk_setsockopt+0x4aa/0x810 [ 228.716053][T11568] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.716082][T11568] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.716113][T11568] ? aa_sock_opt_perm+0x79/0x120 [ 228.716146][T11568] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.716174][T11568] do_sock_setsockopt+0x3af/0x720 [ 228.716201][T11568] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 228.716227][T11568] ? __fget_files+0x395/0x410 [ 228.716253][T11568] ? __fget_files+0x2a/0x410 [ 228.716287][T11568] __x64_sys_setsockopt+0x1ee/0x280 [ 228.716315][T11568] do_syscall_64+0xf3/0x230 [ 228.716338][T11568] ? clear_bhb_loop+0x35/0x90 [ 228.716367][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.716392][T11568] RIP: 0033:0x7f2e1cd8d169 [ 228.716408][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.716424][T11568] RSP: 002b:00007f2e1dc70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 228.716444][T11568] RAX: ffffffffffffffda RBX: 00007f2e1cfa5fa0 RCX: 00007f2e1cd8d169 [ 228.716458][T11568] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 228.716469][T11568] RBP: 00007f2e1ce0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 228.716480][T11568] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.716492][T11568] R13: 0000000000000000 R14: 00007f2e1cfa5fa0 R15: 00007fffcf8f9598 [ 228.716520][T11568] [ 228.716528][T11568] Mem-Info: [ 228.852325][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 228.908008][T11568] active_anon:6526 inactive_anon:0 isolated_anon:0 [ 228.908008][T11568] active_file:1640 inactive_file:38363 isolated_file:0 [ 228.908008][T11568] unevictable:768 dirty:332 writeback:0 [ 228.908008][T11568] slab_reclaimable:11128 slab_unreclaimable:104314 [ 228.908008][T11568] mapped:28661 shmem:1428 pagetables:725 [ 228.908008][T11568] sec_pagetables:0 bounce:0 [ 228.908008][T11568] kernel_misc_reclaimable:0 [ 228.908008][T11568] free:1320847 free_pcp:612 free_cma:0 [ 228.942510][T11571] vlan0: left promiscuous mode [ 228.951814][T11568] Node 0 active_anon:26104kB inactive_anon:0kB active_file:6560kB inactive_file:153376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114644kB dirty:1328kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10996kB pagetables:2900kB sec_pagetables:0kB all_unreclaimable? no [ 229.112104][T11568] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 229.153920][T11571] veth3: left promiscuous mode [ 229.184332][T11571] veth3: left allmulticast mode [ 229.189603][T11571] ip6gre1: left allmulticast mode [ 229.194979][T11571] bridge2: left promiscuous mode [ 229.200111][T11568] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.227957][T11571] bridge2: left allmulticast mode [ 229.239240][T11580] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 229.258713][T11568] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 229.273467][T11568] Node 0 DMA32 free:1366844kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:25892kB inactive_anon:0kB active_file:6560kB inactive_file:153064kB unevictable:1536kB writepending:1336kB present:3129332kB managed:2549716kB mlocked:0kB bounce:0kB free_pcp:1568kB local_pcp:668kB free_cma:0kB [ 229.323278][T11568] lowmem_reserve[]: 0 0 0 0 0 [ 229.362513][T11568] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 229.396537][T11580] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 229.465391][T11568] lowmem_reserve[]: 0 0 0 0 0 [ 229.514501][T11568] Node 1 Normal free:3902720kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:588kB local_pcp:588kB free_cma:0kB [ 229.557406][T11568] lowmem_reserve[]: 0 0 0 0 0 [ 229.612019][T11568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.639031][T11568] Node 0 DMA32: 157*4kB (ME) 329*8kB (UME) 210*16kB (ME) 779*32kB (UME) 303*64kB (UME) 114*128kB (UME) 50*256kB (UM) 50*512kB (UME) 28*1024kB (UM) 10*2048kB (UME) 296*4096kB (UM) = 1365500kB [ 229.715292][T11568] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 229.728174][T11568] Node 1 Normal: 64*4kB (UE) 40*8kB (UME) 42*16kB (UME) 199*32kB (UME) 93*64kB (UME) 32*128kB (UME) 16*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 944*4096kB (M) = 3902720kB [ 229.762528][T11568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.773006][T11568] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.782619][T11568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.792248][T11568] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.802914][T11568] 41431 total pagecache pages [ 229.807619][T11568] 0 pages in swap cache [ 229.811866][T11568] Free swap = 124996kB [ 229.816037][T11568] Total swap = 124996kB [ 229.820310][T11568] 2097051 pages RAM [ 229.824140][T11568] 0 pages HighMem/MovableOnly [ 229.829001][T11568] 427900 pages reserved [ 229.833178][T11568] 0 pages cma reserved [ 229.845962][T11606] dvmrp0: entered allmulticast mode [ 229.955663][T11611] netlink: 'syz.1.1729': attribute type 30 has an invalid length. [ 229.971461][T11608] sctp: [Deprecated]: syz.0.1728 (pid 11608) Use of int in max_burst socket option deprecated. [ 229.971461][T11608] Use struct sctp_assoc_value instead [ 230.530750][T11644] IPv6: Can't replace route, no match found [ 230.901346][ T64] syzkaller1: tun_net_xmit 86 [ 230.908117][ T978] syzkaller1: tun_net_xmit 90 [ 231.889689][T11672] veth0_to_bridge: entered promiscuous mode [ 232.008748][T11676] netlink: 'syz.4.1748': attribute type 4 has an invalid length. [ 232.372887][T11687] __nla_validate_parse: 93 callbacks suppressed [ 232.372909][T11687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1752'. [ 232.642057][T11683] lo speed is unknown, defaulting to 1000 [ 232.663990][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 232.697891][T11683] lo speed is unknown, defaulting to 1000 [ 232.697912][T11671] veth0_to_bridge: left promiscuous mode [ 232.731825][T11691] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1755'. [ 232.741261][T11691] 0·: renamed from hsr0 (while UP) [ 232.776108][T11691] 0·: entered allmulticast mode [ 232.797848][T11691] hsr_slave_0: entered allmulticast mode [ 232.820910][T11691] hsr_slave_1: entered allmulticast mode [ 232.853474][T11693] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1755'. [ 232.868598][T11691] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 232.904026][T11683] lo speed is unknown, defaulting to 1000 [ 232.921133][T11683] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 232.971801][T11683] lo speed is unknown, defaulting to 1000 [ 232.991535][T11683] lo speed is unknown, defaulting to 1000 [ 233.011226][T11683] lo speed is unknown, defaulting to 1000 [ 233.033156][T11683] lo speed is unknown, defaulting to 1000 [ 233.050153][T11683] lo speed is unknown, defaulting to 1000 [ 233.056533][T11683] lo speed is unknown, defaulting to 1000 [ 233.147608][T11683] lo speed is unknown, defaulting to 1000 [ 233.319632][T11680] netlink: 376 bytes leftover after parsing attributes in process `syz.1.1751'. [ 233.332249][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 233.657887][T11712] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 233.884540][T11727] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 234.182364][ T30] audit: type=1800 audit(1741973131.590:3): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1768" name="memory.events" dev="tmpfs" ino=1724 res=0 errno=0 [ 234.222474][ T64] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 234.235880][T11710] lo speed is unknown, defaulting to 1000 [ 234.665799][T11753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1771'. [ 234.707934][T11753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1771'. [ 234.920065][T11709] lo speed is unknown, defaulting to 1000 [ 235.349969][T11737] @ÿ: renamed from veth0_vlan [ 235.383694][T11743] lo speed is unknown, defaulting to 1000 [ 235.847488][T11767] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1776'. [ 235.921389][T11763] lo speed is unknown, defaulting to 1000 [ 236.137457][T11781] dccp_invalid_packet: P.Data Offset(10) too large [ 236.154598][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 236.223852][T11781] dccp_invalid_packet: P.Data Offset(10) too large [ 236.248380][T11781] dccp_invalid_packet: P.Data Offset(10) too large [ 236.318725][T11788] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 236.395598][T11780] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 236.414952][T11780] netlink: 'syz.2.1775': attribute type 3 has an invalid length. [ 236.426112][T11781] dccp_invalid_packet: P.Data Offset(10) too large [ 236.469147][T11781] dccp_invalid_packet: P.Data Offset(10) too large [ 236.514821][T11781] dccp_invalid_packet: P.Data Offset(10) too large [ 236.545711][T11793] x_tables: duplicate underflow at hook 1 [ 236.570171][T11781] dccp_invalid_packet: P.Data Offset(10) too large [ 236.775730][T11781] dccp_invalid_packet: P.Data Offset(10) too large [ 237.001284][T11798] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20004 [ 237.020138][T11796] x_tables: duplicate underflow at hook 1 [ 237.528255][T11821] __nla_validate_parse: 6 callbacks suppressed [ 237.528274][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 237.588005][ T5879] lo speed is unknown, defaulting to 1000 [ 237.862111][T11830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.964994][T11822] lo speed is unknown, defaulting to 1000 [ 238.032377][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 238.082725][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 238.125766][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 238.155585][T11851] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 238.178092][T11848] x_tables: duplicate underflow at hook 1 [ 238.326911][T11862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1801'. [ 238.732104][T11897] netlink: 'syz.1.1806': attribute type 5 has an invalid length. [ 239.311656][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 239.678073][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 239.684728][T11924] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1816'. [ 239.735765][T11925] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1816'. [ 239.855986][T11927] x_tables: duplicate underflow at hook 1 [ 241.531141][T11923] macvlan3: entered promiscuous mode [ 241.536465][T11923] bond0: entered promiscuous mode [ 241.563316][T11923] bond_slave_0: entered promiscuous mode [ 241.583244][T11923] bond_slave_1: entered promiscuous mode [ 241.591207][T11923] team0: entered promiscuous mode [ 241.598147][T11923] team_slave_0: entered promiscuous mode [ 241.603978][T11923] team_slave_1: entered promiscuous mode [ 241.628747][T11923] bond2: entered promiscuous mode [ 241.636227][T11923] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 241.655528][T11924] gretap0: entered promiscuous mode [ 241.663574][T11925] 0ªX¹¦D: renamed from gretap0 [ 241.676691][T11925] 0ªX¹¦D: left promiscuous mode [ 241.681896][T11925] 0ªX¹¦D: entered allmulticast mode [ 241.696482][T11925] net_ratelimit: 25 callbacks suppressed [ 241.696578][T11925] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 241.890664][T11943] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1821'. [ 241.915732][T11946] xt_hashlimit: max too large, truncated to 1048576 [ 242.134935][T11941] lo speed is unknown, defaulting to 1000 [ 242.280526][T11963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.469820][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 242.479301][T11965] x_tables: duplicate underflow at hook 1 [ 243.106861][T11978] lo speed is unknown, defaulting to 1000 [ 243.116888][T11995] __nla_validate_parse: 1 callbacks suppressed [ 243.116905][T11995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1838'. [ 243.132684][T11995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1838'. [ 243.215035][T11997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1839'. [ 243.286017][T12000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1840'. [ 243.573278][T12003] lo speed is unknown, defaulting to 1000 [ 244.179681][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 244.242897][ T5833] Bluetooth: hci4: link tx timeout [ 244.248553][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.296437][T12007] lo speed is unknown, defaulting to 1000 [ 244.396273][T12008] lo speed is unknown, defaulting to 1000 [ 244.417313][T12025] bond0: left promiscuous mode [ 244.439785][T12025] bond_slave_0: left promiscuous mode [ 244.456159][T12025] bond_slave_1: left promiscuous mode [ 244.478819][T12025] team0: left promiscuous mode [ 244.493104][T12025] team_slave_0: left promiscuous mode [ 244.502830][T12025] team_slave_1: left promiscuous mode [ 244.511246][T12025] bond2: left promiscuous mode [ 244.964444][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 245.106776][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 245.121512][T12035] netlink: 'syz.4.1851': attribute type 4 has an invalid length. [ 245.210999][T12040] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 245.279921][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.297592][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.305935][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.314568][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.323125][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.331241][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.463489][T12048] FAULT_INJECTION: forcing a failure. [ 245.463489][T12048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.498058][T12048] CPU: 