last executing test programs: 4.696218231s ago: executing program 4 (id=1374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000240)=0x39eb, 0x52) sendto$inet(r1, &(0x7f0000000700)='\f', 0x1, 0x4000000, 0x0, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x100) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000380)=0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008021}, 0x2000c000) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x28, 0x0, 0x1, 0x1}}, @ip_retopts={{0x10}}], 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000000080000000", @ANYRES32=0x0, @ANYBLOB="000048194376", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x80) 4.174091288s ago: executing program 0 (id=1378): r0 = socket(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$phonet_pipe(r0, &(0x7f00000004c0), 0x10) 3.981829724s ago: executing program 2 (id=1380): socket$kcm(0x29, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) (async) readv(r1, &(0x7f0000001740)=[{&(0x7f00000011c0)=""/253, 0xfd}], 0x1) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="1b", 0x1}], 0x1}}], 0x1, 0x8000) (async) accept$nfc_llcp(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="115f702a0745e9e4c8d1818825a2ff24000000", @ANYRES16=r5, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="08001d8004000080"], 0x24}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x30}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400000000000000001a000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x44}}, 0x4000000) 3.882399549s ago: executing program 3 (id=1381): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="24000000010001", 0x7) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r5, 0x9, 0x3e}, 0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r5, 0x3}, &(0x7f0000000180)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a00"], 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x120}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe2, 0x0) 3.759629892s ago: executing program 0 (id=1382): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x48, 0x1412, 0x0, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x6b22, 0x6, 0x6, 0xd, 0x2, 0xb, 0x7}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9800", @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8], 0x98}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r4, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x2f}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x38}}, 0x4004) 3.559727815s ago: executing program 2 (id=1384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001600)={&(0x7f0000000040), 0x6e, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f00000011c0)=""/110, 0x6e}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/117, 0x75}, {&(0x7f0000001300)=""/165, 0xa5}, {&(0x7f00000013c0)=""/149, 0x95}, {&(0x7f0000001480)=""/133, 0x85}], 0x8, &(0x7f00000015c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x40) 3.395625779s ago: executing program 4 (id=1385): syz_emit_ethernet(0x76, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00403a00fc02000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c17f07000000000000000000002d56"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000001c0)="0d202c89f3fcbec464f88f3350b22134c7b2a63838578d61cf5a77bcefd4682e9aa0a1", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f80)="f3138b9b6db511b9ae21807c4364c367ff850b1557ddb77e2fa847dfa0a27912685e340b1d95a2e1c3addecbf7a512de6097b533e3cf913ea96f5d06a31493065fadb6210eb6f6f4b006f2f75096712422ee025c27deefdc9ffcbdd83b51926f1b5de8bd3d1e9ab11afa319762ae7521c064efb2ffa39059b20550a0ebf6859987b77b6a6a85693ee11994af3a79ce73ce4b160f5104a6d5fa212c843569f462aead57c373cb0e383ce375f9fba4f50283a33e3860a5b3d4c0ddbc6351483ebc21a43cd296c4a4136ae6df95223595d23ed726132a4a9704771c0016458836b2e78972e9e296f484351efad3b0b703ddafb1780d6cb634d6e1", 0xf9}, {&(0x7f0000001e80)="ab", 0x1}], 0x2, 0x0, 0x0, 0x4004000}}], 0x2, 0x8193) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x6, "57fe14515924"}}) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r7], 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000300)={0x400, {{0x2, 0xfffe, @rand_addr=0x64010102}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f00000008c0)={0x3, {{0x2, 0x0, @multicast1=0xe0000002}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r10], 0x20}, 0x1, 0x6}, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r11, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.32118167s ago: executing program 0 (id=1386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000002180)='ns/ipc\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xffffffffffffffff) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000440), &(0x7f0000000080)=@tcp, 0x3}, 0x20) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002400)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x12, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xbf94}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000108d3a82a3f52e0826c00000000", @ANYRES32=r11, @ANYBLOB="00000000000000000400140034001680300001802c000c"], 0x58}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000180)=0x100003, 0x4) 3.200186415s ago: executing program 1 (id=1387): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xb, 0x80000000000}, {}, 0x0, 0x0, 0x2}, {{@in=@multicast1}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3502}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x200, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x954}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a00000200000000000000000000007f8a7b6a5646719aa90900000000000000a36ac689fc75d9f4e09796731feb54a030581c8e2bc2b2261838ad96c7d38e0e1e94697b5a3ad780ecc6542c247622aab696500c689ebe2f667872f5c995ddcbf64331df8cca2e1f56aa78d0cf8c18"], 0x10}}, 0x0) socket$inet6(0xa, 0xa, 0x423) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@empty, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast2}}}}, 0x0) 3.137265101s ago: executing program 2 (id=1388): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000070a01030000000000000000020000000900010073797a30a24175880900020073797a3200000000"], 0x2c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000021000aac14140ce000007849e832f0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000001080)=ANY=[@ANYBLOB="18080000ff70e4190000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660ab8103e454b67e058670000e6ad07405511f4f7e9de5d267a3208ed00000000180000000000000000000000100000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff70001000bfa100010004000007010000f8ffffffb702000008000000b50a000000000000850000000600000095e5c664aac43f7a839c24a907e09fe5369532"], &(0x7f0000000000)='GPL\x00', 0x6, 0xde, &(0x7f0000001140)=""/222, 0x0, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f00000013c0)=ANY=[@ANYRES16=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd52, 0x10, &(0x7f0000000000)={0x8000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, 0x0, 0x62c21a4ade68aba1, 0x40000000, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x3ff, 0x43}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffd}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x11c, r9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@loopback, 0x8edd}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000004040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2.937484356s ago: executing program 4 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x208, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x59e7}, @NL80211_ATTR_IE={0x1e1, 0x2a, [@random_vendor={0xdd, 0x8e, "b18ec9b5f4fb5015815920003818b51828aa6fb9c4879355165f320daff583fb0702eecc463b4efe4d24f457b9fe6fac93b8a74662e6a718c5d2606a27176f6f0ba338136fbb5fc5f5608888b54839cc65dc727a5934d670da577b9f26581e68c0fc1406a1a3db593ae89b9d81d13d9be8827fbef16b61bee53b13dbf648302b66236fefa604423761958b1f9ddb"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @fast_bss_trans={0x37, 0xf0, {0x6, 0x8, "cb7cd3a131ce21e4210058f972d574b4", "9918bc397b1a4bf7500b79d838a940ab3fceac32ef67b897c489949ecd2aab32", "a176e366b2fcaffed26bbb8ebbe6039f2890a86f7f37fd6f5c5adfad6d0f5516", [{0x4, 0x23, "809ef6dd1d6ff823f28d1231db238cb40220c5a6f8185d2b762d44062089394c802c9b"}, {0x2, 0x1b, "70b28f16b307f653013bff411b84152761639a9651829fd3736b20"}, {0x2, 0x2, 'K`'}, {0x4, 0x14, "7935108b71c295be6d86cf9c6a83a9b6f00c9c77"}, {0x4, 0x1, "d5"}, {0x4, 0x16, "0a04332a0e266063f692a030315ce6a5e3837bf28760"}, {0x4, 0x1a, "23c9f77023a4b968c212010f6f8b341c66ec8480372e82575335"}, {0x4, 0x9, "2d63fa8e8d91b97620"}]}}, @preq={0x82, 0x51, {{0x1}, 0x83, 0x3, 0xffffff6d, @device_a, 0x7, @void, 0x6, 0x0, 0x5, [{{}, @device_b, 0xfff}, {{}, @device_a, 0x80}, {{}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{0x1}, @device_a, 0x7fff}]}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000380)="e225cd4e9c6555065923a35eef410398ce09956c966ceadb43d4f8c0cd1da910a03d001fb8533fdbb77dc1ed0df6f4c8d2cb1f3a9d232b47937e10e461395a2ed84c30306c8e275c90686bf3f1b7384ecc835075544a2c65a6139f0e6984d9e9a187cdaade09a54cb35a5edbbbb71044b2caa53d7efbe8c5ba68fd3c2aa0c8147cfe5ac73a63af1b49762a440a82a055333667383b58adc08019748abf6448fce8933b9585a84b7912edf5fb08ee54831cbdd2ec185f695edc9e480cd91d75d4af71d546333ee6bdd3e2a40b5dfda7274d6bad2a73a4aa8ce010a579d85a438e1ff14ed0896f8bc8143cf09253d21bf96e2ab905201e67bec07514") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7a}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004800}, 0x940) r4 = accept4(r0, 0x0, &(0x7f0000000600), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000640)={0x3}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000006c0)={0x2, [0x0, 0x0]}, &(0x7f0000000700)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000740)={r8, 0x10}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x184, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x64e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe4b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "05d8c6374d7f48bc7696a45db9a1811f3ad78d4322111380ba"}}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1cacbda9}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8114}, 0x20004084) connect$can_bcm(r4, &(0x7f0000000a00), 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x289040}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a80)={0x268, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1556810d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8342}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @empty, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @local, 0x7140}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60ce}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x100, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000084}, 0x20008000) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000d80)=@ccm_128={{0x304}, "cc420b5ff6e58afc", "2bf769fa9523349b92a4ba193c60f908", "727c1fea", "2d43718876bfdd59"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r6) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r6) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r11, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x800, 0x6f}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x80) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r10, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4004001) socket$kcm(0x29, 0x5, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{0x1, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x20, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xb7d15506052c23c5}}}, &(0x7f0000001300)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x4, 0x8, 0xfffffff7, 0x10000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001600)=[0xffffffffffffffff], &(0x7f0000001640)=[{0x0, 0x4, 0xe, 0x7}], 0x10, 0x5, @void, @value}, 0x94) 2.804158693s ago: executing program 0 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket(0x11, 0xa, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x48, &(0x7f0000000000), 0x10) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r5, @ANYBLOB], 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="9c76af225744c9974472117b0791b40168d234c6775b64098421735aa5d26149cdbf7d069be3beacf8aa23ae3b35f8798ac58576e72bb5eaf47be2a78feda9b5b5"], 0x4c}}, 0x40000) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa49d000000190e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d73882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a80000002100008053e255d911da357ba323a96d7596fa3e07c0c48d86230d400e710116c60000000000fbd7e98e00e8930beeed79f64080f5dcdb59b5e795a59cfc9ad4cecdff120d3abd9769e3016307d87d15c63f71b68808802e985bcb09a4e54a7c9af5a3c7c13cf6a222cb718140dc1e"], 0xe0}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x84) unshare(0x20000400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x26, 0x0, 0x0, 0x401, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9800", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYRESOCT=r7], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x8000013, 0xfffffffffffffc92) r11 = socket$key(0xf, 0x3, 0x2) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600e3ffff0500150001000000180016800400010000000000000000000000040000000000"], 0x3c}}, 0x0) sendmsg$key(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x3f, 0x2, 0x3, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x18}}, 0x4008000) 2.797495945s ago: executing program 1 (id=1391): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2c, r1, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.703949837s ago: executing program 3 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000100070000000900020073797a300000000012000300686173683a6e65742c706f72740000000d000500000000000500040000000000"], 0x4c}}, 0x0) 2.606865061s ago: executing program 2 (id=1393): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20}, 0x20}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x7ff, 0x3, 0x100, 0x0, 0x5}, 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11, 0x0, 0x4c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.448356494s ago: executing program 1 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20040851) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02080000000000000000000000000114000600200100000000000000000000000000010800074000000000180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) 2.29175477s ago: executing program 3 (id=1395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x51}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) 2.099345702s ago: executing program 2 (id=1396): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.884306114s ago: executing program 1 (id=1397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_emit_ethernet(0x68, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc}}}}}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="940000000b0601020000000000000000050000060900020073797a310000000005000100070000002c0008801c0007801800168014000240000000000000000000000000000020000c00078008000840000000104000078006001d40ff"], 0x94}}, 0x40010) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffe74) 1.826986362s ago: executing program 4 (id=1398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006800010000000000000000000a00000000000000060007000300000008000500", @ANYRES32=r2, @ANYBLOB="10000880"], 0x38}}, 0x0) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000001000001e0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x50}, 0x1, 0x0, 0x0, 0x88000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280100000b0a1fffffff000000000000010000000900010073797a30000000000c000b400000000000010000e8000980e4000280140001800800015200000080080001400000000114000180080001400000000008000140020010001c000180080001400000000508000140000000040800014000000008440001800800014000000101080001400000008008000140000000070800014000001000080001400000000408000140000000020800014000000b9b0800014000000004440001800800014000000006080001408000000108000140000003ff0800014000000001080001400000000908000140000000090800014000000008080001400000000814000180080001400000010008000140000000710c0010400000000000000001"], 0x150}}, 0x0) 1.666597095s ago: executing program 3 (id=1399): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) close(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x3a, 0x1000, 0x3a, 0x3f00}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000240)={&(0x7f0000000500)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.467096999s ago: executing program 0 (id=1400): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x3, 