1 UID: 0 PID: 12048 Comm: syz.4.1854 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 245.498083][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.498094][T12048] Call Trace: [ 245.498100][T12048] [ 245.498107][T12048] dump_stack_lvl+0x241/0x360 [ 245.498144][T12048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.498164][T12048] ? __pfx__printk+0x10/0x10 [ 245.498184][T12048] ? __pfx_lock_release+0x10/0x10 [ 245.498218][T12048] should_fail_ex+0x40a/0x550 [ 245.498249][T12048] _copy_from_user+0x2d/0xb0 [ 245.498274][T12048] copy_msghdr_from_user+0xae/0x680 [ 245.498305][T12048] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 245.498328][T12048] ? __fget_files+0x2a/0x410 [ 245.498355][T12048] ? __fget_files+0x2a/0x410 [ 245.498388][T12048] __sys_sendmsg+0x209/0x350 [ 245.498414][T12048] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.498446][T12048] ? do_sys_openat2+0x17a/0x1d0 [ 245.498496][T12048] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.498524][T12048] ? do_syscall_64+0x100/0x230 [ 245.498550][T12048] ? do_syscall_64+0xb6/0x230 [ 245.498576][T12048] do_syscall_64+0xf3/0x230 [ 245.498606][T12048] ? clear_bhb_loop+0x35/0x90 [ 245.498634][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.498657][T12048] RIP: 0033:0x7f2e1cd8d169 [ 245.498678][T12048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.498693][T12048] RSP: 002b:00007f2e1dc4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.498719][T12048] RAX: ffffffffffffffda RBX: 00007f2e1cfa6080 RCX: 00007f2e1cd8d169 [ 245.498732][T12048] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000009 [ 245.498743][T12048] RBP: 00007f2e1dc4f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.498754][T12048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.498764][T12048] R13: 0000000000000000 R14: 00007f2e1cfa6080 R15: 00007fffcf8f9598 [ 245.498791][T12048] [ 245.501882][T12047] x_tables: duplicate underflow at hook 1 [ 245.791592][T12041] lo speed is unknown, defaulting to 1000 [ 246.082041][T12041] chnl_net:caif_netlink_parms(): no params data found [ 246.139630][T12045] lo speed is unknown, defaulting to 1000 [ 246.245083][T12070] netlink: 'syz.2.1860': attribute type 8 has an invalid length. [ 246.315681][T12078] netlink: 'syz.3.1858': attribute type 10 has an invalid length. [ 246.325784][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 246.411603][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1858'. [ 246.454805][T12041] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.472335][T12041] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.496599][T12041] bridge_slave_0: entered allmulticast mode [ 246.551391][T12041] bridge_slave_0: entered promiscuous mode [ 246.581925][T12073] lo speed is unknown, defaulting to 1000 [ 246.583939][T12041] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.613410][T12041] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.623950][T12041] bridge_slave_1: entered allmulticast mode [ 246.637878][T12041] bridge_slave_1: entered promiscuous mode [ 246.698707][T12089] x_tables: duplicate underflow at hook 1 [ 246.700775][T12041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.796795][T12041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.911509][T12041] team0: Port device team_slave_0 added [ 246.917909][T12091] lo speed is unknown, defaulting to 1000 [ 246.939505][T12041] team0: Port device team_slave_1 added [ 247.036320][T12097] x_tables: duplicate underflow at hook 1 [ 247.098361][T12041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.105438][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.164735][T12041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.331718][T12041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.346085][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.372147][ T5833] Bluetooth: hci3: command tx timeout [ 247.411262][T12041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.427659][T12109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1870'. [ 247.565938][T12041] hsr_slave_0: entered promiscuous mode [ 247.577062][T12041] hsr_slave_1: entered promiscuous mode [ 247.595800][T12041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.607472][T12041] Cannot create hsr debugfs directory [ 247.631885][T12117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'. [ 248.061490][T12129] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 248.085557][T12129] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 248.140621][T12136] netlink: 'syz.4.1877': attribute type 1 has an invalid length. [ 248.253511][T12041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.296756][T12041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.348918][T12041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.351396][T12146] FAULT_INJECTION: forcing a failure. [ 248.351396][T12146] name failslab, interval 1, probability 0, space 0, times 0 [ 248.368699][T12146] CPU: 0 UID: 0 PID: 12146 Comm: syz.2.1878 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 248.368726][T12146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.368739][T12146] Call Trace: [ 248.368746][T12146] [ 248.368754][T12146] dump_stack_lvl+0x241/0x360 [ 248.368784][T12146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.368808][T12146] ? __pfx__printk+0x10/0x10 [ 248.368832][T12146] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 248.368864][T12146] ? __pfx___might_resched+0x10/0x10 [ 248.368897][T12146] should_fail_ex+0x40a/0x550 [ 248.368933][T12146] should_failslab+0xac/0x100 [ 248.368963][T12146] kmem_cache_alloc_node_noprof+0x77/0x380 [ 248.368992][T12146] ? __alloc_skb+0x1c3/0x440 [ 248.369018][T12146] __alloc_skb+0x1c3/0x440 [ 248.369045][T12146] ? __pfx___alloc_skb+0x10/0x10 [ 248.369069][T12146] ? netlink_autobind+0xd6/0x2f0 [ 248.369087][T12146] ? netlink_autobind+0x2b0/0x2f0 [ 248.369112][T12146] netlink_sendmsg+0x634/0xcb0 [ 248.369164][T12146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.369200][T12146] ? aa_sock_msg_perm+0x91/0x160 [ 248.369238][T12146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.369268][T12146] __sock_sendmsg+0x221/0x270 [ 248.369301][T12146] ____sys_sendmsg+0x53a/0x860 [ 248.369335][T12146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.369357][T12146] ? __fget_files+0x2a/0x410 [ 248.369393][T12146] ? __fget_files+0x2a/0x410 [ 248.369432][T12146] __sys_sendmsg+0x269/0x350 [ 248.369463][T12146] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.369501][T12146] ? do_sys_openat2+0x17a/0x1d0 [ 248.369560][T12146] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.369593][T12146] ? do_syscall_64+0x100/0x230 [ 248.369618][T12146] ? do_syscall_64+0xb6/0x230 [ 248.369646][T12146] do_syscall_64+0xf3/0x230 [ 248.369672][T12146] ? clear_bhb_loop+0x35/0x90 [ 248.369705][T12146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.369733][T12146] RIP: 0033:0x7f03b638d169 [ 248.369751][T12146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.369769][T12146] RSP: 002b:00007f03b7157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.369791][T12146] RAX: ffffffffffffffda RBX: 00007f03b65a6080 RCX: 00007f03b638d169 [ 248.369806][T12146] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000009 [ 248.369819][T12146] RBP: 00007f03b7157090 R08: 0000000000000000 R09: 0000000000000000 [ 248.369832][T12146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.369844][T12146] R13: 0000000000000000 R14: 00007f03b65a6080 R15: 00007fff90502de8 [ 248.369874][T12146] [ 248.398543][T12041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.438068][T12138] __nla_validate_parse: 1 callbacks suppressed [ 248.438091][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1877'. [ 248.762265][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 248.788900][T12150] macvlan2: entered promiscuous mode [ 248.794621][T12140] lo speed is unknown, defaulting to 1000 [ 248.806288][T12150] bond0: entered promiscuous mode [ 248.824012][T12150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 248.870100][T12150] x_tables: duplicate underflow at hook 1 [ 249.132065][T12041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.241338][T12041] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.315364][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.322553][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.398461][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.405703][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.428943][ T5833] Bluetooth: hci3: command tx timeout [ 249.532323][T12041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.994040][T12041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.107372][T12041] veth0_vlan: entered promiscuous mode [ 250.134065][T12041] veth1_vlan: entered promiscuous mode [ 250.216641][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'. [ 250.281203][T12192] netlink: 'syz.1.1891': attribute type 4 has an invalid length. [ 250.339658][T12041] veth0_macvtap: entered promiscuous mode [ 250.360669][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1890'. [ 250.373086][T12041] veth1_macvtap: entered promiscuous mode [ 250.409110][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1890'. [ 250.426080][T12041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.480651][T12041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.501870][T12041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.513988][T12041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.518866][T12205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1894'. [ 250.524394][T12041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.543222][T12041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.760421][T12191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.797945][T12191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.843445][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.862426][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.922912][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 250.950237][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 251.043890][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 251.240816][T12225] lo speed is unknown, defaulting to 1000 [ 251.543365][T12185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.859110][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1901'. [ 251.945834][T12185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.173148][T12233] syzkaller0: entered promiscuous mode [ 252.180409][T12233] syzkaller0: entered allmulticast mode [ 252.336064][T12185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.437354][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.449992][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.461847][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.474631][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.483764][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 252.492665][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.311270][T12185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.334312][T12252] IPv6: syztnl1: Disabled Multicast RS [ 254.436761][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 254.519632][T12263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.547946][ T54] Bluetooth: hci3: command tx timeout [ 254.625090][T12268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.652530][T12268] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 254.686417][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'. [ 254.714857][T12268] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 254.783483][T12247] lo speed is unknown, defaulting to 1000 [ 254.821642][T12282] x_tables: duplicate underflow at hook 1 [ 255.028311][T12185] bridge_slave_1: left allmulticast mode [ 255.045107][T12185] bridge_slave_1: left promiscuous mode [ 255.078064][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.117139][T12185] bridge_slave_0: left allmulticast mode [ 255.127887][T12185] bridge_slave_0: left promiscuous mode [ 255.139230][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.565229][T12185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.577416][T12185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.589419][T12185] bond0 (unregistering): Released all slaves [ 255.836407][T12310] wg1: entered promiscuous mode [ 255.848672][T12310] wg1: entered allmulticast mode [ 255.911031][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.946775][ T9703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.012384][ T9703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.445661][T12337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1924'. [ 256.487944][T12337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1924'. [ 256.503617][T12247] chnl_net:caif_netlink_parms(): no params data found [ 256.640997][ T54] Bluetooth: hci3: command tx timeout [ 256.665644][T12185] hsr_slave_0: left promiscuous mode [ 256.697909][T12185] hsr_slave_1: left promiscuous mode [ 256.708563][T12185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.716077][T12185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.763652][T12185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.789835][T12185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.802387][ T26] hid (null): unknown global tag 0xe [ 256.808515][ T26] hid (null): unknown global tag 0xc [ 256.813876][ T26] hid (null): unknown global tag 0xd [ 256.845226][ T26] hid (null): unknown global tag 0xd [ 256.854442][ T26] hid (null): report_id 46516 is invalid [ 256.882821][T12185] veth1_macvtap: left promiscuous mode [ 256.891739][ T26] hid (null): global environment stack underflow [ 256.898197][T12185] veth0_macvtap: left promiscuous mode [ 256.898397][T12185] veth1_vlan: left promiscuous mode [ 256.919697][T12185] veth0_vlan: left promiscuous mode [ 256.940836][ T26] hid (null): unknown global tag 0xe [ 256.955216][ T26] hid (null): unknown global tag 0xc [ 256.967600][ T26] hid (null): report_id 20188 is invalid [ 256.979460][ T26] hid (null): global environment stack underflow [ 256.989568][T12359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1930'. [ 256.998262][ T26] hid-generic 0005:046D:0A0E.0003: unknown global tag 0xe [ 257.016236][ T26] hid-generic 0005:046D:0A0E.0003: item 0 2 1 14 parsing failed [ 257.025919][ T26] hid-generic 0005:046D:0A0E.0003: probe with driver hid-generic failed with error -22 [ 257.419367][T12185] team0 (unregistering): Port device team_slave_1 removed [ 257.461831][T12185] team0 (unregistering): Port device team_slave_0 removed [ 257.852702][T12332] lo speed is unknown, defaulting to 1000 [ 257.967569][T12367] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1932'. [ 258.021991][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 258.274672][T12247] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.292465][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.340906][T12247] bridge_slave_0: entered allmulticast mode [ 258.354821][T12247] bridge_slave_0: entered promiscuous mode [ 258.389885][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.417436][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.454473][T12247] bridge_slave_1: entered allmulticast mode [ 258.464270][T12387] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1937'. [ 258.492804][T12247] bridge_slave_1: entered promiscuous mode [ 258.661930][T12247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.688587][T12247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.708132][ T54] Bluetooth: hci3: command tx timeout [ 258.784564][T12247] team0: Port device team_slave_0 added [ 258.815837][T12247] team0: Port device team_slave_1 added [ 258.962393][T12247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.973976][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.008950][T12247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.087373][T12184] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 259.108343][T12247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.156109][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.200729][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.429948][T12247] hsr_slave_0: entered promiscuous mode [ 259.446654][T12247] hsr_slave_1: entered promiscuous mode [ 259.453132][T12247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.467894][T12247] Cannot create hsr debugfs directory [ 259.474718][T12422] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1950'. [ 259.504362][T12422] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1950'. [ 259.669402][T12428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1951'. [ 259.679039][T12428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1951'. [ 260.108148][T12418] lo speed is unknown, defaulting to 1000 [ 260.751890][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 260.773167][T12247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.797149][ T54] Bluetooth: hci3: command tx timeout [ 260.802195][T12434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1953'. [ 260.841227][T12247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.871330][T12247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.900959][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 260.911012][T12247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.269009][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.294961][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.317071][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.324310][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.389571][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.396779][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.405072][T12452] openvswitch: netlink: Tunnel attr 244 out of range max 16 [ 261.711165][T12462] xt_HMARK: proto mask must be zero with L3 mode [ 261.735179][T12184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.749927][T12447] lo speed is unknown, defaulting to 1000 [ 261.752755][T12184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.845075][T12470] netlink: 'syz.4.1964': attribute type 2 has an invalid length. [ 262.071130][T12247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.223700][T12247] veth0_vlan: entered promiscuous mode [ 262.231968][T12480] netlink: 'syz.4.1967': attribute type 11 has an invalid length. [ 262.259456][T12480] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1967'. [ 262.277081][T12479] netlink: 'syz.4.1967': attribute type 11 has an invalid length. [ 262.299632][T12247] veth1_vlan: entered promiscuous mode [ 262.347520][T12479] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1967'. [ 262.403590][T12247] veth0_macvtap: entered promiscuous mode [ 262.451384][T12247] veth1_macvtap: entered promiscuous mode [ 262.501907][T12247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.540986][T12487] vcan0: entered allmulticast mode [ 262.554326][T12247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.574100][T12247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.584628][T12247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.593826][T12247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.604622][T12247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.744200][T12497] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 262.781639][T12185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.790317][T12185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.868040][ T54] Bluetooth: hci3: command tx timeout [ 262.884720][T12185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.907350][T12185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.095710][T12509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.106134][T12510] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1978'. [ 263.636834][T12531] lo speed is unknown, defaulting to 1000 [ 263.922137][T12554] macvlan4: entered promiscuous mode [ 263.939392][T12554] bond0: entered promiscuous mode [ 263.944836][T12554] bond_slave_0: entered promiscuous mode [ 263.951387][T12554] bond_slave_1: entered promiscuous mode [ 263.958505][T12554] team0: entered promiscuous mode [ 263.985419][T12554] team_slave_0: entered promiscuous mode [ 264.001980][T12554] team_slave_1: entered promiscuous mode [ 264.024505][T12554] bond2: entered promiscuous mode [ 264.045557][T12562] x_tables: duplicate underflow at hook 1 [ 264.058509][T12558] macvlan3: entered promiscuous mode [ 264.063943][T12558] bond0: entered promiscuous mode [ 264.074459][T12558] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 264.098849][T12185] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 264.114600][T12556] x_tables: duplicate underflow at hook 1 [ 264.608281][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.715574][T12584] netlink: 'syz.4.2003': attribute type 4 has an invalid length. [ 264.725725][T12584] __nla_validate_parse: 11 callbacks suppressed [ 264.725745][T12584] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2003'. [ 264.737528][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'. [ 265.356817][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 265.371384][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 265.380470][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 265.391298][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 265.410233][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 265.417576][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.499448][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.554440][T12188] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 265.696302][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.819879][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.852516][T12654] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2011'. [ 266.007522][ T64] bridge_slave_1: left allmulticast mode [ 266.029907][ T64] bridge_slave_1: left promiscuous mode [ 266.035713][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.068877][ T64] bridge_slave_0: left allmulticast mode [ 266.074770][ T64] bridge_slave_0: left promiscuous mode [ 266.090676][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.594634][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.608291][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.625607][ T64] bond0 (unregistering): Released all slaves [ 266.663525][T12639] lo speed is unknown, defaulting to 1000 [ 266.957213][T12687] tun0: tun_chr_ioctl cmd 1074025677 [ 266.978197][T12687] tun0: linktype set to 769 [ 267.116270][T12189] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 267.148745][T12697] netlink: 'syz.3.2023': attribute type 2 has an invalid length. [ 267.213004][T12639] chnl_net:caif_netlink_parms(): no params data found [ 267.263258][T12699] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 267.359881][ T64] hsr_slave_0: left promiscuous mode [ 267.374445][ T64] hsr_slave_1: left promiscuous mode [ 267.384982][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.400419][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.420492][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.436577][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.489146][ T64] veth1_macvtap: left promiscuous mode [ 267.494768][ T64] veth0_macvtap: left promiscuous mode [ 267.506637][ T64] veth1_vlan: left promiscuous mode [ 267.518232][ T5833] Bluetooth: hci3: command tx timeout [ 267.526764][ T64] veth0_vlan: left promiscuous mode [ 268.207354][ T64] team0 (unregistering): Port device team_slave_1 removed [ 268.249552][ T64] team0 (unregistering): Port device team_slave_0 removed [ 268.841820][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 268.928640][T12639] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.937594][T12639] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.946505][T12749] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2038'. [ 268.948273][T12639] bridge_slave_0: entered allmulticast mode [ 268.962974][T12639] bridge_slave_0: entered promiscuous mode [ 268.981927][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 269.000493][T12186] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 269.064294][T12753] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 269.416308][T12639] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.437126][T12765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2045'. [ 269.457898][T12639] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.465143][T12639] bridge_slave_1: entered allmulticast mode [ 269.484050][T12639] bridge_slave_1: entered promiscuous mode [ 269.486347][T12765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2045'. [ 269.535225][T12767] xt_l2tp: unknown flags: 10 [ 269.587990][ T5833] Bluetooth: hci3: command 0x041b tx timeout [ 269.626324][T12639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.666148][T12639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.904127][T12639] team0: Port device team_slave_0 added [ 269.921188][T12639] team0: Port device team_slave_1 added [ 269.944859][T12773] bridge_slave_0: left allmulticast mode [ 269.968221][T12773] bridge_slave_0: left promiscuous mode [ 269.974061][T12773] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.984940][T12773] bridge_slave_1: left allmulticast mode [ 269.999398][T12773] bridge_slave_1: left promiscuous mode [ 270.014117][T12773] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.027312][T12784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2050'. [ 270.037263][T12784] openvswitch: netlink: Flow key attr not present in new flow. [ 270.048071][T12773] team_slave_0: left promiscuous mode [ 270.072228][T12773] team0: Port device team_slave_0 removed [ 270.092447][T12773] team_slave_1: left promiscuous mode [ 270.100907][T12773] team0: Port device team_slave_1 removed [ 270.107509][T12773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.116603][T12773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.129878][T12773] bond1: (slave gretap2): Releasing active interface [ 270.215553][T12639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.229443][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.267418][T12639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.294216][T12639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.311804][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.346377][T12639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.416702][T12639] hsr_slave_0: entered promiscuous mode [ 270.442602][T12797] netlink: zone id is out of range [ 270.445839][T12639] hsr_slave_1: entered promiscuous mode [ 270.448152][T12797] netlink: zone id is out of range [ 270.458908][T12797] netlink: zone id is out of range [ 270.462375][T12639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.464648][T12797] netlink: zone id is out of range [ 270.487783][T12639] Cannot create hsr debugfs directory [ 270.576233][T12797] netlink: set zone limit has 4 unknown bytes [ 270.915623][ T52] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 270.961720][T12807] netlink: 'syz.3.2058': attribute type 10 has an invalid length. [ 270.971753][T12809] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2059'. [ 270.980926][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2059'. [ 271.000232][T12807] syz_tun: entered promiscuous mode [ 271.006208][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'. [ 271.016354][T12809] x_tables: duplicate underflow at hook 1 [ 271.318712][T12819] x_tables: duplicate underflow at hook 1 [ 271.491807][T12639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.508829][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'. [ 271.525130][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2062'. [ 271.552313][T12639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.588531][T12639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.615620][T12639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.639640][T12827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2063'. [ 271.650571][T12825] netlink: 'syz.2.2062': attribute type 7 has an invalid length. [ 271.666578][T12827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2063'. [ 271.676078][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 271.744802][T12827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2063'. [ 271.817983][T12827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2063'. [ 271.935509][T12824] lo speed is unknown, defaulting to 1000 [ 272.073317][T12639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.116266][T12639] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.335752][T12191] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.342960][T12191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.558362][T12841] bond0: left promiscuous mode [ 272.592299][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.599532][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.691595][T12845] gretap2: entered promiscuous mode [ 272.705062][T12848] 0ªX¹¦D: left allmulticast mode [ 272.836396][T12848] syz_tun: left promiscuous mode [ 272.858462][T12848] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.887411][T12848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.914243][T12854] Bluetooth: MGMT ver 1.23 [ 273.039279][T12858] bridge_slave_1: entered promiscuous mode [ 273.274387][T12858] bridge_slave_1 (unregistering): left promiscuous mode [ 273.366912][T12194] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 273.549509][T12639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.662902][T12882] netlink: 'syz.3.2081': attribute type 1 has an invalid length. [ 273.689599][T12878] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.698015][T12639] veth0_vlan: entered promiscuous mode [ 273.703191][T12639] veth1_vlan: entered promiscuous mode [ 273.748083][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 273.805440][T12639] veth0_macvtap: entered promiscuous mode [ 273.815107][T12639] veth1_macvtap: entered promiscuous mode [ 273.828315][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.834220][T12639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.849037][T12639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.861837][T12639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.871208][T12639] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.880825][T12639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.889920][T12639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.012447][T12894] FAULT_INJECTION: forcing a failure. [ 274.012447][T12894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.041906][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz.2.2084 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 274.041937][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.041950][T12894] Call Trace: [ 274.041957][T12894] [ 274.041966][T12894] dump_stack_lvl+0x241/0x360 [ 274.041997][T12894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.042031][T12894] ? __pfx__printk+0x10/0x10 [ 274.042054][T12894] ? __pfx_lock_release+0x10/0x10 [ 274.042095][T12894] should_fail_ex+0x40a/0x550 [ 274.042131][T12894] _copy_from_user+0x2d/0xb0 [ 274.042161][T12894] __sys_bpf+0x1be/0x820 [ 274.042191][T12894] ? __pfx___sys_bpf+0x10/0x10 [ 274.042234][T12894] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.042267][T12894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.042299][T12894] ? do_syscall_64+0x100/0x230 [ 274.042331][T12894] __x64_sys_bpf+0x7c/0x90 [ 274.042357][T12894] do_syscall_64+0xf3/0x230 [ 274.042383][T12894] ? clear_bhb_loop+0x35/0x90 [ 274.042415][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.042442][T12894] RIP: 0033:0x7f03b638d169 [ 274.042460][T12894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.042477][T12894] RSP: 002b:00007f03b7178038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.042498][T12894] RAX: ffffffffffffffda RBX: 00007f03b65a5fa0 RCX: 00007f03b638d169 [ 274.042513][T12894] RDX: 0000000000000020 RSI: 00004000000000c0 RDI: 0000000000000002 [ 274.042526][T12894] RBP: 00007f03b7178090 R08: 0000000000000000 R09: 0000000000000000 [ 274.042538][T12894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.042550][T12894] R13: 0000000000000000 R14: 00007f03b65a5fa0 R15: 00007fff90502de8 [ 274.042580][T12894] [ 274.065457][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.235958][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.279430][T12899] x_tables: unsorted entry at hook 1 [ 274.408507][T12189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.422240][T12189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.782221][T12921] dummy0: Device is already in use. [ 274.812608][T12186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.830878][T12186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.263339][T12946] tipc: Can't bind to reserved service type 2 [ 275.571473][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.770253][T12960] lo speed is unknown, defaulting to 1000 [ 275.804905][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.069462][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.125909][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.222270][ T64] bridge_slave_1: left allmulticast mode [ 276.228303][ T64] bridge_slave_1: left promiscuous mode [ 276.234027][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.243585][ T64] bridge_slave_0: left allmulticast mode [ 276.267761][ T64] bridge_slave_0: left promiscuous mode [ 276.273530][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.429918][T12972] __nla_validate_parse: 8 callbacks suppressed [ 276.429938][T12972] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2105'. [ 276.890943][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.900666][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.909558][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.926220][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.933965][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.941374][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.034725][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.049190][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.060281][ T64] bond0 (unregistering): Released all slaves [ 277.093141][T12972] 0ªX¹¦D: entered promiscuous mode [ 277.379312][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 277.550574][T13007] wg1: left promiscuous mode [ 277.565693][T13007] wg1: left allmulticast mode [ 277.590037][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 277.600268][T13007] wg2: left promiscuous mode [ 277.618198][T13007] wg2: left allmulticast mode [ 277.650439][T13024] x_tables: duplicate underflow at hook 1 [ 277.677684][T13007] ip6gretap1: left promiscuous mode [ 277.683656][T13007] ip6gretap1: left allmulticast mode [ 277.708019][T13007] macvlan2: left promiscuous mode [ 277.713217][T13007] macvlan2: left allmulticast mode [ 277.724946][T13007] bridge2: left allmulticast mode [ 277.754882][T12995] lo speed is unknown, defaulting to 1000 [ 277.853255][T13013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.873694][T13013] bond3: entered promiscuous mode [ 277.880318][T13013] bond0: (slave bond3): Enslaving as an active interface with an up link [ 278.139027][T13033] netlink: 'syz.4.2114': attribute type 1 has an invalid length. [ 278.376204][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'. [ 278.622983][T12995] chnl_net:caif_netlink_parms(): no params data found [ 278.644257][T13000] lo speed is unknown, defaulting to 1000 [ 278.651354][ T5904] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 278.728024][ T64] hsr_slave_0: left promiscuous mode [ 278.735893][ T64] hsr_slave_1: left promiscuous mode [ 278.748273][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.760808][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.778509][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.785941][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.812524][T13053] syz.4.2120 uses old SIOCAX25GETINFO [ 278.886347][ T64] veth1_macvtap: left promiscuous mode [ 278.892489][ T64] veth0_macvtap: left promiscuous mode [ 278.898713][ T64] veth1_vlan: left promiscuous mode [ 278.908502][ T64] veth0_vlan: left promiscuous mode [ 278.922466][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2122'. [ 278.983603][T13053] xt_bpf: check failed: parse error [ 279.028951][ T54] Bluetooth: hci3: command tx timeout [ 279.531394][ T64] team0 (unregistering): Port device team_slave_1 removed [ 279.577829][ T64] team0 (unregistering): Port device team_slave_0 removed [ 280.412794][T12995] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.434871][T12995] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.475755][T12995] bridge_slave_0: entered allmulticast mode [ 280.491017][T12995] bridge_slave_0: entered promiscuous mode [ 280.535371][T12995] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.554416][T12995] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.561950][T12995] bridge_slave_1: entered allmulticast mode [ 280.609956][T12995] bridge_slave_1: entered promiscuous mode [ 280.756614][T12186] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 280.801484][T12995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.819499][T12995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.962800][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 281.002381][T12995] team0: Port device team_slave_0 added [ 281.052935][T12995] team0: Port device team_slave_1 added [ 281.117781][ T54] Bluetooth: hci3: command tx timeout [ 281.337399][T12995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.347547][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.433003][T12995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.467137][T13110] macsec1: entered allmulticast mode [ 281.472766][T13110] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 281.484372][T13106] lo speed is unknown, defaulting to 1000 [ 281.535696][T12995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.551221][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.649417][T12995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.771283][T12995] hsr_slave_0: entered promiscuous mode [ 281.777544][T12995] hsr_slave_1: entered promiscuous mode [ 281.784674][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 281.790769][T12995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.802586][T12995] Cannot create hsr debugfs directory [ 282.108441][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 282.119460][T13138] x_tables: duplicate underflow at hook 1 [ 282.291241][T13145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2145'. [ 282.407852][T13137] lo speed is unknown, defaulting to 1000 [ 283.055386][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 283.134109][T13160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2150'. [ 283.161900][T13160] nbd: socks must be embedded in a SOCK_ITEM attr [ 283.176944][T13155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.198177][ T5833] Bluetooth: hci3: command tx timeout [ 283.346361][T13162] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2152'. [ 283.885985][T12995] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.909197][T13176] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2155'. [ 283.929476][T12995] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.940247][T13176] openvswitch: netlink: Message has 8 unknown bytes. [ 283.960564][T12995] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.005124][T12995] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.042823][T13172] lo speed is unknown, defaulting to 1000 [ 284.230601][T12995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.248593][T12995] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.263308][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.270571][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.349715][T13183] FAULT_INJECTION: forcing a failure. [ 284.349715][T13183] name failslab, interval 1, probability 0, space 0, times 0 [ 284.370180][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.377336][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.435185][T13183] CPU: 1 UID: 0 PID: 13183 Comm: syz.1.2158 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 284.435217][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.435230][T13183] Call Trace: [ 284.435237][T13183] [ 284.435246][T13183] dump_stack_lvl+0x241/0x360 [ 284.435277][T13183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.435301][T13183] ? __pfx__printk+0x10/0x10 [ 284.435324][T13183] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 284.435367][T13183] ? __pfx___might_resched+0x10/0x10 [ 284.435397][T13183] should_fail_ex+0x40a/0x550 [ 284.435433][T13183] should_failslab+0xac/0x100 [ 284.435477][T13183] __kmalloc_node_noprof+0xe1/0x4d0 [ 284.435503][T13183] ? __kvmalloc_node_noprof+0x72/0x190 [ 284.435538][T13183] __kvmalloc_node_noprof+0x72/0x190 [ 284.435570][T13183] bpf_test_run_xdp_live+0x290/0x2220 [ 284.435600][T13183] ? __pfx_lock_release+0x10/0x10 [ 284.435634][T13183] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 284.435657][T13183] ? __pfx___might_resched+0x10/0x10 [ 284.435686][T13183] ? __mutex_unlock_slowpath+0x227/0x800 [ 284.435720][T13183] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 284.435746][T13183] ? synchronize_rcu+0x11b/0x360 [ 284.435769][T13183] ? __pfx_synchronize_rcu+0x10/0x10 [ 284.435812][T13183] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 284.435840][T13183] ? 