0x8}, {0xfff2, 0x7}, {0x0, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}]}, 0x2c}}, 0x24044040) r4 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x64}}, 0x6040814) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18e8c0885031ec5d180000ef629e3dcfcdd5fea5748679cfb016979ad6818e5455b79645570f49abfffffffffeffffff", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x6, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x18, r4}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x31, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @generic={0x1, 0x6, 0x9, 0x866e, 0xa0000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000100), &(0x7f0000000140)=r10}, 0x20) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000540), &(0x7f0000000580)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x54, r12, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xda51}, {0xc, 0x90, 0x7ff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8081}, 0x20044000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x48, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}]}, 0x48}}, 0x0) r16 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r16, 0x29, 0x1b, &(0x7f00000002c0)={@mcast1}, 0x14) 1.335385179s ago: executing program 2 (id=1401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x38}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="005dbc00"/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x114, &(0x7f0000000740)={@broadcast, @remote, @void, {@llc_tr={0x11, {@snap={0x0, 0x1, "ecfc", "903553", 0x600, "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"}}}}}, &(0x7f00000003c0)={0x1, 0x3, [0x304, 0xdd5, 0xf82, 0x48e]}) (async) syz_emit_ethernet(0x114, &(0x7f0000000740)={@broadcast, @remote, @void, {@llc_tr={0x11, {@snap={0x0, 0x1, "ecfc", "903553", 0x600, "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"}}}}}, &(0x7f00000003c0)={0x1, 0x3, [0x304, 0xdd5, 0xf82, 0x48e]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000540)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0xfe}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r2}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, &(0x7f0000000040)) (async) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={&(0x7f0000000340)="94a44c4ea131efdeea3d84b50840939a117a66e45cf1cbce5caad3d9134ec0dfe62addb03399e122409131ee79f2f845a1cad8cfbdcab0cf1d7eecbe3484f14c1e00f3b4e01f45904bf0b2b5402fb678af5e969b8bcde1c0f9e11148b5c1312f11f6f7", &(0x7f0000000440)=""/100, &(0x7f00000003c0), &(0x7f00000004c0)="90c4533d455e016c5bbc74f5be7eb63b209bbef624dfd86cb3e0b4a64937a2590747fba37dabfaa52f8b276420875a44e06ca540bb6151e1b82cce9a311bbc7ee147dcee4f096233e3841dfdc28aa5fcf3f7f1590a416d0e7c862f5d6568386c9f26ff2725a18980f23a726df9be407ca7411564aba787db0bc104f57f9789003b846325b323b32dce05d6d557eaf8a539df5901c21b0a73", 0x194c, r6}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={&(0x7f0000000340)="94a44c4ea131efdeea3d84b50840939a117a66e45cf1cbce5caad3d9134ec0dfe62addb03399e122409131ee79f2f845a1cad8cfbdcab0cf1d7eecbe3484f14c1e00f3b4e01f45904bf0b2b5402fb678af5e969b8bcde1c0f9e11148b5c1312f11f6f7", &(0x7f0000000440)=""/100, &(0x7f00000003c0), &(0x7f00000004c0)="90c4533d455e016c5bbc74f5be7eb63b209bbef624dfd86cb3e0b4a64937a2590747fba37dabfaa52f8b276420875a44e06ca540bb6151e1b82cce9a311bbc7ee147dcee4f096233e3841dfdc28aa5fcf3f7f1590a416d0e7c862f5d6568386c9f26ff2725a18980f23a726df9be407ca7411564aba787db0bc104f57f9789003b846325b323b32dce05d6d557eaf8a539df5901c21b0a73", 0x194c, r6}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.015663316s ago: executing program 1 (id=1402): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140e9ff00010500030000000000080002400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 944.253047ms ago: executing program 4 (id=1403): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000000700000094040000890804"], 0x20}}], 0x1, 0x0) 555.772807ms ago: executing program 4 (id=1404): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="03000300000000000000ab5d71acedd7c9560385dcb188a8", 0x29, 0x0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1d0000000000000000004100000008000300", @ANYRES32=r6], 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400311057640b86dc71a35b4eeb00001cfe3388fdc258e04e359286afa4fd7061bd0c99161f98678cc19cea470ddf4a67a803b9bbe0a4817b2046dce280e701dda5e03dbde821ee7af68ee1889c4dc09cd856978cbe2ffa7e9b4e0cf9d8ea625d827c413f59000000000000000000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf250600000014000200fe8000000000000000000000000000aa080004000a01010114000300ff02000000000000000000000000000108000500ac1414bb2700070073797374656d5f753a6f626a6563745f723a667573655f6465766963655f743a73300000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 548.72231ms ago: executing program 0 (id=1405): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) (async) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x8, 0x6, 0x970, 0x278, 0x480, 0xf8, 0xf8, 0x278, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x180, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x300}}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9d0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 545.283486ms ago: executing program 1 (id=1406): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x7}}, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r4, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000080)=0x81, 0x4) sendmmsg$inet(r4, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002110, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0xa8, 0x0, 0xfbffffff, 0x0, 0xa8, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2b8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000002060508000000000000000000070000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000a8240007800c00028008000140000000010c0001800800014000000006080006400000001005000500020000000500010006"], 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close(0xffffffffffffffff) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={r12, 0x0, 0x1, "cd"}, 0x9) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000440)={r12, @in6={{0xa, 0x4e20, 0x3, @mcast2, 0x4}}}, &(0x7f00000003c0)=0x84) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r11, @ANYRES32=r10, @ANYRES64=0x0, @ANYRESOCT=r5, @ANYRES64=r4, @ANYRESHEX=r1, @ANYBLOB="3d34838f02d378db4f5047b4154f59ea08757b1aad73d28e4dcd1e7145b5310f8bba25bb2b6b81b73f04acddfef13313c9a985b11c1f17d5f25b19d0c6e2078cf6e083ccb53d4921704eae2adaf065f817484c39c86555f355a3473d95fa960a393a3723ae36c64bdddf5ff4496831918c294dfeed9e0918a7cb5b10e0257005a0991fb8f6f82812cb09656f5a6bc5d3aefaa6a1809df3fc080a4f5b57bd5e4a41f6cb99c63ee2", @ANYRESHEX=r6, @ANYRES32=r0], 0x20}}, 0x0) 521.620134ms ago: executing program 3 (id=1407): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x100, 0x0, 0x0, 0x40, 0x0, 0x0, 0x22], [0x0, 0x9, 0xfff8]}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x90}}, 0x4080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000000), 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)={0x2, 0x4, 0x2, 0x6, 0x0, [@private1, @mcast2]}, 0x28) 0s ago: executing program 3 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x4a0, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x99}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x50}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdbd0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0be587185c8176b94c75829df0d6b99ff4fed9cca6"}}, @TIPC_NLA_NODE_ID={0x75, 0x3, "a23f317af93cce5ad8be07fc38d01f29037ab9318bc7f3422b14f1a857c7066a053c7c96fc1df4fc428d9994c4e128486638233ee71ecef24177f4c0818cb03e85bbbf8680d7669d8dfd84862321cad1a481e31e4f0baa8a3235b0f28ae26913c2ba3478c05d75a99cd0e2643d0178fd09"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f}]}]}, @TIPC_NLA_MEDIA={0x1c0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97b}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8fd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe93f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a60f776}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa351b43}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8058}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6b9e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6cc8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x42c64564}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5451d2e8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x58000}, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}]}, 0x3c}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000600), 0x4) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0xfffffffffffffffe, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x1, 0x3, 0x3]}, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts. [ 75.345684][ T5226] cgroup: Unknown subsys name 'net' [ 75.515125][ T5226] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.190649][ T5226] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.130555][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.140411][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.148597][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.150696][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.157464][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.170964][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.172332][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.187209][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.195088][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.203680][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.212167][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.222898][ T5248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.232326][ T5253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.237754][ T5251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.247185][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.248070][ T5253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.258229][ T4626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.283224][ T4626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.292978][ T4626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.311543][ T5251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.319216][ T5251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.326397][ T5253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.334922][ T5253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.344004][ T5253] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.351713][ T5253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.359331][ T5253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.361205][ T5251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.374513][ T5251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.384458][ T5248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.392241][ T5248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.912270][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 82.003004][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 82.215488][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 82.233861][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 82.342949][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.352661][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.362002][ T5237] bridge_slave_0: entered allmulticast mode [ 82.369891][ T5237] bridge_slave_0: entered promiscuous mode [ 82.409731][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.417582][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.425158][ T5236] bridge_slave_0: entered allmulticast mode [ 82.432429][ T5236] bridge_slave_0: entered promiscuous mode [ 82.451475][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.458867][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.466156][ T5237] bridge_slave_1: entered allmulticast mode [ 82.473297][ T5237] bridge_slave_1: entered promiscuous mode [ 82.482028][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 82.512470][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.519943][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.527566][ T5236] bridge_slave_1: entered allmulticast mode [ 82.534969][ T5236] bridge_slave_1: entered promiscuous mode [ 82.600492][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.633537][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.658733][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.707573][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.743869][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.751234][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.758704][ T5244] bridge_slave_0: entered allmulticast mode [ 82.766284][ T5244] bridge_slave_0: entered promiscuous mode [ 82.775968][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.783082][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.790892][ T5244] bridge_slave_1: entered allmulticast mode [ 82.798258][ T5244] bridge_slave_1: entered promiscuous mode [ 82.838534][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.846105][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.853335][ T5249] bridge_slave_0: entered allmulticast mode [ 82.860955][ T5249] bridge_slave_0: entered promiscuous mode [ 82.870061][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.877328][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.884597][ T5249] bridge_slave_1: entered allmulticast mode [ 82.892952][ T5249] bridge_slave_1: entered promiscuous mode [ 82.904262][ T5236] team0: Port device team_slave_0 added [ 82.918201][ T5236] team0: Port device team_slave_1 added [ 82.986210][ T5237] team0: Port device team_slave_0 added [ 82.997146][ T5237] team0: Port device team_slave_1 added [ 83.040292][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.047356][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.073528][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.089225][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.099960][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.107039][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.133253][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.173771][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.186296][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.229302][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.236341][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.262633][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.277436][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.316833][ T5244] team0: Port device team_slave_0 added [ 83.323131][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.330527][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.337938][ T5250] bridge_slave_0: entered allmulticast mode [ 83.345538][ T5250] bridge_slave_0: entered promiscuous mode [ 83.353403][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.356104][ T5248] Bluetooth: hci0: command tx timeout [ 83.360881][ T5243] Bluetooth: hci1: command tx timeout [ 83.366981][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.397814][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.435267][ T5243] Bluetooth: hci3: command tx timeout [ 83.450089][ T5249] team0: Port device team_slave_0 added [ 83.459784][ T5244] team0: Port device team_slave_1 added [ 83.466759][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.473964][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.481984][ T5250] bridge_slave_1: entered allmulticast mode [ 83.489664][ T5250] bridge_slave_1: entered promiscuous mode [ 83.515154][ T5243] Bluetooth: hci2: command tx timeout [ 83.517597][ T5248] Bluetooth: hci4: command tx timeout [ 83.546895][ T5249] team0: Port device team_slave_1 added [ 83.581490][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.629406][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.637108][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.663356][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.690426][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.717908][ T5236] hsr_slave_0: entered promiscuous mode [ 83.725720][ T5236] hsr_slave_1: entered promiscuous mode [ 83.733439][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.741031][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.767672][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.780191][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.787475][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.813700][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.847682][ T5237] hsr_slave_0: entered promiscuous mode [ 83.854348][ T5237] hsr_slave_1: entered promiscuous mode [ 83.862258][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.870579][ T5237] Cannot create hsr debugfs directory [ 83.893237][ T5250] team0: Port device team_slave_0 added [ 83.900903][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.908163][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.934180][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.976238][ T5250] team0: Port device team_slave_1 added [ 84.043348][ T5249] hsr_slave_0: entered promiscuous mode [ 84.050490][ T5249] hsr_slave_1: entered promiscuous mode [ 84.057624][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.065299][ T5249] Cannot create hsr debugfs directory [ 84.151282][ T5244] hsr_slave_0: entered promiscuous mode [ 84.167474][ T5244] hsr_slave_1: entered promiscuous mode [ 84.174192][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.182157][ T5244] Cannot create hsr debugfs directory [ 84.200808][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.207879][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.235125][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.279283][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.286473][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.312498][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.494680][ T5250] hsr_slave_0: entered promiscuous mode [ 84.502533][ T5250] hsr_slave_1: entered promiscuous mode [ 84.509751][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.517753][ T5250] Cannot create hsr debugfs directory [ 84.791026][ T5237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.826814][ T5237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.849380][ T5237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.859852][ T5237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.963525][ T5236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.981469][ T5236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.996239][ T5236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.008364][ T5236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.104609][ T5244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.121514][ T5244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.134467][ T5244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.153572][ T5244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.245769][ T5249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.258378][ T5249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.268776][ T5249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.282577][ T5249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.412440][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.435956][ T5248] Bluetooth: hci0: command tx timeout [ 85.435965][ T5243] Bluetooth: hci1: command tx timeout [ 85.482695][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.495411][ T5250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.507889][ T5250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.514967][ T5248] Bluetooth: hci3: command tx timeout [ 85.523874][ T5250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.537509][ T5250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.553213][ T2596] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.560815][ T2596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.595304][ T5248] Bluetooth: hci2: command tx timeout [ 85.595325][ T5243] Bluetooth: hci4: command tx timeout [ 85.643772][ T2596] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.650993][ T2596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.686992][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.811861][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.830095][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.862960][ T2569] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.870227][ T2569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.941923][ T2569] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.949215][ T2569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.986073][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.018792][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.026065][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.071292][ T2596] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.078560][ T2596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.150072][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.198208][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.242855][ T5244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.286294][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.307775][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.367048][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.379103][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.386481][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.399705][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.406975][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.424361][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.431626][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.487539][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.494880][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.709719][ T5250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.799037][ T5237] veth0_vlan: entered promiscuous mode [ 86.825980][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.860057][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.903944][ T5237] veth1_vlan: entered promiscuous mode [ 87.074117][ T5244] veth0_vlan: entered promiscuous mode [ 87.091781][ T5236] veth0_vlan: entered promiscuous mode [ 87.140263][ T5237] veth0_macvtap: entered promiscuous mode [ 87.157581][ T5244] veth1_vlan: entered promiscuous mode [ 87.186225][ T5236] veth1_vlan: entered promiscuous mode [ 87.216421][ T5237] veth1_macvtap: entered promiscuous mode [ 87.328212][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.368365][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.427028][ T5244] veth0_macvtap: entered promiscuous mode [ 87.440641][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.482396][ T5236] veth0_macvtap: entered promiscuous mode [ 87.527716][ T5248] Bluetooth: hci0: command tx timeout [ 87.533218][ T5248] Bluetooth: hci1: command tx timeout [ 87.536249][ T5249] veth0_vlan: entered promiscuous mode [ 87.556763][ T5236] veth1_macvtap: entered promiscuous mode [ 87.579557][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.595371][ T5248] Bluetooth: hci3: command tx timeout [ 87.602956][ T5244] veth1_macvtap: entered promiscuous mode [ 87.658841][ T5249] veth1_vlan: entered promiscuous mode [ 87.675099][ T5248] Bluetooth: hci4: command tx timeout [ 87.680589][ T5248] Bluetooth: hci2: command tx timeout [ 87.727427][ T5237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.761258][ T5237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.776220][ T5237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.799131][ T5237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.882895][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.903686][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.916861][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.941582][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.965268][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.989823][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.022321][ T5236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.033852][ T5236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.046807][ T5236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.057518][ T5236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.093997][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.105295][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.115872][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.126716][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.138370][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.179560][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.206805][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.216951][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.227541][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.239921][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.253773][ T5249] veth0_macvtap: entered promiscuous mode [ 88.279472][ T5244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.288699][ T5244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.298185][ T5244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.308100][ T5244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.333024][ T5249] veth1_macvtap: entered promiscuous mode [ 88.394134][ T2569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.414269][ T2569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.532067][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.554610][ T5250] veth0_vlan: entered promiscuous mode [ 88.560378][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.579516][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.590604][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.602400][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.612935][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.622912][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.637355][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.649380][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.661351][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.672106][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.682323][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.692970][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.702970][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.713988][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.732950][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.755646][ T2569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.763575][ T2569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.790622][ T5250] veth1_vlan: entered promiscuous mode [ 88.826674][ T5249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.849249][ T5249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.860655][ T5249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.869677][ T5249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.972809][ T5320] can: request_module (can-proto-0) failed. [ 88.982978][ T2569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.997207][ T2569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.023829][ T2569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.032049][ T2569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.085486][ T5320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.160943][ T5250] veth0_macvtap: entered promiscuous mode [ 89.184272][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.210219][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.219130][ T5250] veth1_macvtap: entered promiscuous mode [ 89.293980][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.319851][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.384286][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.437602][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.474849][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.497738][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.509569][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.521396][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.534353][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.536339][ T5327] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.548126][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.573348][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.597152][ T5248] Bluetooth: hci1: command tx timeout [ 89.602637][ T5248] Bluetooth: hci0: command tx timeout [ 89.675458][ T5248] Bluetooth: hci3: command tx timeout [ 89.687795][ T5333] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 89.699463][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.725039][ T5333] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 89.732587][ T5333] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 89.740255][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.751499][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.756792][ T5248] Bluetooth: hci2: command tx timeout [ 89.767624][ T5243] Bluetooth: hci4: command tx timeout [ 89.770749][ T5333] netlink: 'syz.3.6': attribute type 2 has an invalid length. [ 89.783243][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.784927][ T5333] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6'. [ 89.801533][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.817208][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.831590][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.845369][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.867404][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.881991][ T5330] netlink: 'syz.3.6': attribute type 21 has an invalid length. [ 89.916357][ T5330] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6'. [ 89.936679][ T5330] netlink: 'syz.3.6': attribute type 5 has an invalid length. [ 89.954214][ T5330] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6'. [ 89.973734][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.977713][ T5250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.991592][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.001504][ T5250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.010444][ T5250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.019323][ T5250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.213515][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.388519][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.429149][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.478556][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.533166][ T5348] sch_tbf: peakrate 32768 is lower than or equals to rate 1281593178885145793 ! [ 90.572363][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.582792][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.608279][ T5348] Zero length message leads to an empty skb [ 90.713634][ T5357] netlink: 'syz.3.12': attribute type 4 has an invalid length. [ 90.736684][ T5347] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.777194][ T5357] netlink: 'syz.3.12': attribute type 2 has an invalid length. [ 90.946425][ T5359] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5'. [ 91.173698][ T5366] netlink: 256 bytes leftover after parsing attributes in process `syz.3.15'. [ 91.297250][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 91.812848][ T5383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'. [ 91.989710][ T5395] netlink: 240 bytes leftover after parsing attributes in process `syz.4.19'. [ 92.059778][ T5399] netlink: 'syz.1.21': attribute type 1 has an invalid length. [ 92.144017][ T5401] dccp_invalid_packet: pskb_may_pull failed [ 92.320774][ T8] cfg80211: failed to load regulatory.db [ 92.621013][ T5426] Bluetooth: MGMT ver 1.23 [ 92.842141][ T5432] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 92.969199][ T5432] syz.3.31 (5432) used greatest stack depth: 18296 bytes left [ 93.059793][ T5437] C: renamed from team_slave_0 (while UP) [ 93.077889][ T5437] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 93.091398][ T5437] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 99.745408][ T5444] xt_l2tp: missing protocol rule (udp|l2tpip) [ 101.364522][ T5447] Bluetooth: MGMT ver 1.23 [ 101.370538][ T5447] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 101.459654][ T5451] __nla_validate_parse: 1 callbacks suppressed [ 101.459685][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.40'. [ 101.510375][ T5451] xfrm1: entered promiscuous mode [ 101.532605][ T5451] xfrm1: entered allmulticast mode [ 101.592819][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 101.676813][ T5460] netlink: 116 bytes leftover after parsing attributes in process `syz.0.43'. [ 102.017180][ T5473] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 102.335039][ T5486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.50'. [ 102.376283][ T5485] netlink: 76 bytes leftover after parsing attributes in process `syz.2.52'. [ 102.391712][ T5492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.54'. [ 102.410914][ T5489] warning: `syz.0.