0xffffffffa0000950 [ 284.435894][T13183] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 284.435944][T13183] ? _copy_from_user+0x95/0xb0 [ 284.435973][T13183] ? bpf_test_init+0x137/0x160 [ 284.436000][T13183] ? xdp_convert_md_to_buff+0x5b/0x330 [ 284.436045][T13183] bpf_prog_test_run_xdp+0x805/0x11e0 [ 284.436079][T13183] ? __pfx_lock_release+0x10/0x10 [ 284.436123][T13183] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 284.436153][T13183] ? __fget_files+0x2a/0x410 [ 284.436190][T13183] ? __fget_files+0x2a/0x410 [ 284.436222][T13183] ? fput+0x21b/0x290 [ 284.436247][T13183] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 284.436277][T13183] bpf_prog_test_run+0x2e4/0x360 [ 284.436310][T13183] __sys_bpf+0x487/0x820 [ 284.436338][T13183] ? __pfx___sys_bpf+0x10/0x10 [ 284.436378][T13183] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 284.436410][T13183] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 284.436440][T13183] ? do_syscall_64+0x100/0x230 [ 284.436470][T13183] __x64_sys_bpf+0x7c/0x90 [ 284.436496][T13183] do_syscall_64+0xf3/0x230 [ 284.436520][T13183] ? clear_bhb_loop+0x35/0x90 [ 284.436549][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.436575][T13183] RIP: 0033:0x7f0ced78d169 [ 284.436590][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.436607][T13183] RSP: 002b:00007f0cee6c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.436627][T13183] RAX: ffffffffffffffda RBX: 00007f0ced9a5fa0 RCX: 00007f0ced78d169 [ 284.436641][T13183] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 284.436653][T13183] RBP: 00007f0cee6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 284.436665][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.436676][T13183] R13: 0000000000000000 R14: 00007f0ced9a5fa0 R15: 00007ffe76905f28 [ 284.436705][T13183] [ 284.767346][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 284.887287][T12995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.928094][T12995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.022821][T13185] x_tables: duplicate underflow at hook 1 [ 285.111577][T13195] macvlan3: entered promiscuous mode [ 285.157961][T13195] bond0: entered promiscuous mode [ 285.278364][ T5833] Bluetooth: hci3: command 0x0419 tx timeout [ 285.566704][T13222] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2168'. [ 285.740864][T13233] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2173'. [ 285.824801][T12995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.945130][T12995] veth0_vlan: entered promiscuous mode [ 285.979324][T12995] veth1_vlan: entered promiscuous mode [ 286.727371][T13243] lo speed is unknown, defaulting to 1000 [ 286.838179][T13264] syzkaller1: entered promiscuous mode [ 286.843948][T13264] syzkaller1: entered allmulticast mode [ 286.914589][T13265] __nla_validate_parse: 2 callbacks suppressed [ 286.914607][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 286.946263][T12995] veth0_macvtap: entered promiscuous mode [ 287.128387][T13271] x_tables: duplicate underflow at hook 1 [ 287.167618][T13265] macvlan4: entered promiscuous mode [ 287.262314][T13254] lo speed is unknown, defaulting to 1000 [ 287.276650][T12995] veth1_macvtap: entered promiscuous mode [ 287.348291][ T54] Bluetooth: hci3: command 0x0419 tx timeout [ 287.389960][T12995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.468988][T12995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.516917][T12995] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.536350][T13277] IPVS: set_ctl: invalid protocol: 29 172.30.0.4:20003 [ 287.536463][T12995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.578435][T12995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.588976][T12995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.897616][T12188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.924720][T12188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.943450][T13279] lo speed is unknown, defaulting to 1000 [ 287.996626][T12186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.020203][T12186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.598120][T13306] syzkaller1: left promiscuous mode [ 288.603384][T13306] syzkaller1: left allmulticast mode [ 288.691680][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 288.748991][T13312] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 288.847042][T13316] netlink: 'syz.1.2191': attribute type 10 has an invalid length. [ 288.855445][T13316] veth1_macvtap: left promiscuous mode [ 288.864856][T13316] team0: Device veth1_macvtap failed to register rx_handler [ 288.881880][T13317] netlink: 'syz.4.2192': attribute type 21 has an invalid length. [ 289.253625][T12191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.333608][T12191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.396416][T12191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.460736][T12191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.589609][T12191] bridge_slave_1: left allmulticast mode [ 289.595287][T12191] bridge_slave_1: left promiscuous mode [ 289.601082][T12191] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.610633][T12191] bridge_slave_0: left allmulticast mode [ 289.616295][T12191] bridge_slave_0: left promiscuous mode [ 289.622220][T12191] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.322612][T12191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.341698][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.352982][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.362777][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.371639][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.380311][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.396508][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.417222][T12191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.429794][T12191] bond0 (unregistering): Released all slaves [ 290.442965][T13331] tipc: Enabling of bearer rejected, failed to enable media [ 290.561059][T13343] lo speed is unknown, defaulting to 1000 [ 290.845269][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'. [ 290.857075][T13355] netlink: 'syz.1.2202': attribute type 10 has an invalid length. [ 290.956410][T13361] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 290.988026][T13328] lo speed is unknown, defaulting to 1000 [ 291.101487][T13346] lo speed is unknown, defaulting to 1000 [ 291.240635][T13346] chnl_net:caif_netlink_parms(): no params data found [ 291.306339][T13361] lo speed is unknown, defaulting to 1000 [ 291.331519][T13355] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 291.559566][T13346] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.604281][T13346] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.614067][T13346] bridge_slave_0: entered allmulticast mode [ 291.636956][T13346] bridge_slave_0: entered promiscuous mode [ 291.650257][T13346] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.657590][T13346] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.678050][T13346] bridge_slave_1: entered allmulticast mode [ 291.691713][T13346] bridge_slave_1: entered promiscuous mode [ 291.772167][T12191] hsr_slave_0: left promiscuous mode [ 291.788815][T12191] hsr_slave_1: left promiscuous mode [ 291.794626][T12191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.805330][T12191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.816330][T12191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.847561][T12191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.921991][T12191] veth1_macvtap: left promiscuous mode [ 291.929017][T12191] veth0_macvtap: left promiscuous mode [ 291.935807][T12191] veth1_vlan: left promiscuous mode [ 291.942009][T12191] veth0_vlan: left promiscuous mode [ 292.468291][ T54] Bluetooth: hci3: command tx timeout [ 292.643314][T12191] team0 (unregistering): Port device team_slave_1 removed [ 292.686077][T12191] team0 (unregistering): Port device team_slave_0 removed [ 293.285458][T13376] 0ªX¹¦D: left promiscuous mode [ 293.366836][T13376] macvlan2: left promiscuous mode [ 293.375103][T13376] macvlan3: left promiscuous mode [ 293.382880][T13376] bond0: left promiscuous mode [ 293.393316][T13376] macvlan4: left promiscuous mode [ 293.406857][T13346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.420405][T13346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.430471][T13402] netlink: 'syz.4.2212': attribute type 21 has an invalid length. [ 293.439243][T13402] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.447285][T13402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.454582][T13402] IPv6: NLM_F_CREATE should be set when creating new route [ 293.461882][T13402] IPv6: NLM_F_CREATE should be set when creating new route [ 293.469135][T13402] IPv6: NLM_F_CREATE should be set when creating new route [ 293.490726][ T9] hid-generic 0005:07C0:06E6.0004: item fetching failed at offset 0/1 [ 293.550394][ T9] hid-generic 0005:07C0:06E6.0004: probe with driver hid-generic failed with error -22 [ 293.632973][T13410] openvswitch: netlink: Duplicate or invalid key (type 0). [ 293.672347][T13346] team0: Port device team_slave_0 added [ 293.688222][T13410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.704722][T13346] team0: Port device team_slave_1 added [ 293.820941][T13346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.841895][T13346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.885057][T13346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.915902][T13346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.923178][T13346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.949513][T13346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.971789][T13400] lo speed is unknown, defaulting to 1000 [ 294.087346][T13346] hsr_slave_0: entered promiscuous mode [ 294.110009][T13346] hsr_slave_1: entered promiscuous mode [ 294.116079][T13346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.132071][T13346] Cannot create hsr debugfs directory [ 294.341424][T13406] lo speed is unknown, defaulting to 1000 [ 294.448807][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 294.459211][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 294.548125][ T54] Bluetooth: hci3: command tx timeout [ 295.246481][T13461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.329607][T13465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2232'. [ 295.347371][T13465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2232'. [ 295.466243][T13467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2233'. [ 295.577667][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'. [ 295.603620][T13469] macvlan5: entered promiscuous mode [ 295.613979][T13469] bond0: entered promiscuous mode [ 295.626263][T13469] x_tables: duplicate underflow at hook 1 [ 295.724773][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 295.910002][T13346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 295.945227][T13346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.023291][T13346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.090760][T13346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.097454][T13494] xt_CONNSECMARK: invalid mode: 0 [ 296.262316][T13346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.301330][T13346] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.331622][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2244'. [ 296.345326][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 296.387565][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2245'. [ 296.431080][T13496] macvlan4: entered promiscuous mode [ 296.447274][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.454500][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.501163][T13496] x_tables: duplicate underflow at hook 1 [ 296.512501][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.519764][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.551906][T13488] lo speed is unknown, defaulting to 1000 [ 296.628868][ T54] Bluetooth: hci3: command tx timeout [ 296.746927][T13511] netlink: 'syz.2.2247': attribute type 1 has an invalid length. [ 296.810685][T13510] macvlan5: entered promiscuous mode [ 296.848509][T13510] x_tables: duplicate underflow at hook 1 [ 296.911715][T13504] lo speed is unknown, defaulting to 1000 [ 297.184605][T13520] delete_channel: no stack [ 297.306104][T13346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.398655][T13534] team0: Refused to change device type [ 297.525275][T13346] veth0_vlan: entered promiscuous mode [ 297.580225][T13346] veth1_vlan: entered promiscuous mode [ 297.736481][T13541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.740693][T13346] veth0_macvtap: entered promiscuous mode [ 297.822208][T13346] veth1_macvtap: entered promiscuous mode [ 297.891711][T13346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.938002][T13346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.070684][T13346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.089232][T13346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.099442][T13346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.109496][T13346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.202875][T13563] netlink: 'syz.4.2263': attribute type 10 has an invalid length. [ 298.503421][T13572] netlink: 'syz.1.2269': attribute type 21 has an invalid length. [ 298.517669][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.526671][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.565210][T13572] netlink: 'syz.1.2269': attribute type 4 has an invalid length. [ 298.587900][T13572] netlink: 'syz.1.2269': attribute type 3 has an invalid length. [ 298.711950][ T5833] Bluetooth: hci3: command tx timeout [ 298.766031][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.784141][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.910393][T13578] x_tables: unsorted entry at hook 1 [ 299.598332][T13603] __nla_validate_parse: 10 callbacks suppressed [ 299.598353][T13603] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2277'. [ 300.643148][T13623] xt_hashlimit: size too large, truncated to 1048576 [ 300.715189][T13624] xt_hashlimit: size too large, truncated to 1048576 [ 300.787930][ T5833] Bluetooth: hci3: command 0x0405 tx timeout [ 300.804414][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2284'. [ 300.938263][T13620] lo speed is unknown, defaulting to 1000 [ 301.206955][ T5904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.530028][ T5904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.649483][ T5904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.791523][ T5904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.921637][ T5904] bridge_slave_1: left allmulticast mode [ 301.927339][ T5904] bridge_slave_1: left promiscuous mode [ 301.940750][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.959787][ T5904] bridge_slave_0: left allmulticast mode [ 301.970457][ T5904] bridge_slave_0: left promiscuous mode [ 301.976178][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.725794][T13660] netlink: 'syz.4.2292': attribute type 3 has an invalid length. [ 302.737956][T13660] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2292'. [ 302.786855][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.818855][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.840395][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.865123][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.877029][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 302.885450][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.921207][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.946072][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.972591][ T5904] bond0 (unregistering): Released all slaves [ 303.171808][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 303.263772][T13673] macvlan0: entered promiscuous mode [ 303.324740][T13673] x_tables: duplicate underflow at hook 1 [ 303.378741][T13643] lo speed is unknown, defaulting to 1000 [ 303.554539][T13662] lo speed is unknown, defaulting to 1000 [ 303.800933][T13662] chnl_net:caif_netlink_parms(): no params data found [ 303.865773][T13687] lo speed is unknown, defaulting to 1000 [ 303.952840][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2303'. [ 304.176209][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.209325][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.217835][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 304.228056][T13662] bridge_slave_0: entered allmulticast mode [ 304.234838][T13662] bridge_slave_0: entered promiscuous mode [ 304.260025][ T5904] hsr_slave_0: left promiscuous mode [ 304.300146][ T5904] hsr_slave_1: left promiscuous mode [ 304.318090][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.326479][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.350182][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.357631][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.409213][ T5904] veth1_macvtap: left promiscuous mode [ 304.414926][ T5904] veth0_macvtap: left promiscuous mode [ 304.422491][ T5904] veth1_vlan: left promiscuous mode [ 304.428001][ T5904] veth0_vlan: left promiscuous mode [ 304.525798][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 304.905000][ T5904] team0 (unregistering): Port device team_slave_1 removed [ 304.949035][ T54] Bluetooth: hci3: command tx timeout [ 304.955736][ T5904] team0 (unregistering): Port device team_slave_0 removed [ 305.356194][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.363588][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.383537][T13662] bridge_slave_1: entered allmulticast mode [ 305.412931][T13662] bridge_slave_1: entered promiscuous mode [ 305.810581][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.943363][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.114605][T13662] team0: Port device team_slave_0 added [ 306.279217][T13748] netlink: 'syz.2.2315': attribute type 1 has an invalid length. [ 306.297842][T13748] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2315'. [ 306.379039][T13662] team0: Port device team_slave_1 added [ 306.565813][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.591287][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.627398][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.690558][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.728166][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.777652][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.028144][ T54] Bluetooth: hci3: command tx timeout [ 307.176297][T13662] hsr_slave_0: entered promiscuous mode [ 307.206766][T13662] hsr_slave_1: entered promiscuous mode [ 307.222427][T13662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.237460][T13662] Cannot create hsr debugfs directory [ 307.891417][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'. [ 308.018708][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'. [ 308.051521][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'. [ 308.261356][T13813] netlink: 'syz.2.2336': attribute type 21 has an invalid length. [ 308.295459][T13813] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2336'. [ 308.316666][T13813] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2336'. [ 308.628421][T13824] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2339'. [ 308.646029][T13824] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2339'. [ 308.655290][T13824] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2339'. [ 308.969389][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2340'. [ 309.108006][ T54] Bluetooth: hci3: command tx timeout [ 309.138148][T13834] macvlan6: entered promiscuous mode [ 309.156205][T13662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.186388][T13834] x_tables: duplicate underflow at hook 1 [ 309.192255][T13836] macvlan6: entered promiscuous mode [ 309.200687][T13836] x_tables: duplicate underflow at hook 1 [ 309.238064][T13662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.261535][T13662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.307278][T13662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.410079][T13846] netlink: 'syz.1.2347': attribute type 1 has an invalid length. [ 309.428452][T13846] netlink: 'syz.1.2347': attribute type 3 has an invalid length. [ 309.530524][T13662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.601348][T13662] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.635907][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.643134][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.678979][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.686168][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.176003][T13662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.342969][T13662] veth0_vlan: entered promiscuous mode [ 310.380644][T13662] veth1_vlan: entered promiscuous mode [ 310.456323][T13662] veth0_macvtap: entered promiscuous mode [ 310.485328][T13662] veth1_macvtap: entered promiscuous mode [ 310.578445][T13662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.617886][T13662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.629447][T13662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.649519][T13662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.658431][T13662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.667282][T13662] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.910825][ T9703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.931794][ T9703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.017276][ T5904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.026027][ T5904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.087148][T13890] veth0_to_bridge: entered promiscuous mode [ 311.191366][ T54] Bluetooth: hci3: command tx timeout [ 311.233361][T13896] veth0_to_bridge: left promiscuous mode [ 311.262493][T13883] lo speed is unknown, defaulting to 1000 [ 311.375035][T13904] __nla_validate_parse: 13 callbacks suppressed [ 311.375055][T13904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2364'. [ 311.376943][T13905] netlink: 'syz.4.2365': attribute type 27 has an invalid length. [ 311.381869][T13904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2364'. [ 311.771968][T13918] netlink: 'syz.1.2368': attribute type 16 has an invalid length. [ 311.785746][T13918] netlink: 'syz.1.2368': attribute type 3 has an invalid length. [ 311.829030][T13918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2368'. [ 312.322648][T13930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2370'. [ 312.659151][T13937] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 312.733941][T13940] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2373'. [ 312.799649][T13937] bond4: entered promiscuous mode [ 312.805011][T13937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.885835][T13945] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2375'. [ 312.899316][T13940] batadv1: entered promiscuous mode [ 312.905027][T13940] batadv1: entered allmulticast mode [ 312.953825][T13937] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2373'. [ 312.966544][T13940] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 312.977188][T13940] bond4: (slave batadv1): making interface the new active one [ 313.039122][T13940] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 313.179820][T13950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2376'. [ 313.198803][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 313.462704][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2374'. [ 313.582674][T12188] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.609388][T13943] lo speed is unknown, defaulting to 1000 [ 314.776106][T12188] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.853760][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.897559][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.908957][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.926999][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.946578][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 314.960776][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.022811][T12188] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.226790][T12188] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.290451][T14015] x_tables: duplicate underflow at hook 2 [ 315.526072][T12188] bridge_slave_1: left allmulticast mode [ 315.532204][T12188] bridge_slave_1: left promiscuous mode [ 315.548620][T12188] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.580572][T12188] bridge_slave_0: left allmulticast mode [ 315.586264][T12188] bridge_slave_0: left promiscuous mode [ 315.602343][T12188] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.310696][T12188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.334224][T12188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.350051][T12188] bond0 (unregistering): Released all slaves [ 316.383035][T13990] lo speed is unknown, defaulting to 1000 [ 316.641528][T14055] veth0_to_bridge: entered promiscuous mode [ 316.673951][T14012] lo speed is unknown, defaulting to 1000 [ 316.739312][T14054] veth0_to_bridge: left promiscuous mode [ 316.888218][T14065] netlink: 'syz.1.2406': attribute type 2 has an invalid length. [ 316.991215][T14065] fþ: entered promiscuous mode [ 317.029768][ T54] Bluetooth: hci3: command tx timeout [ 317.096471][T13990] chnl_net:caif_netlink_parms(): no params data found [ 317.351146][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.413376][T12188] hsr_slave_0: left promiscuous mode [ 317.423424][T12188] hsr_slave_1: left promiscuous mode [ 317.438348][T12188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.456012][T12188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.469963][T12188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.487670][T12188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.497802][T14080] __nla_validate_parse: 103 callbacks suppressed [ 317.497817][T14080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2410'. [ 317.554876][T12188] veth1_macvtap: left promiscuous mode [ 317.567122][T12188] veth0_macvtap: left promiscuous mode [ 317.577497][T12188] veth1_vlan: left promiscuous mode [ 317.592211][T12188] veth0_vlan: left promiscuous mode [ 318.081687][T12188] team0 (unregistering): Port device team_slave_1 removed [ 318.141885][T12188] team0 (unregistering): Port device team_slave_0 removed [ 318.622433][T14082] bond1: (slave gretap2): Releasing active interface [ 318.679560][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2415'. [ 318.688981][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2415'. [ 318.745642][T14084] tipc: Enabled bearer , priority 10 [ 318.901157][T13990] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.910100][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2416'. [ 318.928108][T13990] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.942621][T13990] bridge_slave_0: entered allmulticast mode [ 318.959631][T13990] bridge_slave_0: entered promiscuous mode [ 318.990782][T13990] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.007112][T13990] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.014857][T13990] bridge_slave_1: entered allmulticast mode [ 319.023243][T13990] bridge_slave_1: entered promiscuous mode [ 319.029270][ T2988] wlan1: Trigger new scan to find an IBSS to join [ 319.117979][ T54] Bluetooth: hci3: command tx timeout [ 319.134745][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2416'. [ 319.157008][T14102] tipc: Enabling of bearer rejected, failed to enable media [ 319.375329][T13990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.409269][T13990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.682941][T13990] team0: Port device team_slave_0 added [ 319.704737][T13990] team0: Port device team_slave_1 added [ 319.792206][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2423'. [ 319.854612][T13990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.869157][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.901536][T14130] x_tables: duplicate underflow at hook 1 [ 319.907504][T13990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.920765][T13990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.928307][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.960394][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2425'. [ 319.977769][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2425'. [ 319.982917][T13990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.043662][T14131] bridge0: port 3(vlan0) entered blocking state [ 320.096486][T14131] bridge0: port 3(vlan0) entered disabled state [ 320.104165][T14131] vlan0: entered allmulticast mode [ 320.128566][T14131] vlan0: left allmulticast mode [ 320.346011][T14138] pimreg: entered allmulticast mode [ 320.368064][T14144] dvmrp0: left allmulticast mode [ 320.375149][T14144] pimreg: left allmulticast mode [ 320.445970][T14153] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2431'. [ 320.470150][T13990] hsr_slave_0: entered promiscuous mode [ 320.535960][T13990] hsr_slave_1: entered promiscuous mode [ 320.549568][T13990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.577507][T13990] Cannot create hsr debugfs directory [ 321.187869][ T54] Bluetooth: hci3: command tx timeout [ 321.194520][T14169] Â: renamed from pim6reg1 [ 321.377767][T13990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.392112][T13990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.405369][T13990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.422573][T13990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.536722][T13990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.567582][T13990] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.585190][T12191] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.592457][T12191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.616475][T12191] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.623695][T12191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.649788][T14185] vlan0: entered promiscuous mode [ 321.741818][T13990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.832649][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 321.863871][T14188] netlink: 'syz.2.2444': attribute type 8 has an invalid length. [ 322.156186][T13990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.585054][T13990] veth0_vlan: entered promiscuous mode [ 322.612917][T13990] veth1_vlan: entered promiscuous mode [ 322.632944][T14215] __nla_validate_parse: 1 callbacks suppressed [ 322.632962][T14215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2451'. [ 322.649227][T14215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2451'. [ 322.740322][T13990] veth0_macvtap: entered promiscuous mode [ 322.747226][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2452'. [ 322.763258][T13990] veth1_macvtap: entered promiscuous mode [ 322.783983][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2452'. [ 322.811996][T13990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.832130][T13990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.904412][T13990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.918668][T13990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.934212][T13990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.957804][T13990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.063455][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 323.123083][T14223] macvlan7: entered promiscuous mode [ 323.210905][T14236] netlink: 'syz.1.2457': attribute type 4 has an invalid length. [ 323.228260][T14223] x_tables: duplicate underflow at hook 1 [ 323.234158][T14236] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2457'. [ 323.257402][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.267932][ T54] Bluetooth: hci3: command tx timeout [ 323.286539][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.396788][T12191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.428598][T12191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.498282][T14242] netlink: 'syz.4.2459': attribute type 16 has an invalid length. [ 323.516258][T14242] netlink: 'syz.4.2459': attribute type 17 has an invalid length. [ 323.596397][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 323.789128][T14242] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.799068][T14242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.816473][T14245] team0: Device is already in use. [ 324.054237][T14254] netlink: 'syz.1.2462': attribute type 13 has an invalid length. [ 324.068075][T12185] wlan1: Trigger new scan to find an IBSS to join [ 324.119243][T14254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2462'. [ 324.158537][T14254] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2462'. [ 324.207897][T14254] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2462'. [ 324.267741][T14254] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 324.327501][T14256] macvlan8: entered promiscuous mode [ 324.388550][T14260] x_tables: duplicate underflow at hook 1 [ 324.453624][T14249] lo speed is unknown, defaulting to 1000 [ 325.077106][T14229] lo speed is unknown, defaulting to 1000 [ 325.086917][T12185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.172737][T14249] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.179416][T14276] netlink: 'syz.4.2469': attribute type 10 has an invalid length. [ 325.349297][T14269] lo speed is unknown, defaulting to 1000 [ 325.658395][T14285] nr0: entered promiscuous mode [ 325.973009][T14280] lo speed is unknown, defaulting to 1000 [ 326.264719][T14269] lo speed is unknown, defaulting to 1000 [ 326.533372][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.686223][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.767989][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.854589][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.328671][ T52] bridge_slave_1: left allmulticast mode [ 327.334387][ T52] bridge_slave_1: left promiscuous mode [ 327.391064][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.422918][ T52] bridge_slave_0: left allmulticast mode [ 327.445570][ T52] bridge_slave_0: left promiscuous mode [ 327.467030][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.720723][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.735457][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.744361][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.753845][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.773323][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 327.781536][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.033335][T14304] __nla_validate_parse: 4 callbacks suppressed [ 328.033356][T14304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2475'. [ 328.093640][T14304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2475'. [ 328.540337][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.555712][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.570489][ T52] bond0 (unregistering): Released all slaves [ 328.851231][T14318] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 328.999156][T14324] netlink: 'syz.2.2479': attribute type 2 has an invalid length. [ 329.127364][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.155162][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.273884][T14301] lo speed is unknown, defaulting to 1000 [ 329.827947][ T54] Bluetooth: hci3: command tx timeout [ 330.223849][T14359] [ 330.226241][T14359] ====================================================== [ 330.233274][T14359] WARNING: possible circular locking dependency detected [ 330.240303][T14359] 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 Not tainted [ 330.247410][T14359] ------------------------------------------------------ [ 330.254420][T14359] syz.2.2501/14359 is trying to acquire lock: [ 330.260490][T14359] ffff8880621acd28 (&dev_instance_lock_key#12){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 330.270783][T14359] [ 330.270783][T14359] but task is already holding lock: [ 330.278149][T14359] ffff888062224d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 330.287853][T14359] [ 330.287853][T14359] which lock already depends on the new lock. [ 330.287853][T14359] [ 330.298248][T14359] [ 330.298248][T14359] the existing dependency chain (in reverse order) is: [ 330.307247][T14359] [ 330.307247][T14359] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 330.315707][T14359] lock_acquire+0x1ed/0x550 [ 330.320747][T14359] __mutex_lock+0x19c/0x1010 [ 330.325864][T14359] __dev_open+0x5cb/0x8a0 [ 330.330730][T14359] netif_open+0xae/0x1b0 [ 330.335490][T14359] dev_open+0x13e/0x260 [ 330.340160][T14359] team_add_slave+0xabe/0x28a0 [ 330.345447][T14359] do_set_master+0x579/0x730 [ 330.350551][T14359] do_setlink+0xfee/0x40f0 [ 330.355497][T14359] rtnl_newlink+0x15a6/0x1d90 [ 330.360692][T14359] rtnetlink_rcv_msg+0x791/0xcf0 [ 330.366159][T14359] netlink_rcv_skb+0x206/0x480 [ 330.371443][T14359] netlink_unicast+0x7f6/0x990 [ 330.376722][T14359] netlink_sendmsg+0x8de/0xcb0 [ 330.382026][T14359] __sock_sendmsg+0x221/0x270 [ 330.387242][T14359] ____sys_sendmsg+0x53a/0x860 [ 330.392538][T14359] __sys_sendmsg+0x269/0x350 [ 330.397656][T14359] do_syscall_64+0xf3/0x230 [ 330.402688][T14359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.409113][T14359] [ 330.409113][T14359] -> #1 (team->team_lock_key){+.+.