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.853946][ T5505] syz.3.58 uses obsolete (PF_INET,SOCK_PACKET) [ 102.975161][ T5513] tipc: Started in network mode [ 102.986470][ T5513] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 102.994213][ T5513] tipc: Enabled bearer , priority 10 [ 103.008425][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58'. [ 103.427154][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 103.469410][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 103.969586][ T5551] tap0: tun_chr_ioctl cmd 1074025677 [ 104.012053][ T5551] tap0: linktype set to 0 [ 104.127709][ T5240] tipc: Node number set to 10136234 [ 104.187640][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 104.268060][ T5565] netlink: 'syz.3.76': attribute type 11 has an invalid length. [ 104.281069][ T5561] sit1: entered promiscuous mode [ 104.321100][ T5569] netlink: 'syz.3.76': attribute type 11 has an invalid length. [ 104.724423][ T5578] nbd: must specify at least one socket [ 105.073832][ T5597] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 105.117065][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 105.205165][ T5597] team0: Failed to send options change via netlink (err -105) [ 105.244400][ T5597] team0: Port device netdevsim0 added [ 105.265074][ T5596] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 105.284450][ T5596] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 105.308834][ T5606] netlink: 'syz.4.85': attribute type 29 has an invalid length. [ 105.736721][ T5629] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 105.776035][ T5629] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 106.738015][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.853788][ T5679] unsupported nlmsg_type 40 [ 107.020374][ T5684] __nla_validate_parse: 5 callbacks suppressed [ 107.020394][ T5684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.106'. [ 107.079095][ T5688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.106'. [ 107.392647][ T5699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 107.750062][ T5707] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 107.822384][ T5713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.116'. [ 107.851566][ T5713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.116'. [ 108.005216][ T5724] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20002 [ 108.013217][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 108.228598][ T5736] Dead loop on virtual device ipvlan1, fix it urgently! [ 108.338099][ T5738] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 108.375827][ T5738] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.121'. [ 108.413514][ T5738] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 108.452056][ T5736] syzkaller0: entered promiscuous mode [ 108.459400][ T5736] syzkaller0: entered allmulticast mode [ 108.460042][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 108.829579][ T5754] netlink: 'syz.1.126': attribute type 3 has an invalid length. [ 108.851514][ T5754] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.126'. [ 110.472139][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.480499][ T5756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.547528][ T5736] syz.2.122 (5736) used greatest stack depth: 5648 bytes left [ 110.777997][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 111.017059][ T5789] netlink: 'syz.2.136': attribute type 33 has an invalid length. [ 111.393745][ T5802] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 111.420013][ T5802] netlink: 'syz.0.141': attribute type 2 has an invalid length. [ 111.470540][ T5802] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 111.840662][ T5823] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 111.855088][ T5825] syz.2.147: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 111.928492][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.2.147 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 111.939185][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.949515][ T5825] Call Trace: [ 111.952841][ T5825] [ 111.955941][ T5825] dump_stack_lvl+0x241/0x360 [ 111.960728][ T5825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.965987][ T5825] ? __pfx__printk+0x10/0x10 [ 111.970633][ T5825] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 111.977112][ T5825] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 111.983676][ T5825] warn_alloc+0x278/0x410 [ 111.984412][ T5826] netlink: 'syz.1.149': attribute type 2 has an invalid length. [ 111.988061][ T5825] ? stack_depot_save_flags+0x6e4/0x830 [ 111.988115][ T5825] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 111.988149][ T5825] ? __pfx_warn_alloc+0x10/0x10 [ 111.988183][ T5825] ? kasan_save_track+0x3f/0x80 [ 111.988213][ T5825] ? __kasan_kmalloc+0x98/0xb0 [ 111.988247][ T5825] ? xsk_setsockopt+0x598/0x950 [ 111.988280][ T5825] ? do_sock_setsockopt+0x3af/0x720 [ 111.988308][ T5825] ? __sys_setsockopt+0x1ae/0x250 [ 112.037215][ T5825] ? __x64_sys_setsockopt+0xb5/0xd0 [ 112.042441][ T5825] ? do_syscall_64+0xf3/0x230 [ 112.047133][ T5825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.053228][ T5825] __vmalloc_node_range_noprof+0x126/0x1400 [ 112.059196][ T5825] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.065643][ T5825] ? __kasan_kmalloc+0x98/0xb0 [ 112.070424][ T5825] ? xskq_create+0x54/0x170 [ 112.074950][ T5825] vmalloc_user_noprof+0x74/0x80 [ 112.079911][ T5825] ? xskq_create+0xb6/0x170 [ 112.084422][ T5825] xskq_create+0xb6/0x170 [ 112.088772][ T5825] xsk_init_queue+0xa1/0x100 [ 112.093418][ T5825] xsk_setsockopt+0x598/0x950 [ 112.098126][ T5825] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.103348][ T5825] ? __pfx_lock_acquire+0x10/0x10 [ 112.108389][ T5825] ? aa_sock_opt_perm+0x79/0x120 [ 112.113345][ T5825] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 112.118911][ T5825] ? security_socket_setsockopt+0x87/0xb0 [ 112.124672][ T5825] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.129893][ T5825] do_sock_setsockopt+0x3af/0x720 [ 112.135572][ T5825] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 112.141164][ T5825] ? __fget_files+0x29/0x470 [ 112.145782][ T5825] ? __fget_files+0x3f6/0x470 [ 112.150491][ T5825] __sys_setsockopt+0x1ae/0x250 [ 112.155803][ T5825] __x64_sys_setsockopt+0xb5/0xd0 [ 112.160895][ T5825] do_syscall_64+0xf3/0x230 [ 112.165536][ T5825] ? clear_bhb_loop+0x35/0x90 [ 112.170349][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.176289][ T5825] RIP: 0033:0x7f58ba77def9 [ 112.180733][ T5825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.200482][ T5825] RSP: 002b:00007f58ba1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.208914][ T5825] RAX: ffffffffffffffda RBX: 00007f58ba935f80 RCX: 00007f58ba77def9 [ 112.216990][ T5825] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 112.224984][ T5825] RBP: 00007f58ba7f0b76 R08: 0000000000000004 R09: 0000000000000000 [ 112.232964][ T5825] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.240955][ T5825] R13: 0000000000000000 R14: 00007f58ba935f80 R15: 00007ffcc561fdb8 [ 112.248954][ T5825] [ 112.297034][ T5825] Mem-Info: [ 112.301994][ T5825] active_anon:4121 inactive_anon:0 isolated_anon:0 [ 112.301994][ T5825] active_file:1122 inactive_file:38192 isolated_file:0 [ 112.301994][ T5825] unevictable:768 dirty:22 writeback:0 [ 112.301994][ T5825] slab_reclaimable:8709 slab_unreclaimable:94347 [ 112.301994][ T5825] mapped:21215 shmem:1245 pagetables:762 [ 112.301994][ T5825] sec_pagetables:0 bounce:0 [ 112.301994][ T5825] kernel_misc_reclaimable:0 [ 112.301994][ T5825] free:1373334 free_pcp:296 free_cma:0 [ 112.315099][ T5830] netlink: 'syz.1.149': attribute type 2 has an invalid length. [ 112.360507][ T5825] Node 0 active_anon:16472kB inactive_anon:0kB active_file:4488kB inactive_file:152704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84904kB dirty:140kB writeback:0kB shmem:3444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10236kB pagetables:3000kB sec_pagetables:0kB all_unreclaimable? no [ 112.410535][ T5825] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 112.447143][ T5839] __nla_validate_parse: 5 callbacks suppressed [ 112.447165][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'. [ 112.451335][ T5825] Node 0 [ 112.460114][ T5841] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.152'. [ 112.485687][ T5841] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 112.503552][ T5825] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.555052][ T5825] lowmem_reserve[]: 0 2467 2468 0 0 [ 112.561016][ T5825] Node 0 DMA32 free:1523072kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:16552kB inactive_anon:0kB active_file:4488kB inactive_file:151896kB unevictable:1536kB writepending:96kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:1952kB local_pcp:1008kB free_cma:0kB [ 112.638399][ T5846] netlink: 52 bytes leftover after parsing attributes in process `syz.4.153'. [ 112.660885][ T5825] lowmem_reserve[]: 0 0 0 0 0 [ 112.684983][ T5825] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:808kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 112.748342][ T5825] lowmem_reserve[]: 0 0 0 0 0 [ 112.761042][ T5825] Node 1 Normal free:3953424kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.852330][ T5825] lowmem_reserve[]: 0 0 0 0 0 [ 112.858132][ T5825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.871530][ T5825] Node 0 DMA32: 696*4kB (UM) 741*8kB (UME) 387*16kB (UME) 189*32kB (UME) 94*64kB (UME) 20*128kB (UM) 11*256kB (UME) 9*512kB (UME) 7*1024kB (ME) 2*2048kB (ME) 358*4096kB (M) = 1514584kB [ 112.892786][ T5825] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 112.908334][ T5825] Node 1 Normal: 2*4kB (UM) 11*8kB (UM) 13*16kB (UM) 11*32kB (UM) 6*64kB (U) 2*128kB (U) 2*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (U) 964*4096kB (M) = 3953424kB [ 112.925634][ T5825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.935886][ T5825] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.947949][ T5825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.965030][ T5825] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.984924][ T5825] 40561 total pagecache pages [ 112.997827][ T5825] 0 pages in swap cache [ 113.002062][ T5825] Free swap = 124996kB [ 113.017452][ T5825] Total swap = 124996kB [ 113.036290][ T5825] 2097051 pages RAM [ 113.050868][ T5825] 0 pages HighMem/MovableOnly [ 113.070319][ T5825] 426967 pages reserved [ 113.082369][ T5825] 0 pages cma reserved [ 114.131747][ T5909] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 114.143236][ T5909] netlink: 224 bytes leftover after parsing attributes in process `syz.0.172'. [ 114.203252][ T5916] tipc: Can't bind to reserved service type 2 [ 114.466688][ T5927] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0004 with DS=0x5 [ 114.709515][ T5935] can: request_module (can-proto-0) failed. [ 114.724985][ T5936] can: request_module (can-proto-0) failed. [ 115.205506][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 115.235512][ T5959] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 115.306140][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 115.703645][ T5992] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 115.923793][ T6003] IPv4: Oversized IP packet from 172.20.20.24 [ 115.933112][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 115.941024][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 115.941563][ T6005] Cannot find add_set index 0 as target [ 116.102511][ T6012] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 116.141297][ T6012] nbd: couldn't find a device at index 2097172 [ 116.193712][ T6012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.200'. [ 116.238182][ T6012] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 116.295840][ T6018] netlink: 'syz.2.203': attribute type 10 has an invalid length. [ 116.366853][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.400073][ T6018] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.675017][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 116.696167][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 116.733015][ T6029] netlink: 56 bytes leftover after parsing attributes in process `syz.4.206'. [ 116.885950][ T6039] sch_fq: defrate 0 ignored. [ 117.039838][ T6046] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 117.179299][ T6051] netlink: 'syz.2.214': attribute type 10 has an invalid length. [ 117.209884][ T6051] hsr0: entered promiscuous mode [ 117.253838][ T6051] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.339984][ T6051] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 117.359812][ T6051] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 117.384582][ T6051] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 117.405950][ T6014] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.417650][ T6061] Cannot find add_set index 0 as target [ 117.744247][ T6074] __nla_validate_parse: 3 callbacks suppressed [ 117.744267][ T6074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.219'. [ 117.770953][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.818992][ T6073] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 117.834095][ T6073] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.220'. [ 117.870120][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.881741][ T6073] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 118.259776][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 118.305580][ T944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.472346][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'. [ 118.545222][ T944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.605203][ T944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.647860][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 118.682421][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 118.706952][ T6104] tap0: tun_chr_ioctl cmd 1074025677 [ 118.713892][ T6104] tap0: linktype set to 0 [ 118.735615][ T944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.805181][ T5340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.222832][ T6122] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 119.261223][ T6122] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 119.297740][ T6122] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.233'. [ 119.317603][ T6122] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 119.606215][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 119.757013][ T6138] Illegal XDP return value 6 on prog (id 43) dev N/A, expect packet loss! [ 119.855119][ T5340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.957261][ T6142] netlink: 'syz.4.238': attribute type 5 has an invalid length. [ 120.160921][ T6158] : renamed from ipvlan1 [ 120.548139][ T6171] veth1: mtu less than device minimum [ 120.580281][ T6171] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 120.744649][ T6169] syzkaller0: entered promiscuous mode [ 120.769270][ T6169] syzkaller0: entered allmulticast mode [ 120.803815][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 120.823130][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 120.879514][ T6169] syzkaller0: create flow: hash 578959554 index 1 [ 121.135684][ T6190] xt_TCPMSS: Only works on TCP SYN packets [ 121.157837][ T6165] syzkaller0: delete flow: hash 578959554 index 1 [ 121.755913][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 124.016572][ T6206] bridge0: entered allmulticast mode [ 124.187591][ T6281] Bluetooth: hci3: invalid len left 7, exp >= 117 [ 124.215776][ T6281] Bluetooth: hci3: invalid len left 7, exp >= 117 [ 124.222539][ T6281] Bluetooth: hci3: invalid len left 7, exp >= 117 [ 124.292695][ T6284] batadv_slave_1: entered promiscuous mode [ 124.436183][ T6280] batadv_slave_1: left promiscuous mode [ 124.627194][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 124.785884][ T6319] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.274'. [ 124.896015][ T6325] tc_dump_action: action bad kind [ 124.937818][ T6327] netlink: 92 bytes leftover after parsing attributes in process `syz.4.279'. [ 124.986268][ T6328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.277'. [ 125.409247][ T6343] netlink: 108 bytes leftover after parsing attributes in process `syz.4.284'. [ 125.420172][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 125.652010][ T6352] netlink: 'syz.4.287': attribute type 9 has an invalid length. [ 