}-{4:4}: [ 330.417114][T14359] lock_acquire+0x1ed/0x550 [ 330.422161][T14359] __mutex_lock+0x19c/0x1010 [ 330.427271][T14359] team_set_mac_address+0x122/0x280 [ 330.432994][T14359] netif_set_mac_address+0x327/0x510 [ 330.438813][T14359] do_setlink+0xaa6/0x40f0 [ 330.443750][T14359] rtnl_newlink+0x15a6/0x1d90 [ 330.448954][T14359] rtnetlink_rcv_msg+0x791/0xcf0 [ 330.454417][T14359] netlink_rcv_skb+0x206/0x480 [ 330.459721][T14359] netlink_unicast+0x7f6/0x990 [ 330.465045][T14359] netlink_sendmsg+0x8de/0xcb0 [ 330.470382][T14359] __sock_sendmsg+0x221/0x270 [ 330.475603][T14359] __sys_sendto+0x363/0x4c0 [ 330.480633][T14359] __x64_sys_sendto+0xde/0x100 [ 330.485928][T14359] do_syscall_64+0xf3/0x230 [ 330.490979][T14359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.497409][T14359] [ 330.497409][T14359] -> #0 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 330.505954][T14359] validate_chain+0x18ef/0x5920 [ 330.511339][T14359] __lock_acquire+0x1397/0x2100 [ 330.516717][T14359] lock_acquire+0x1ed/0x550 [ 330.521763][T14359] __mutex_lock+0x19c/0x1010 [ 330.526884][T14359] dev_set_mac_address+0x2a/0x50 [ 330.532336][T14359] bond_set_mac_address+0x28e/0x830 [ 330.538056][T14359] netif_set_mac_address+0x327/0x510 [ 330.543868][T14359] do_setlink+0xaa6/0x40f0 [ 330.548806][T14359] rtnl_newlink+0x15a6/0x1d90 [ 330.554013][T14359] rtnetlink_rcv_msg+0x791/0xcf0 [ 330.559483][T14359] netlink_rcv_skb+0x206/0x480 [ 330.564784][T14359] netlink_unicast+0x7f6/0x990 [ 330.570089][T14359] netlink_sendmsg+0x8de/0xcb0 [ 330.575405][T14359] __sock_sendmsg+0x221/0x270 [ 330.580620][T14359] ____sys_sendmsg+0x53a/0x860 [ 330.585915][T14359] __sys_sendmsg+0x269/0x350 [ 330.591039][T14359] do_syscall_64+0xf3/0x230 [ 330.596075][T14359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.602502][T14359] [ 330.602502][T14359] other info that might help us debug this: [ 330.602502][T14359] [ 330.612729][T14359] Chain exists of: [ 330.612729][T14359] &dev_instance_lock_key#12 --> team->team_lock_key --> &dev_instance_lock_key#2 [ 330.612729][T14359] [ 330.627792][T14359] Possible unsafe locking scenario: [ 330.627792][T14359] [ 330.635236][T14359] CPU0 CPU1 [ 330.640606][T14359] ---- ---- [ 330.645968][T14359] lock(&dev_instance_lock_key#2); [ 330.651181][T14359] lock(team->team_lock_key); [ 330.658466][T14359] lock(&dev_instance_lock_key#2); [ 330.666201][T14359] lock(&dev_instance_lock_key#12); [ 330.671489][T14359] [ 330.671489][T14359] *** DEADLOCK *** [ 330.671489][T14359] [ 330.679623][T14359] 2 locks held by syz.2.2501/14359: [ 330.684809][T14359] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 330.693873][T14359] #1: ffff888062224d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 330.703996][T14359] [ 330.703996][T14359] stack backtrace: [ 330.709882][T14359] CPU: 0 UID: 0 PID: 14359 Comm: syz.2.2501 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 330.709902][T14359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.709913][T14359] Call Trace: [ 330.709919][T14359] [ 330.709927][T14359] dump_stack_lvl+0x241/0x360 [ 330.709953][T14359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.709970][T14359] ? __pfx__printk+0x10/0x10 [ 330.709990][T14359] print_circular_bug+0x13a/0x1b0 [ 330.710011][T14359] check_noncircular+0x36a/0x4a0 [ 330.710030][T14359] ? __pfx_check_noncircular+0x10/0x10 [ 330.710048][T14359] ? lockdep_lock+0x123/0x2b0 [ 330.710076][T14359] validate_chain+0x18ef/0x5920 [ 330.710103][T14359] ? __pfx_validate_chain+0x10/0x10 [ 330.710120][T14359] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.710156][T14359] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 330.710172][T14359] ? lockdep_hardirqs_on+0x99/0x150 [ 330.710192][T14359] ? mark_lock+0x9a/0x360 [ 330.710207][T14359] ? __lock_acquire+0x1397/0x2100 [ 330.710233][T14359] ? mark_lock+0x9a/0x360 [ 330.710248][T14359] __lock_acquire+0x1397/0x2100 [ 330.710276][T14359] lock_acquire+0x1ed/0x550 [ 330.710297][T14359] ? dev_set_mac_address+0x2a/0x50 [ 330.710315][T14359] ? __pfx_lock_acquire+0x10/0x10 [ 330.710338][T14359] ? __pfx___might_resched+0x10/0x10 [ 330.710358][T14359] ? dev_set_mac_address+0x42/0x50 [ 330.710373][T14359] ? __pfx_lock_release+0x10/0x10 [ 330.710397][T14359] __mutex_lock+0x19c/0x1010 [ 330.710416][T14359] ? dev_set_mac_address+0x2a/0x50 [ 330.710431][T14359] ? notifier_call_chain+0x3cc/0x3f0 [ 330.710453][T14359] ? __mutex_unlock_slowpath+0x227/0x800 [ 330.710473][T14359] ? dev_set_mac_address+0x2a/0x50 [ 330.710488][T14359] ? __pfx___mutex_lock+0x10/0x10 [ 330.710506][T14359] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 330.710528][T14359] ? net_generic+0x1f/0x240 [ 330.710546][T14359] ? net_generic+0x1f0/0x240 [ 330.710564][T14359] dev_set_mac_address+0x2a/0x50 [ 330.710580][T14359] bond_set_mac_address+0x28e/0x830 [ 330.710602][T14359] ? __pfx_bond_set_mac_address+0x10/0x10 [ 330.710620][T14359] ? hsr_netdev_notify+0x295/0xb50 [ 330.710644][T14359] ? notifier_call_chain+0x15a/0x3f0 [ 330.710665][T14359] ? notifier_call_chain+0x3cc/0x3f0 [ 330.710687][T14359] netif_set_mac_address+0x327/0x510 [ 330.710708][T14359] ? __pfx_netif_set_mac_address+0x10/0x10 [ 330.710727][T14359] ? rcu_is_watching+0x15/0xb0 [ 330.710743][T14359] ? trace_kmalloc+0x1f/0xd0 [ 330.710763][T14359] ? do_setlink+0x7a7/0x40f0 [ 330.710779][T14359] do_setlink+0xaa6/0x40f0 [ 330.710800][T14359] ? mark_lock+0x9a/0x360 [ 330.710815][T14359] ? __pfx_do_setlink+0x10/0x10 [ 330.710828][T14359] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 330.710851][T14359] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.710876][T14359] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 330.710891][T14359] ? lockdep_hardirqs_on+0x99/0x150 [ 330.710909][T14359] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 330.710925][T14359] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 330.710943][T14359] ? rcu_is_watching+0x15/0xb0 [ 330.710964][T14359] ? __mutex_lock+0xba3/0x1010 [ 330.710983][T14359] ? __mutex_lock+0x602/0x1010 [ 330.711003][T14359] ? rtnl_newlink+0xc4c/0x1d90 [ 330.711025][T14359] ? __pfx___mutex_lock+0x10/0x10 [ 330.711047][T14359] ? ns_capable+0x8a/0xf0 [ 330.711064][T14359] ? rtnl_link_get_net_capable+0x168/0x340 [ 330.711081][T14359] rtnl_newlink+0x15a6/0x1d90 [ 330.711102][T14359] ? is_bpf_text_address+0x285/0x2a0 [ 330.711115][T14359] ? is_bpf_text_address+0x26/0x2a0 [ 330.711134][T14359] ? __pfx_rtnl_newlink+0x10/0x10 [ 330.711156][T14359] ? __pfx_validate_chain+0x10/0x10 [ 330.711179][T14359] ? validate_chain+0x11e/0x5920 [ 330.711195][T14359] ? __pfx_lock_acquire+0x10/0x10 [ 330.711217][T14359] ? __pfx_lock_release+0x10/0x10 [ 330.711240][T14359] ? __pfx_validate_chain+0x10/0x10 [ 330.711256][T14359] ? mark_lock+0x9a/0x360 [ 330.711271][T14359] ? __lock_acquire+0x1397/0x2100 [ 330.711305][T14359] ? __pfx_lock_release+0x10/0x10 [ 330.711332][T14359] ? __pfx_rtnl_newlink+0x10/0x10 [ 330.711354][T14359] rtnetlink_rcv_msg+0x791/0xcf0 [ 330.711375][T14359] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 330.711398][T14359] ? __lock_acquire+0x1397/0x2100 [ 330.711420][T14359] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 330.711448][T14359] netlink_rcv_skb+0x206/0x480 [ 330.711471][T14359] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 330.711512][T14359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.711543][T14359] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.711567][T14359] netlink_unicast+0x7f6/0x990 [ 330.711591][T14359] ? __pfx_netlink_unicast+0x10/0x10 [ 330.711611][T14359] ? __virt_addr_valid+0x45f/0x530 [ 330.711625][T14359] ? __phys_addr_symbol+0x2f/0x70 [ 330.711640][T14359] ? __check_object_size+0x47a/0x730 [ 330.711663][T14359] netlink_sendmsg+0x8de/0xcb0 [ 330.711691][T14359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.711717][T14359] ? aa_sock_msg_perm+0x91/0x160 [ 330.711744][T14359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.711766][T14359] __sock_sendmsg+0x221/0x270 [ 330.711791][T14359] ____sys_sendmsg+0x53a/0x860 [ 330.711812][T14359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.711829][T14359] ? __fget_files+0x2a/0x410 [ 330.711853][T14359] ? __fget_files+0x2a/0x410 [ 330.711879][T14359] __sys_sendmsg+0x269/0x350 [ 330.711899][T14359] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.711935][T14359] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.711965][T14359] ? do_syscall_64+0x100/0x230 [ 330.711986][T14359] ? do_syscall_64+0xb6/0x230 [ 330.712007][T14359] do_syscall_64+0xf3/0x230 [ 330.712027][T14359] ? clear_bhb_loop+0x35/0x90 [ 330.712050][T14359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.712072][T14359] RIP: 0033:0x7f03b638d169 [ 330.712086][T14359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.712099][T14359] RSP: 002b:00007f03b7157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.712115][T14359] RAX: ffffffffffffffda RBX: 00007f03b65a6080 RCX: 00007f03b638d169 [ 330.712127][T14359] RDX: 0000000000040800 RSI: 0000400000000000 RDI: 000000000000000e [ 330.712137][T14359] RBP: 00007f03b640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 330.712146][T14359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.712156][T14359] R13: 0000000000000000 R14: 00007f03b65a6080 R15: 00007fff90502de8 [ 330.712173][T14359] [ 331.417462][ T52] hsr_slave_0: left promiscuous mode [ 331.449708][ T52] hsr_slave_1: left promiscuous mode [ 331.455478][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.462923][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.470579][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.478012][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.487307][ T52] veth1_macvtap: left promiscuous mode [ 331.492845][ T52] veth0_macvtap: left promiscuous mode [ 331.498419][ T52] veth1_vlan: left promiscuous mode [ 331.503692][ T52] veth0_vlan: left promiscuous mode [ 331.685745][ T52] team0 (unregistering): Port device team_slave_1 removed [ 331.702962][ T52] team0 (unregistering): Port device team_slave_0 removed [ 331.844109][T14301] chnl_net:caif_netlink_parms(): no params data found [ 331.867829][T14356] lo speed is unknown, defaulting to 1000 [ 331.907804][ T54] Bluetooth: hci3: command tx timeout [ 332.071084][T14301] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.080920][T14301] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.088251][T14301] bridge_slave_0: entered allmulticast mode [ 332.094818][T14301] bridge_slave_0: entered promiscuous mode [ 332.103031][T14301] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.110237][T14301] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.117458][T14301] bridge_slave_1: entered allmulticast mode [ 332.129988][T14301] bridge_slave_1: entered promiscuous mode [ 332.188250][T14301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.207100][T14301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.249710][T14301] team0: Port device team_slave_0 added [ 332.256973][T14301] team0: Port device team_slave_1 added [ 332.282911][T14301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.291188][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.317533][T14301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.331017][T14301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.339117][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.365481][T14301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.410105][T14301] hsr_slave_0: entered promiscuous mode [ 332.416236][T14301] hsr_slave_1: entered promiscuous mode [ 332.422519][T14301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.432613][T14301] Cannot create hsr debugfs directory [ 332.785276][T14301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.799376][T14301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.822955][T14301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.832673][T14301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.856053][T14301] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.863190][T14301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.870512][T14301] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.877742][T14301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.913109][T14301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.926212][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.934615][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.947303][T14301] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.957419][T12188] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.964639][T12188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.977954][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.985120][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.013899][T14301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.103298][T14301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.130653][T14301] veth0_vlan: entered promiscuous mode [ 333.139769][T14301] veth1_vlan: entered promiscuous mode [ 333.161662][T14301] veth0_macvtap: entered promiscuous mode [ 333.170242][T14301] veth1_macvtap: entered promiscuous mode [ 333.182659][T14301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.192857][T14301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.204151][T14301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.213152][T14301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.222520][T14301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.231364][T14301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.257548][T14301] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 333.278533][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.279868][T14301] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 333.286374][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.313951][ T5904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.322030][ T5904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.261929][ T5904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.935823][ T5904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.002413][ T5904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.063371][ T5904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.158445][ T5904] bridge_slave_1: left allmulticast mode [ 337.164137][ T5904] bridge_slave_1: left promiscuous mode [ 337.174933][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.183532][ T5904] bridge_slave_0: left allmulticast mode [ 337.193265][ T5904] bridge_slave_0: left promiscuous mode [ 337.199019][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.316249][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.326974][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.340448][ T5904] bond0 (unregistering): Released all slaves [ 337.621752][ T5904] hsr_slave_0: left promiscuous mode [ 337.627629][ T5904] hsr_slave_1: left promiscuous mode [ 337.633628][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.641364][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.652084][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.659647][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.677843][ T5904] veth1_macvtap: left promiscuous mode [ 337.683579][ T5904] veth0_macvtap: left promiscuous mode [ 337.692363][ T5904] veth1_vlan: left promiscuous mode [ 337.697703][ T5904] veth0_vlan: left promiscuous mode [ 337.860560][ T5904] team0 (unregistering): Port device team_slave_1 removed [ 337.881344][ T5904] team0 (unregistering): Port device team_slave_0 removed