125.662008][ T6352] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.287'. [ 125.680504][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 125.936775][ T6360] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 125.944590][ T6360] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.290'. [ 126.035118][ T6366] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 126.201093][ T6372] netlink: 'syz.3.293': attribute type 3 has an invalid length. [ 126.226672][ T6372] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.293'. [ 126.517195][ T6382] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 126.581456][ T6387] netlink: 'syz.1.297': attribute type 6 has an invalid length. [ 127.107204][ T6417] netlink: 'syz.2.305': attribute type 4 has an invalid length. [ 127.124898][ T5243] Bluetooth: hci4: command tx timeout [ 127.366784][ T6426] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 127.570937][ T6430] netlink: 'syz.0.311': attribute type 2 has an invalid length. [ 127.623120][ T6430] dvmrp1: entered allmulticast mode [ 127.799237][ T6438] dummy0: entered promiscuous mode [ 129.186150][ T6502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.194916][ T5243] Bluetooth: hci4: command 0x0405 tx timeout [ 129.627577][ T6520] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 129.659626][ T6520] __nla_validate_parse: 13 callbacks suppressed [ 129.659650][ T6520] netlink: 236 bytes leftover after parsing attributes in process `syz.0.341'. [ 129.774444][ T6526] ipt_ECN: cannot use operation on non-tcp rule [ 130.086277][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 130.303868][ T6553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 130.724361][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.360'. [ 130.738835][ T6570] syz.2.360[6570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.739009][ T6570] syz.2.360[6570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.754202][ T6570] netlink: 300 bytes leftover after parsing attributes in process `syz.2.360'. [ 130.904269][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.362'. [ 131.223730][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 131.382451][ T6588] team1: Mode changed to "loadbalance" [ 131.385521][ T6592] ax25_connect(): syz.2.369 uses autobind, please contact jreuter@yaina.de [ 131.401985][ T6584] netlink: 'syz.4.365': attribute type 1 has an invalid length. [ 131.422772][ T6584] netlink: 9384 bytes leftover after parsing attributes in process `syz.4.365'. [ 131.443498][ T6580] netlink: 'syz.4.365': attribute type 32 has an invalid length. [ 131.774449][ T6610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.995754][ T6619] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 132.155131][ T5243] Bluetooth: hci4: command 0x0405 tx timeout [ 132.228036][ T6625] netlink: 1 bytes leftover after parsing attributes in process `syz.3.375'. [ 133.281776][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.291527][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.466311][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 134.480950][ T6616] netlink: 'syz.2.371': attribute type 14 has an invalid length. [ 134.613462][ T6624] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.623624][ T6624] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.633022][ T6624] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.642701][ T6624] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.668703][ T6624] vxlan0: entered promiscuous mode [ 134.817350][ T6635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.825219][ T6635] IPv6: NLM_F_CREATE should be set when creating new route [ 134.832492][ T6635] IPv6: NLM_F_CREATE should be set when creating new route [ 134.930260][ T6631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.268467][ T6659] __nla_validate_parse: 3 callbacks suppressed [ 135.268489][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 135.823111][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 135.851273][ T6696] netlink: 'syz.4.394': attribute type 3 has an invalid length. [ 135.859556][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 135.870757][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 135.945403][ T6696] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.394'. [ 136.054602][ T6702] netlink: 120 bytes leftover after parsing attributes in process `syz.0.395'. [ 136.187665][ T6712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.227329][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.401'. [ 136.794610][ T6749] xt_TCPMSS: Only works on TCP SYN packets [ 137.121200][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.408'. [ 137.124932][ T6765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.226564][ T6760] bridge_slave_1: left allmulticast mode [ 137.285154][ T6760] bridge_slave_1: left promiscuous mode [ 137.291046][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.337273][ T6760] bridge2: port 1(bridge_slave_1) entered blocking state [ 137.344603][ T6760] bridge2: port 1(bridge_slave_1) entered disabled state [ 137.360826][ T6760] bridge_slave_1: entered allmulticast mode [ 137.378814][ T6760] bridge_slave_1: entered promiscuous mode [ 137.392480][ T6760] bridge2: port 1(bridge_slave_1) entered blocking state [ 137.399794][ T6760] bridge2: port 1(bridge_slave_1) entered forwarding state [ 137.424302][ T6768] bridge2: port 2(veth1_to_bond) entered blocking state [ 137.445070][ T6768] bridge2: port 2(veth1_to_bond) entered disabled state [ 137.462490][ T6768] veth1_to_bond: entered allmulticast mode [ 137.516677][ T6768] veth1_to_bond: entered promiscuous mode [ 137.575017][ T6768] bridge2: port 2(veth1_to_bond) entered blocking state [ 137.582274][ T6768] bridge2: port 2(veth1_to_bond) entered forwarding state [ 138.183114][ T6791] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 138.977115][ T6833] Dead loop on virtual device ipvlan1, fix it urgently! [ 139.083177][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.431'. [ 139.158268][ T6840] bridge1: port 1(veth1_to_bond) entered blocking state [ 139.168086][ T6840] bridge1: port 1(veth1_to_bond) entered disabled state [ 139.179582][ T6840] veth1_to_bond: entered allmulticast mode [ 139.188430][ T6840] veth1_to_bond: entered promiscuous mode [ 139.202218][ T6840] bridge1: port 1(veth1_to_bond) entered blocking state [ 139.209495][ T6840] bridge1: port 1(veth1_to_bond) entered forwarding state [ 139.483117][ T6859] netlink: 'syz.0.436': attribute type 25 has an invalid length. [ 139.559755][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.434'. [ 139.599390][ T6861] netlink: 'syz.0.436': attribute type 25 has an invalid length. [ 139.683104][ T6868] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 140.288073][ T6881] __nla_validate_parse: 5 callbacks suppressed [ 140.288099][ T6881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.439'. [ 140.550178][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 140.567118][ T6894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.598775][ T6897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.633813][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 140.810718][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.860807][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.450'. [ 140.945918][ T6921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'. [ 141.040050][ T6922] bridge_slave_1: left allmulticast mode [ 141.081732][ T6922] bridge_slave_1: left promiscuous mode [ 141.097646][ T6922] bridge2: port 1(bridge_slave_1) entered disabled state [ 141.162663][ T6922] bridge3: port 1(bridge_slave_1) entered blocking state [ 141.183118][ T6922] bridge3: port 1(bridge_slave_1) entered disabled state [ 141.227661][ T6922] bridge_slave_1: entered allmulticast mode [ 141.281676][ T6922] bridge_slave_1: entered promiscuous mode [ 141.333547][ T6922] bridge3: port 1(bridge_slave_1) entered blocking state [ 141.340855][ T6922] bridge3: port 1(bridge_slave_1) entered forwarding state [ 141.377849][ T6921] veth1_to_bond: left allmulticast mode [ 141.404401][ T6921] veth1_to_bond: left promiscuous mode [ 141.413248][ T6921] bridge2: port 2(veth1_to_bond) entered disabled state [ 141.956098][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.460'. [ 142.048574][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 142.098202][ T6973] x_tables: duplicate underflow at hook 1 [ 142.216590][ T6982] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 142.225293][ T6982] netlink: 'syz.3.464': attribute type 2 has an invalid length. [ 142.333631][ T6981] delete_channel: no stack [ 142.604727][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.466'. [ 142.658466][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 143.208770][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.254458][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.269517][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.283194][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.301779][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.342383][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.372695][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.432481][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.480219][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.537115][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.935126][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.481'. [ 144.028895][ T7059] netlink: 'syz.3.483': attribute type 21 has an invalid length. [ 144.316291][ T2596] wlan0: Trigger new scan to find an IBSS to join [ 144.495976][ T7074] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 144.971237][ T7091] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 144.987138][ T7091] netlink: 'syz.1.493': attribute type 2 has an invalid length. [ 145.357987][ T7105] __nla_validate_parse: 8 callbacks suppressed [ 145.358007][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 145.459808][ T7116] x_tables: duplicate underflow at hook 1 [ 145.740605][ T7125] Dead loop on virtual device ipvlan1, fix it urgently! [ 145.816340][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 146.017909][ T7140] Dead loop on virtual device ipvlan1, fix it urgently! [ 146.319082][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 146.405151][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'. [ 146.455954][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 146.476213][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 146.500488][ T7165] netlink: 27 bytes leftover after parsing attributes in process `syz.4.516'. [ 147.078438][ T7191] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 147.088473][ T7191] netlink: 'syz.1.526': attribute type 3 has an invalid length. [ 147.103815][ T7191] netlink: 216 bytes leftover after parsing attributes in process `syz.1.526'. [ 147.137388][ T7191] NCSI netlink: No device for ifindex 813332851 [ 147.207300][ T7200] bridge0: entered allmulticast mode [ 147.313016][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 147.344984][ T7205] netlink: 'syz.3.529': attribute type 1 has an invalid length. [ 147.360671][ T6260] wlan0: Trigger new scan to find an IBSS to join [ 147.379890][ T7205] netlink: 'syz.3.529': attribute type 1 has an invalid length. [ 147.412371][ T7205] netlink: 'syz.3.529': attribute type 2 has an invalid length. [ 147.424625][ T7205] netlink: 68 bytes leftover after parsing attributes in process `syz.3.529'. [ 147.497553][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 147.537558][ T7211] batman_adv: batadv1: Adding interface: netdevsim0 [ 147.562888][ T7211] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.594708][ T7211] batman_adv: batadv1: Interface activated: netdevsim0 [ 150.013846][ T7283] syz.0.561[7283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.014019][ T7283] syz.0.561[7283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.316540][ T11] wlan0: Creating new IBSS network, BSSID aa:fa:d5:14:d3:e9 [ 151.708887][ T7311] syzkaller0: entered promiscuous mode [ 151.714576][ T7311] syzkaller0: entered allmulticast mode [ 151.900385][ T7328] __nla_validate_parse: 1 callbacks suppressed [ 151.900409][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 152.132456][ T7337] netlink: 'syz.1.584': attribute type 11 has an invalid length. [ 152.231822][ T7341] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 153.758312][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 154.327418][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 154.546324][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.4.589'. [ 154.555790][ T7355] bridge: RTM_NEWNEIGH with invalid ether address [ 154.556407][ T7355] bridge: RTM_NEWNEIGH with invalid ether address [ 154.611649][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.589'. [ 154.613091][ T7361] ip6t_rpfilter: unknown options [ 155.134246][ T7373] xt_CT: No such helper "netbios-ns" [ 155.391594][ T7393] netlink: 'syz.1.600': attribute type 4 has an invalid length. [ 155.415582][ T7394] netlink: 'syz.1.600': attribute type 4 has an invalid length. [ 155.734524][ T7406] : renamed from ipvlan1 (while UP) [ 155.955455][ T7413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.607'. [ 156.323593][ T7432] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 156.359488][ T7420] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 156.401152][ T7429] netlink: 2020 bytes leftover after parsing attributes in process `syz.2.610'. [ 156.557533][ T7432] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 156.577968][ T7432] netlink: 'syz.4.612': attribute type 4 has an invalid length. [ 156.586737][ T7432] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.612'. [ 156.597186][ T7436] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 156.607969][ T7436] netlink: 'syz.4.612': attribute type 4 has an invalid length. [ 156.610894][ T7441] openvswitch: netlink: Unknown key attributes 2 [ 156.622422][ T7436] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.612'. [ 156.669927][ T7442] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 156.696884][ T7442] netlink: 'syz.3.615': attribute type 2 has an invalid length. [ 156.714455][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 156.912419][ T7452] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 156.952250][ T7452] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.984688][ T7452] bond0: (slave team0): Enslaving as an active interface with an up link [ 157.099873][ T7456] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 157.127532][ T7456] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.620'. [ 157.165674][ T7456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.620'. [ 157.291746][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 157.373818][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 158.116797][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.630'. [ 158.160706][ T7494] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.275077][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 158.297154][ T7466] netlink: 11 bytes leftover after parsing attributes in process `syz.4.623'. [ 158.309223][ T7466] netlink: 11 bytes leftover after parsing attributes in process `syz.4.623'. [ 158.439779][ T7508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.458499][ T7508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.475480][ T7508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.511969][ T7508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.944706][ T5287] IPVS: starting estimator thread 0... [ 159.115314][ T7527] IPVS: using max 15 ests per chain, 36000 per kthread [ 159.235485][ T5287] IPVS: starting estimator thread 0... [ 159.335483][ T7540] IPVS: using max 18 ests per chain, 43200 per kthread [ 159.517311][ T7550] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.646'. [ 159.990689][ T7572] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 160.028698][ T7578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.653'. [ 161.207044][ T7609] validate_nla: 2 callbacks suppressed [ 161.207067][ T7609] netlink: 'syz.3.663': attribute type 25 has an invalid length. [ 161.270071][ T7608] netlink: 'syz.3.663': attribute type 2 has an invalid length. [ 162.080160][ T5248] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 162.257557][ T7646] __nla_validate_parse: 1 callbacks suppressed [ 162.257577][ T7646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.671'. [ 163.753001][ T7628] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.789565][ T7635] batadv0: entered promiscuous mode [ 163.844856][ T7635] batadv_slave_0: entered promiscuous mode [ 163.868366][ T7635] batadv_slave_0: left promiscuous mode [ 163.894936][ T7635] batadv0: left promiscuous mode [ 163.982863][ T7637] veth1: entered promiscuous mode [ 164.010532][ T7637] veth1: left promiscuous mode [ 164.035971][ T7641] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 164.051561][ T7641] netlink: 'syz.1.670': attribute type 2 has an invalid length. [ 164.122347][ T7655] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 164.207231][ T7655] bond1: entered promiscuous mode [ 164.464351][ T7672] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.679'. [ 164.525546][ T7672] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 164.785512][ T7687] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 164.935756][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.972212][ T7698] netlink: 'syz.3.687': attribute type 2 has an invalid length. [ 165.007604][ T7698] netlink: 'syz.3.687': attribute type 1 has an invalid length. [ 165.299077][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 165.319050][ T7708] IPv6: NLM_F_REPLACE set, but no existing node found! [ 165.398469][ T7711] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 165.922073][ T7736] netlink: 'syz.0.699': attribute type 6 has an invalid length. [ 166.019831][ T7740] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.700'. [ 166.095986][ T7740] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.700'. [ 166.141941][ T7740] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.700'. [ 166.162976][ T7746] netlink: 188 bytes leftover after parsing attributes in process `syz.1.701'. [ 166.179577][ T7746] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 166.284454][ T7750] netlink: 9 bytes leftover after parsing attributes in process `syz.3.703'. [ 166.347832][ T7750] 0·: renamed from hsr_slave_1 (while UP) [ 166.369569][ T7750] 0·: entered allmulticast mode [ 166.404649][ T7750] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 166.454197][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.704'. [ 166.566793][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.705'. [ 166.678114][ T7761] macsec0: entered promiscuous mode [ 166.698884][ T7761] macsec0: left promiscuous mode [ 166.848226][ T7773] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 166.875475][ T5248] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 166.897710][ T7773] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 166.910776][ T7773] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 166.944711][ T7764] netlink: 'syz.0.708': attribute type 2 has an invalid length. [ 167.207038][ T7786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.444009][ T7795] netlink: 'syz.2.716': attribute type 11 has an invalid length. [ 167.461308][ T7795] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 167.470864][ T7795] __nla_validate_parse: 2 callbacks suppressed [ 167.470881][ T7795] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.716'. [ 167.686386][ T7802] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.003074][ T7815] gtp0: entered promiscuous mode [ 168.014457][ T7815] gtp0: entered allmulticast mode [ 168.178145][ T7826] macvtap0: entered promiscuous mode [ 168.202127][ T7826] macvtap0: left promiscuous mode [ 168.241428][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 168.254610][ T7829] netlink: 592 bytes leftover after parsing attributes in process `syz.4.724'. [ 168.393588][ T7829] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 168.470248][ T7833] netlink: 'syz.0.727': attribute type 11 has an invalid length. [ 168.576464][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 168.607403][ T7838] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 168.841484][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.731'. [ 169.217575][ T7853] IPVS: Error connecting to the multicast addr [ 169.959984][ T5248] Bluetooth: hci4: link tx timeout [ 169.966201][ T5248] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.987241][ T5248] Bluetooth: hci4: link tx timeout [ 169.992474][ T5248] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.000940][ T5248] Bluetooth: hci4: link tx timeout [ 170.008282][ T5248] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.138947][ T7891] IPVS: Scheduler module ip_vs_sip not found [ 170.185776][ T7901] IPVS: length: 8 != 3945546880 [ 170.579857][ T7920] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.750'. [ 170.721638][ T7926] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.752'. [ 170.732382][ T7926] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 170.743182][ T7928] netlink: 'syz.0.754': attribute type 7 has an invalid length. [ 170.753443][ T7928] netlink: 'syz.0.754': attribute type 39 has an invalid length. [ 170.787981][ T7928] bridge2: port 1(gretap1) entered blocking state [ 170.802425][ T7928] bridge2: port 1(gretap1) entered disabled state [ 170.811726][ T7928] gretap1: entered allmulticast mode [ 170.828868][ T7928] gretap1: entered promiscuous mode [ 170.858014][ T7928] netlink: 'syz.0.754': attribute type 7 has an invalid length. [ 171.065950][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 171.614637][ T7964] netlink: 636 bytes leftover after parsing attributes in process `syz.3.764'. [ 171.630391][ T7966] netlink: 636 bytes leftover after parsing attributes in process `syz.3.764'. [ 171.743424][ T7969] ax25_connect(): syz.0.765 uses autobind, please contact jreuter@yaina.de [ 171.755170][ T7971] syz.2.766[7971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.755343][ T7971] syz.2.766[7971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.828040][ T7976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.846756][ T7976] IPv6: NLM_F_CREATE should be set when creating new route [ 171.854152][ T7976] IPv6: NLM_F_CREATE should be set when creating new route [ 171.861510][ T7976] IPv6: NLM_F_CREATE should be set when creating new route [ 171.996127][ T5248] Bluetooth: hci4: command 0x0405 tx timeout [ 172.125486][ T7982] validate_nla: 5 callbacks suppressed [ 172.125508][ T7982] netlink: 'syz.3.769': attribute type 30 has an invalid length. [ 172.358396][ T7996] netlink: 'syz.4.776': attribute type 9 has an invalid length. [ 172.609345][ T8011] __nla_validate_parse: 3 callbacks suppressed [ 172.609367][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 173.107089][ T8036] netlink: 36 bytes leftover after parsing attributes in process `syz.0.781'. [ 173.516408][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 173.587278][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 173.943807][ T8077] netlink: 830 bytes leftover after parsing attributes in process `syz.3.796'. [ 174.323670][ T8099] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 174.347544][ T8099] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.802'. [ 174.379667][ T8099] netlink: 'syz.0.802': attribute type 2 has an invalid length. [ 174.408662][ T8099] netlink: 185 bytes leftover after parsing attributes in process `syz.0.802'. [ 175.114420][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 175.155418][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 175.203449][ T8139] trusted_key: syz.2.815 sent an empty control message without MSG_MORE. [ 175.342167][ T8141] netlink: 'syz.1.816': attribute type 7 has an invalid length. [ 175.393357][ T8141] sysfs: cannot create duplicate filename '/class/ieee80211/†< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼‹' [ 175.405836][ T8145] raw_sendmsg: syz.3.818 forgot to set AF_INET. Fix it! [ 175.418261][ T8141] CPU: 1 UID: 0 PID: 8141 Comm: syz.1.816 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 175.428927][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 175.439206][ T8141] Call Trace: [ 175.442076][ T8152] netlink: 'syz.1.816': attribute type 7 has an invalid length. [ 175.442504][ T8141] [ 175.453119][ T8141] dump_stack_lvl+0x241/0x360 [ 175.457837][ T8141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.463052][ T8141] ? __pfx__printk+0x10/0x10 [ 175.467653][ T8141] ? sysfs_warn_dup+0x51/0xa0 [ 175.472360][ T8141] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 175.477932][ T8141] sysfs_warn_dup+0x8e/0xa0 [ 175.482464][ T8141] sysfs_do_create_link_sd+0xbe/0x110 [ 175.487874][ T8141] device_add_class_symlinks+0x1c5/0x250 [ 175.493537][ T8141] device_add+0x553/0xbf0 [ 175.497924][ T8141] wiphy_register+0x1d3f/0x2b30 [ 175.502901][ T8141] ? __pfx_wiphy_register+0x10/0x10 [ 175.508112][ T8141] ? minstrel_ht_alloc+0x72b/0x860 [ 175.513248][ T8141] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 175.519334][ T8141] ieee80211_register_hw+0x30fb/0x3e10 [ 175.524834][ T8141] ? ieee80211_register_hw+0x1531/0x3e10 [ 175.530505][ T8141] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 175.536344][ T8141] ? __asan_memset+0x23/0x50 [ 175.540968][ T8141] ? __hrtimer_init+0x170/0x250 [ 175.545841][ T8141] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 175.551622][ T8141] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 175.557706][ T8141] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 175.564305][ T8141] ? kstrndup+0x5c/0xb0 [ 175.568479][ T8141] ? __asan_memcpy+0x40/0x70 [ 175.573092][ T8141] hwsim_new_radio_nl+0xece/0x2290 [ 175.578254][ T8141] ? __pfx___nla_validate_parse+0x10/0x10 [ 175.583993][ T8141] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 175.589591][ T8141] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 175.595965][ T8141] genl_rcv_msg+0xb14/0xec0 [ 175.600513][ T8141] ? mark_lock+0x9a/0x350 [ 175.604907][ T8141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.609977][ T8141] ? __pfx_lock_acquire+0x10/0x10 [ 175.615017][ T8141] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 175.620582][ T8141] ? __pfx___might_resched+0x10/0x10 [ 175.625896][ T8141] netlink_rcv_skb+0x1e3/0x430 [ 175.630688][ T8141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.635728][ T8141] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.641034][ T8141] ? __netlink_deliver_tap+0x77e/0x7c0 [ 175.646529][ T8141] genl_rcv+0x28/0x40 [ 175.650527][ T8141] netlink_unicast+0x7f6/0x990 [ 175.655316][ T8141] ? __pfx_netlink_unicast+0x10/0x10 [ 175.661076][ T8141] ? __virt_addr_valid+0x183/0x530 [ 175.666308][ T8141] ? __check_object_size+0x49c/0x900 [ 175.671628][ T8141] ? bpf_lsm_netlink_send+0x9/0x10 [ 175.676768][ T8141] netlink_sendmsg+0x8e4/0xcb0 [ 175.681560][ T8141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.686881][ T8141] ? __import_iovec+0x536/0x820 [ 175.691743][ T8141] ? aa_sock_msg_perm+0x91/0x160 [ 175.696692][ T8141] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 175.701990][ T8141] ? security_socket_sendmsg+0x87/0xb0 [ 175.707467][ T8141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.712762][ T8141] __sock_sendmsg+0x221/0x270 [ 175.717467][ T8141] ____sys_sendmsg+0x525/0x7d0 [ 175.722340][ T8141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.727662][ T8141] __sys_sendmsg+0x2b0/0x3a0 [ 175.732269][ T8141] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.737436][ T8141] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.743867][ T8141] ? do_syscall_64+0x100/0x230 [ 175.748648][ T8141] ? do_syscall_64+0xb6/0x230 [ 175.753423][ T8141] do_syscall_64+0xf3/0x230 [ 175.757971][ T8141] ? clear_bhb_loop+0x35/0x90 [ 175.762685][ T8141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.768636][ T8141] RIP: 0033:0x7f73a5d7def9 [ 175.773069][ T8141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.792716][ T8141] RSP: 002b:00007f73a6c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.801154][ T8141] RAX: ffffffffffffffda RBX: 00007f73a5f35f80 RCX: 00007f73a5d7def9 [ 175.809144][ T8141] RDX: 0000000000000040 RSI: 0000000020000080 RDI: 0000000000000003 [ 175.817144][ T8141] RBP: 00007f73a5df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 175.825141][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.833131][ T8141] R13: 0000000000000000 R14: 00007f73a5f35f80 R15: 00007ffd59dd7c88 [ 175.841157][ T8141] [ 175.856805][ T8155] netlink: 'syz.4.817': attribute type 3 has an invalid length. [ 175.864519][ T8155] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.817'. [ 176.152073][ T8162] netlink: 'syz.2.822': attribute type 3 has an invalid length. [ 176.225753][ T8162] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 176.268304][ T8162] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 176.539091][ T8182] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 176.667490][ T8181] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 176.828804][ T8198] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 177.358998][ T8228] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.523616][ T8234] bridge0: entered allmulticast mode [ 177.550998][ T8234] pim6reg: entered allmulticast mode [ 178.419516][ T8249] x_tables: duplicate underflow at hook 1 [ 178.429961][ T6260] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 179.192717][ T8275] __nla_validate_parse: 3 callbacks suppressed [ 179.192740][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'. [ 179.383494][ T8283] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 179.588903][ T8289] netlink: 'syz.0.857': attribute type 21 has an invalid length. [ 179.606367][ T8289] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.667146][ T8293] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.859'. [ 179.678273][ T8293] netlink: 105 bytes leftover after parsing attributes in process `syz.1.859'. [ 179.723293][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.854'. [ 179.799090][ T8295] netlink: 'syz.3.854': attribute type 4 has an invalid length. [ 180.079435][ T8310] Bluetooth: hci3: invalid len left 7, exp >= 55 [ 180.406508][ T8322] xt_CT: No such helper "netbios-ns" [ 180.563018][ T8327] netlink: set zone limit has 8 unknown bytes [ 180.639462][ T8313] syzkaller0: entered promiscuous mode [ 180.648555][ T8313] syzkaller0: entered allmulticast mode [ 181.115749][ T8353] syzkaller1: entered promiscuous mode [ 181.153525][ T8353] syzkaller1: entered allmulticast mode [ 181.235800][ T8353] netlink: 'syz.1.874': attribute type 21 has an invalid length. [ 181.256857][ T8353] netlink: 156 bytes leftover after parsing attributes in process `syz.1.874'. [ 181.699647][ T8375] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 181.724337][ T8375] netlink: 512 bytes leftover after parsing attributes in process `syz.2.881'. [ 182.005217][ T8376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.433511][ T8396] netlink: 'syz.1.885': attribute type 21 has an invalid length. [ 182.443247][ T8396] netlink: 132 bytes leftover after parsing attributes in process `syz.1.885'. [ 182.464401][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.886'. [ 182.506188][ T8399] workqueue: Failed to create a rescuer kthread for wq "€": -EINTR [ 182.532226][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.887'. [ 182.693683][ T8412] batadv_slave_1: entered promiscuous mode [ 182.709940][ T8412] batadv_slave_1: entered allmulticast mode [ 183.432479][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 183.462338][ T8447] netem: change failed [ 183.811861][ T8471] netlink: zone id is out of range [ 186.372549][ T8504] __nla_validate_parse: 3 callbacks suppressed [ 186.372570][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.914'. [ 186.542482][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.554257][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'. [ 186.560387][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.599484][ T8514] vxcan1: entered allmulticast mode [ 186.974160][ T8538] Bluetooth: hci3: invalid len left 7, exp >= 117 [ 187.182589][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'. [ 187.581317][ T8566] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 187.592481][ T8566] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.934'. [ 187.613039][ T8566] netlink: 'syz.4.934': attribute type 8 has an invalid length. [ 187.766564][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 187.996853][ T8585] netlink: 'syz.0.941': attribute type 3 has an invalid length. [ 188.030695][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'. [ 188.045908][ T8590] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 188.078679][ T8590] block nbd1: not configured, cannot reconfigure [ 188.590024][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.948'. [ 188.947849][ T8630] netlink: 52 bytes leftover after parsing attributes in process `syz.0.952'. [ 189.048645][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 189.222510][ T8640] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.954'. [ 189.260604][ T8640] openvswitch: netlink: Actions may not be safe on all matching packets [ 189.566144][ T8650] netlink: 'syz.0.957': attribute type 32 has an invalid length. [ 190.540902][ T8689] syz_tun: entered promiscuous mode [ 190.585752][ T8689] vlan2: entered promiscuous mode [ 190.637203][ T8689] syz_tun: left promiscuous mode [ 191.116249][ T8718] vlan2: entered allmulticast mode [ 191.630334][ T8737] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 191.633714][ T8744] __nla_validate_parse: 4 callbacks suppressed [ 191.633734][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 191.656322][ T8746] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.980'. [ 191.673089][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 191.673242][ T8737] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.977'. [ 191.697842][ T8744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 191.716926][ T8746] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 191.775130][ T8737] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 192.174362][ T8761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.984'. [ 192.486065][ T8592] syz.4.942: vmalloc error: size 3194880, failed to allocated page array size 6240, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 192.589225][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.4.942 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 192.599944][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 192.610043][ T8592] Call Trace: [ 192.613366][ T8592] [ 192.616341][ T8592] dump_stack_lvl+0x241/0x360 [ 192.621112][ T8592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.626362][ T8592] ? __pfx__printk+0x10/0x10 [ 192.631005][ T8592] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 192.637556][ T8592] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 192.644213][ T8592] warn_alloc+0x278/0x410 [ 192.648622][ T8592] ? __pfx_warn_alloc+0x10/0x10 [ 192.653549][ T8592] ? ip_set_sockfn_get+0x1bb/0xd90 [ 192.658740][ T8592] ? __get_vm_area_node+0x23d/0x270 [ 192.664006][ T8592] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 192.670039][ T8592] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 192.676123][ T8592] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.682521][ T8592] ? ip_set_sockfn_get+0x1bb/0xd90 [ 192.687790][ T8592] ? __get_vm_area_node+0x23d/0x270 [ 192.693076][ T8592] __vmalloc_node_range_noprof+0x5bc/0x1400 [ 192.699209][ T8592] ? ip_set_sockfn_get+0x1bb/0xd90 [ 192.704423][ T8592] ? __pfx_lock_acquire+0x10/0x10 [ 192.709533][ T8592] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.716004][ T8592] ? apparmor_capable+0x13b/0x1b0 [ 192.721148][ T8592] ? bpf_lsm_capable+0x9/0x10 [ 192.725877][ T8592] ? security_capable+0x90/0xb0 [ 192.730783][ T8592] ? ip_set_sockfn_get+0x1bb/0xd90 [ 192.735959][ T8592] vmalloc_noprof+0x79/0x90 [ 192.740518][ T8592] ? ip_set_sockfn_get+0x1bb/0xd90 [ 192.745724][ T8592] ip_set_sockfn_get+0x1bb/0xd90 [ 192.750725][ T8592] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.756761][ T8592] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 192.762281][ T8592] ? __pfx_lock_release+0x10/0x10 [ 192.767365][ T8592] ? module_put+0x13a/0x2d0 [ 192.771920][ T8592] nf_getsockopt+0x299/0x2c0 [ 192.776572][ T8592] ip_getsockopt+0x222/0x2e0 [ 192.781210][ T8592] ? __pfx_ip_getsockopt+0x10/0x10 [ 192.786370][ T8592] ? __pfx___might_resched+0x10/0x10 [ 192.791708][ T8592] dccp_getsockopt+0x163/0x1910 [ 192.796606][ T8592] ? __pfx_dccp_getsockopt+0x10/0x10 [ 192.801944][ T8592] ? __might_fault+0xc6/0x120 [ 192.806673][ T8592] ? sock_common_getsockopt+0x2e/0xb0 [ 192.812099][ T8592] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 192.818060][ T8592] do_sock_getsockopt+0x3c4/0x7e0 [ 192.823147][ T8592] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 192.828744][ T8592] ? __fget_files+0x3f6/0x470 [ 192.833489][ T8592] __sys_getsockopt+0x271/0x330 [ 192.838405][ T8592] ? __pfx___sys_getsockopt+0x10/0x10 [ 192.843840][ T8592] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.850229][ T8592] ? do_syscall_64+0x100/0x230 [ 192.855050][ T8592] __x64_sys_getsockopt+0xb5/0xd0 [ 192.860125][ T8592] do_syscall_64+0xf3/0x230 [ 192.864681][ T8592] ? clear_bhb_loop+0x35/0x90 [ 192.869427][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.875377][ T8592] RIP: 0033:0x7fb1b417def9 [ 192.879839][ T8592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.899489][ T8592] RSP: 002b:00007fb1b4fec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 192.907957][ T8592] RAX: ffffffffffffffda RBX: 00007fb1b4336058 RCX: 00007fb1b417def9 [ 192.916064][ T8592] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000078 [ 192.924092][ T8592] RBP: 00007fb1b41f0b76 R08: 00000000200000c0 R09: 0000000000000000 [ 192.932110][ T8592] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.940118][ T8592] R13: 0000000000000000 R14: 00007fb1b4336058 R15: 00007ffdcd5a2cb8 [ 192.948136][ T8592] [ 192.988132][ T8592] Mem-Info: [ 192.991352][ T8592] active_anon:7199 inactive_anon:0 isolated_anon:0 [ 192.991352][ T8592] active_file:1284 inactive_file:38225 isolated_file:0 [ 192.991352][ T8592] unevictable:768 dirty:82 writeback:25 [ 192.991352][ T8592] slab_reclaimable:8905 slab_unreclaimable:98514 [ 192.991352][ T8592] mapped:20896 shmem:4112 pagetables:826 [ 192.991352][ T8592] sec_pagetables:0 bounce:0 [ 192.991352][ T8592] kernel_misc_reclaimable:0 [ 192.991352][ T8592] free:1311458 free_pcp:852 free_cma:0 [ 193.017771][ T8785] netlink: 6 bytes leftover after parsing attributes in process `syz.3.991'. [ 193.041283][ T8592] Node 0 active_anon:28896kB inactive_anon:0kB active_file:5136kB inactive_file:152828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83584kB dirty:328kB writeback:100kB shmem:14912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11052kB pagetables:3304kB sec_pagetables:0kB all_unreclaimable? no [ 193.083791][ T8592] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 193.115867][ T8592] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.144248][ T8592] lowmem_reserve[]: 0 2467 2468 0 0 [ 193.150726][ T8592] Node 0 DMA32 free:1277964kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:28860kB inactive_anon:0kB active_file:5136kB inactive_file:152020kB unevictable:1536kB writepending:328kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:2828kB local_pcp:1508kB free_cma:0kB [ 193.223786][ T8592] lowmem_reserve[]: 0 0 0 0 0 [ 193.245491][ T8592] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:808kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 193.377300][ T8592] lowmem_reserve[]: 0 0 0 0 0 [ 193.382126][ T8592] Node 1 Normal free:3952192kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1196kB local_pcp:0kB free_cma:0kB [ 193.431418][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 193.442941][ T8592] lowmem_reserve[]: 0 0 0 0 0 [ 193.450285][ T8592] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.466839][ T8592] Node 0 DMA32: 297*4kB (ME) 281*8kB (UME) 126*16kB (UME) 117*32kB (UME) 42*64kB (UME) 24*128kB (UM) 10*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 7*2048kB (UME) 307*4096kB (M) = 1293420kB [ 193.552573][ T8592] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 193.575473][ T8592] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 0*64kB 0*128kB 2*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (U) 964*4096kB (M) = 3952192kB [ 193.617165][ T8804] Cannot find add_set index 0 as target [ 193.623327][ T8592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.643970][ T8592] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.659212][ T8592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.668842][ T8805] Cannot find add_set index 0 as target [ 193.685736][ T8592] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.701590][ T8808] netlink: 'syz.2.997': attribute type 4 has an invalid length. [ 193.706348][ T8592] 40803 total pagecache pages [ 193.717864][ T8592] 0 pages in swap cache [ 193.722210][ T8592] Free swap = 124996kB [ 193.757018][ T8592] Total swap = 124996kB [ 193.763196][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.997'. [ 193.766870][ T8592] 2097051 pages RAM [ 193.787019][ T8592] 0 pages HighMem/MovableOnly [ 193.811854][ T8592] 426967 pages reserved [ 193.832773][ T8592] 0 pages cma reserved [ 193.906675][ T8814] netlink: 'syz.3.998': attribute type 11 has an invalid length. [ 194.100273][ T8818] netlink: 'syz.1.999': attribute type 4 has an invalid length. [ 194.154226][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 194.163714][ T8820] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 194.236319][ T8820] bridge0: port 3(wlan1) entered blocking state [ 194.262119][ T8820] bridge0: port 3(wlan1) entered disabled state [ 194.273441][ T8820] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 194.293262][ T8820] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 194.719566][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.727059][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.969045][ T8847] netlink: 'syz.2.1008': attribute type 11 has an invalid length. [ 195.016529][ T8846] netlink: 'syz.2.1008': attribute type 11 has an invalid length. [ 195.031712][ T8854] netlink: 'syz.1.1010': attribute type 11 has an invalid length. [ 195.393834][ T8867] netlink: 'syz.1.1013': attribute type 5 has an invalid length. [ 195.439083][ T8875] delete_channel: no stack [ 195.460140][ T8867] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.469143][ T8867] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.478063][ T8867] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.487045][ T8867] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.517752][ T8867] vxlan0: entered promiscuous mode [ 196.150945][ T8897] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 197.165943][ T8918] Bluetooth: hci3: invalid len left 7, exp >= 11 [ 197.516769][ T8930] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 197.530077][ T8930] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 197.689690][ T8933] vxcan5: entered allmulticast mode [ 198.333816][ T8968] netlink: 'syz.1.1048': attribute type 21 has an invalid length. [ 198.344392][ T8968] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 199.158750][ T8995] __nla_validate_parse: 9 callbacks suppressed [ 199.158775][ T8995] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1054'. [ 199.502998][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1061'. [ 199.516494][ T9013] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1061'. [ 199.764011][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1064'. [ 200.195328][ T9051] team0: entered promiscuous mode [ 200.202784][ T9051] team_slave_0: entered promiscuous mode [ 200.212398][ T9051] team_slave_1: entered promiscuous mode [ 200.239181][ T9051] team_slave_0: entered allmulticast mode [ 200.298895][ T9051] team0: Port device team_slave_0 removed [ 200.310177][ T9054] can: request_module (can-proto-0) failed. [ 200.320754][ T9056] lo: entered promiscuous mode [ 200.331641][ T9048] team0: left promiscuous mode [ 200.347817][ T9048] team_slave_1: left promiscuous mode [ 200.438186][ T9063] geneve3: entered promiscuous mode [ 200.455385][ T9063] geneve3: entered allmulticast mode [ 200.536154][ T9047] lo: left promiscuous mode [ 200.913963][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1081'. [ 201.116176][ T9094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1086'. [ 201.356051][ T9107] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1090'. [ 201.416970][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 201.423007][ T9115] Dead loop on virtual device 1, fix it urgently! [ 201.455196][ T9117] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1090'. [ 201.474178][ T9115] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 201.665767][ T9131] netlink: 'syz.4.1097': attribute type 3 has an invalid length. [ 201.679905][ T9131] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1097'. [ 201.797510][ T9140] Unsupported ieee802154 address type: 0 [ 202.228587][ T9159] bridge3: entered promiscuous mode [ 202.234042][ T9159] bridge3: entered allmulticast mode [ 202.273654][ T9159] team0: Port device bridge3 added [ 202.292721][ T9161] netlink: 'syz.3.1105': attribute type 10 has an invalid length. [ 203.061282][ T9196] netlink: set zone limit has 8 unknown bytes [ 203.217314][ T9207] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 203.692037][ T9234] ip6_vti0: mtu greater than device maximum [ 203.893567][ T9241] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 203.911315][ T9240] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 203.942925][ T9248] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 204.127783][ T9256] ip6tnl0: entered promiscuous mode [ 204.228936][ T9255] ip6tnl0: left promiscuous mode [ 204.510191][ T9274] __nla_validate_parse: 15 callbacks suppressed [ 204.510214][ T9274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1138'. [ 204.539457][ T9277] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 204.584449][ T9278] netlink: 'syz.3.1139': attribute type 2 has an invalid length. [ 204.606174][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 204.624090][ T9278] sctp: [Deprecated]: syz.3.1139 (pid 9278) Use of int in maxseg socket option. [ 204.624090][ T9278] Use struct sctp_assoc_value instead [ 204.972279][ T9296] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1147'. [ 204.984661][ T9296] openvswitch: netlink: Actions may not be safe on all matching packets [ 205.021093][ T9299] netlink: 'syz.0.1148': attribute type 3 has an invalid length. [ 205.029699][ T9299] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1148'. [ 205.154025][ T9306] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1149'. [ 205.167192][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1151'. [ 205.368851][ T9314] batadv_slave_1: entered allmulticast mode [ 205.384185][ T9314] batadv_slave_1: left allmulticast mode [ 205.397757][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 205.438892][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'. [ 205.463837][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 205.543343][ T9327] sch_tbf: burst 5729 is lower than device lo mtu (65550) ! [ 205.727353][ T9333] Dead loop on virtual device ipvlan1, fix it urgently! [ 205.817514][ T9339] batadv0: entered promiscuous mode [ 205.880203][ T9339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.434077][ T9333] infiniband syz2: set active [ 206.448589][ T9333] infiniband syz2: added bond_slave_0 [ 206.477843][ T9333] syz2: qp#16 rxe_init_sq: Unable to allocate send queue [ 206.494431][ T9369] wg1: entered promiscuous mode [ 206.503154][ T9333] syz2: rxe_create_qp: returned err = -12 [ 206.525472][ T9333] infiniband syz2: Couldn't create ib_mad QP1 [ 206.544281][ T9333] infiniband syz2: Couldn't open port 1 [ 206.632825][ T9333] RDS/IB: syz2: added [ 206.641005][ T9333] smc: adding ib device syz2 with port count 1 [ 206.657253][ T9333] smc: ib device syz2 port 1 has pnetid [ 206.948281][ T9383] netlink: 'syz.3.1173': attribute type 34 has an invalid length. [ 207.035051][ T5253] Bluetooth: hci2: command 0x0406 tx timeout [ 207.039881][ T5251] Bluetooth: hci1: command 0x0406 tx timeout [ 207.041859][ T5253] Bluetooth: hci3: command 0x0406 tx timeout [ 207.388881][ T9401] netlink: 'syz.1.1179': attribute type 39 has an invalid length. [ 207.411525][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 207.427764][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.212476][ T9429] pim6reg: entered allmulticast mode [ 208.266084][ T9429] pim6reg: left allmulticast mode [ 208.972265][ T9381] lo speed is unknown, defaulting to 1000 [ 208.994288][ T9381] lo speed is unknown, defaulting to 1000 [ 209.011350][ T9381] lo speed is unknown, defaulting to 1000 [ 209.511290][ T9381] infiniband syz0: set active [ 209.516705][ T8061] lo speed is unknown, defaulting to 1000 [ 209.535324][ T9381] infiniband syz0: added lo [ 209.553853][ T9381] syz0: rxe_create_cq: returned err = -12 [ 209.585979][ T9381] infiniband syz0: Couldn't create ib_mad CQ [ 209.612652][ T9381] infiniband syz0: Couldn't open port 1 [ 209.687062][ T9381] RDS/IB: syz0: added [ 209.694059][ T9381] smc: adding ib device syz0 with port count 1 [ 209.702974][ T9381] smc: ib device syz0 port 1 has pnetid [ 209.733369][ T8061] lo speed is unknown, defaulting to 1000 [ 209.766680][ T9381] lo speed is unknown, defaulting to 1000 [ 209.806246][ T9503] tipc: Failed to obtain node identity [ 209.811823][ T9503] tipc: Enabling of bearer rejected, failed to enable media [ 209.929199][ T9509] __nla_validate_parse: 2 callbacks suppressed [ 209.929221][ T9509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1208'. [ 209.977128][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 210.019030][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'. [ 210.031932][ T9508] bridge0: port 4(veth0_to_bridge) entered blocking state [ 210.056765][ T9508] bridge0: port 4(veth0_to_bridge) entered disabled state [ 210.069086][ T9508] veth0_to_bridge: entered allmulticast mode [ 210.077194][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 210.097619][ T2596] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 210.111764][ T9508] veth0_to_bridge: entered promiscuous mode [ 210.119302][ T9508] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.143417][ T9508] bridge0: port 4(veth0_to_bridge) entered blocking state [ 210.151376][ T9508] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 210.172103][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.210630][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.240569][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.270201][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.285616][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.298840][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.309260][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.321384][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.336638][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 210.382426][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1210'. [ 210.401826][ T9381] lo speed is unknown, defaulting to 1000 [ 210.674283][ T9527] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.710851][ T9527] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.736276][ T9532] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.752682][ T9527] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.784395][ T9527] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.804528][ T9527] geneve3: entered promiscuous mode [ 210.814602][ T9527] geneve3: entered allmulticast mode [ 211.004160][ T9381] lo speed is unknown, defaulting to 1000 [ 211.120484][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 211.576376][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1221'. [ 211.661392][ T9381] lo speed is unknown, defaulting to 1000 [ 211.837240][ T9561] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1223'. [ 211.936740][ T9561] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 211.996083][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 212.034291][ T9573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.113158][ T9576] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 212.139177][ T9572] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 212.232747][ T9381] lo speed is unknown, defaulting to 1000 [ 212.471792][ T9595] netlink: 'syz.0.1233': attribute type 7 has an invalid length. [ 212.650715][ T9604] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.660659][ T9604] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.670167][ T9604] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.679778][ T9604] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.697935][ T9604] vxlan0: entered promiscuous mode [ 212.703143][ T9604] vxlan0: entered allmulticast mode [ 212.762511][ T9604] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.772196][ T9604] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.781837][ T9604] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.791454][ T9604] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.980773][ T9614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1238'. [ 213.061081][ T9616] xt_cgroup: invalid path, errno=-2 [ 213.424400][ T46] IPVS: starting estimator thread 0... [ 213.515316][ T9632] IPVS: using max 17 ests per chain, 40800 per kthread [ 213.737845][ T9643] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 214.295025][ T9669] netlink: 'syz.0.1258': attribute type 30 has an invalid length. [ 214.303097][ T9669] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 214.328840][ T9669] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 214.866235][ T9709] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 215.266330][ T9728] IPVS: length: 8 != 3945546880 [ 215.473237][ T9739] __nla_validate_parse: 6 callbacks suppressed [ 215.473259][ T9739] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1278'. [ 215.682041][ T9746] netlink: 'syz.2.1280': attribute type 18 has an invalid length. [ 215.832161][ T9757] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1283'. [ 215.911037][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1284'. [ 216.191703][ T9775] netlink: 'syz.1.1290': attribute type 49 has an invalid length. [ 216.258900][ T9777] netlink: 130084 bytes leftover after parsing attributes in process `syz.4.1291'. [ 216.408327][ T9779] tipc: Enabling of bearer rejected, media not registered [ 216.482402][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 216.998492][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 217.039292][ T9816] macvtap1: entered promiscuous mode [ 217.053503][ T9816] erspan0: entered promiscuous mode [ 217.071007][ T9816] macvtap1: entered allmulticast mode [ 217.077074][ T9816] erspan0: entered allmulticast mode [ 217.250789][ T9826] netlink: 'syz.1.1304': attribute type 4 has an invalid length. [ 217.260344][ T9827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1306'. [ 217.440012][ T9831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1308'. [ 217.598278][ T9841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.623696][ T9844] netlink: 'syz.4.1312': attribute type 7 has an invalid length. [ 217.649420][ T9844] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1312'. [ 217.668499][ T9844] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1312'. [ 217.683790][ T9844] netlink: 'syz.4.1312': attribute type 7 has an invalid length. [ 217.974707][ T9853] netlink: 'syz.0.1313': attribute type 10 has an invalid length. [ 218.088895][ T9853] team0: Port device dummy0 added [ 218.106959][ T9860] netlink: 'syz.1.1316': attribute type 21 has an invalid length. [ 218.478353][ T9872] x_tables: duplicate entry at hook 3 [ 218.935148][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.038938][ T9910] netlink: 'syz.1.1335': attribute type 5 has an invalid length. [ 220.053323][ T9963] netlink: 'syz.2.1351': attribute type 3 has an invalid length. [ 220.128847][ T9969] netlink: 'syz.3.1352': attribute type 3 has an invalid length. [ 220.175947][ T9969] netlink: 'syz.3.1352': attribute type 3 has an invalid length. [ 220.319524][ C1] Dead loop on virtual device 1, fix it urgently! [ 221.278150][T10005] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 221.529579][T10011] __nla_validate_parse: 15 callbacks suppressed [ 221.529605][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 221.618119][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 221.695543][T10011] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1363'. [ 221.748540][T10011] 0·: renamed from hsr0 (while UP) [ 221.837832][T10011] 0·: entered promiscuous mode [ 221.867368][T10011] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 222.066116][T10018] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1365'. [ 222.132631][T10021] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1365'. [ 222.179434][T10018] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1365'. [ 222.275551][T10021] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1365'. [ 222.675497][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 223.302280][T10053] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1376'. [ 223.600149][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 224.001176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.000895][T10098] netlink: 'syz.3.1392': attribute type 5 has an invalid length. [ 225.037211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.124172][T10102] netlink: 'syz.0.1390': attribute type 21 has an invalid length. [ 226.082478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.676938][T10140] syzkaller1: entered promiscuous mode [ 226.714488][T10140] syzkaller1: entered allmulticast mode [ 227.159538][T10149] __nla_validate_parse: 4 callbacks suppressed [ 227.159560][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1404'. [ 227.206184][T10153] xt_connbytes: Forcing CT accounting to be enabled [ 227.213337][T10154] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 227.232644][T10153] Cannot find del_set index 768 as target [ 227.537170][T10152] ------------[ cut here ]------------ [ 227.543229][T10152] WARNING: CPU: 0 PID: 10152 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 227.552842][T10152] Modules linked in: [ 227.556777][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.0.1405 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 227.567577][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 227.577683][T10152] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 227.583744][T10152] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 227.603398][T10152] RSP: 0018:ffffc9001793ef40 EFLAGS: 00010046 [ 227.609532][T10152] RAX: 0000000000000000 RBX: 1ffff92002f27dec RCX: ffffc9001793ef03 [ 227.617639][T10152] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff8987822a [ 227.625658][T10152] RBP: ffffc9001793eff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 227.633680][T10152] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 227.641696][T10152] R13: 1ffff1100376f120 R14: ffffc9001793ef80 R15: 0000000000000200 [ 227.649705][T10152] FS: 00007f1adeb9f6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 227.658769][T10152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.665437][T10152] CR2: 00007ffcf4e70adc CR3: 00000000797c8000 CR4: 00000000003506f0 [ 227.673454][T10152] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.681473][T10152] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.689495][T10152] Call Trace: [ 227.692815][T10152] [ 227.695776][T10152] ? __warn+0x163/0x4e0 [ 227.700047][T10152] ? __local_bh_enable_ip+0x1be/0x200 [ 227.705992][T10152] ? report_bug+0x2b3/0x500 [ 227.710546][T10152] ? __local_bh_enable_ip+0x1be/0x200 [ 227.715973][T10152] ? handle_bug+0x3e/0x70 [ 227.720344][T10152] ? exc_invalid_op+0x1a/0x50 [ 227.725066][T10152] ? asm_exc_invalid_op+0x1a/0x20 [ 227.730149][T10152] ? __dev_queue_xmit+0x2da/0x3e90 [ 227.735494][T10152] ? __local_bh_enable_ip+0x1be/0x200 [ 227.740930][T10152] ? dev_hard_start_xmit+0x773/0x7e0 [ 227.746273][T10152] ? __dev_queue_xmit+0x2da/0x3e90 [ 227.751437][T10152] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 227.757217][T10152] ? __dev_queue_xmit+0x2da/0x3e90 [ 227.762456][T10152] __dev_queue_xmit+0x1763/0x3e90 [ 227.767531][T10152] ? kasan_save_track+0x51/0x80 [ 227.772457][T10152] ? ieee80211_do_stop+0x13d9/0x1f40 [ 227.777793][T10152] ? cfg80211_change_iface+0x782/0xf30 [ 227.783301][T10152] ? wext_ioctl_dispatch+0x58e/0x640 [ 227.788661][T10152] ? __dev_queue_xmit+0x2da/0x3e90 [ 227.793912][T10152] ? __se_sys_ioctl+0xfc/0x170 [ 227.798719][T10152] ? do_syscall_64+0xf3/0x230 [ 227.803444][T10152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.809617][T10152] ? __pfx___dev_queue_xmit+0x10/0x10 [ 227.815065][T10152] ? __copy_skb_header+0x437/0x5b0 [ 227.820244][T10152] ? __asan_memcpy+0x40/0x70 [ 227.824935][T10152] ? skb_clone+0x240/0x390 [ 227.829424][T10152] __netlink_deliver_tap+0x54d/0x7c0 [ 227.834790][T10152] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.840045][T10152] netlink_deliver_tap+0x19d/0x1b0 [ 227.845207][T10152] netlink_broadcast_filtered+0xe60/0x12a0 [ 227.851099][T10152] genlmsg_multicast_netns+0x93/0xd0 [ 227.856443][T10152] nl80211_frame_tx_status+0x8fa/0xda0 [ 227.861977][T10152] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 227.868153][T10152] ? do_raw_spin_unlock+0x13c/0x8b0 [ 227.873418][T10152] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 227.879402][T10152] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 227.885821][T10152] ? ieee80211_report_used_skb+0x1621/0x2470 [ 227.891860][T10152] ieee80211_report_used_skb+0x19eb/0x2470 [ 227.897754][T10152] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 227.903984][T10152] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 227.909509][T10152] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 227.915572][T10152] ieee80211_free_txskb+0x24/0x40 [ 227.920664][T10152] ieee80211_do_stop+0x13d9/0x1f40 [ 227.925864][T10152] ? __ieee80211_stop_queue+0x1fe/0x460 [ 227.931472][T10152] ? _find_next_bit+0xec/0x120 [ 227.936289][T10152] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 227.941785][T10152] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 227.947644][T10152] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 227.953933][T10152] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 227.960406][T10152] ieee80211_if_change_type+0x4cd/0xad0 [ 227.966031][T10152] ieee80211_change_iface+0xd2/0x4f0 [ 227.971375][T10152] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 227.977936][T10152] cfg80211_change_iface+0x782/0xf30 [ 227.983282][T10152] cfg80211_wext_siwmode+0x1bb/0x290 [ 227.988617][T10152] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 227.994478][T10152] ? __pfx___mutex_lock+0x10/0x10 [ 227.999561][T10152] ? full_name_hash+0x93/0xe0 [ 228.004294][T10152] ioctl_standard_call+0xe3/0x290 [ 228.009371][T10152] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 228.015219][T10152] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 228.021070][T10152] wext_ioctl_dispatch+0x58e/0x640 [ 228.026233][T10152] ? __pfx_ioctl_standard_call+0x10/0x10 [ 228.031911][T10152] ? __pfx_ioctl_private_call+0x10/0x10 [ 228.037508][T10152] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 228.043191][T10152] ? __might_fault+0xc6/0x120 [ 228.047929][T10152] wext_handle_ioctl+0x15f/0x270 [ 228.052918][T10152] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 228.058457][T10152] sock_ioctl+0x17f/0x8e0 [ 228.062873][T10152] ? __pfx_sock_ioctl+0x10/0x10 [ 228.067776][T10152] ? __fget_files+0x29/0x470 [ 228.072459][T10152] ? __fget_files+0x3f6/0x470 [ 228.077182][T10152] ? __fget_files+0x29/0x470 [ 228.081922][T10152] ? bpf_lsm_file_ioctl+0x9/0x10 [ 228.086909][T10152] ? security_file_ioctl+0x87/0xb0 [ 228.092066][T10152] ? __pfx_sock_ioctl+0x10/0x10 [ 228.096975][T10152] __se_sys_ioctl+0xfc/0x170 [ 228.101612][T10152] do_syscall_64+0xf3/0x230 [ 228.106172][T10152] ? clear_bhb_loop+0x35/0x90 [ 228.110920][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.116873][T10152] RIP: 0033:0x7f1addd7def9 [ 228.121332][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.141016][T10152] RSP: 002b:00007f1adeb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.149515][T10152] RAX: ffffffffffffffda RBX: 00007f1addf35f80 RCX: 00007f1addd7def9 [ 228.157528][T10152] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 228.165573][T10152] RBP: 00007f1adddf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 228.173601][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.181635][T10152] R13: 0000000000000000 R14: 00007f1addf35f80 R15: 00007ffc5e3dce68 [ 228.189703][T10152] [ 228.192855][T10152] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.200174][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.0.1405 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 228.210985][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 228.221080][T10152] Call Trace: [ 228.224400][T10152] [ 228.227405][T10152] dump_stack_lvl+0x241/0x360 [ 228.232135][T10152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.237472][T10152] ? __pfx__printk+0x10/0x10 [ 228.242116][T10152] ? vscnprintf+0x5d/0x90 [ 228.246684][T10152] panic+0x349/0x860 [ 228.250634][T10152] ? __warn+0x172/0x4e0 [ 228.254873][T10152] ? __pfx_panic+0x10/0x10 [ 228.259369][T10152] __warn+0x346/0x4e0 [ 228.263393][T10152] ? __local_bh_enable_ip+0x1be/0x200 [ 228.268822][T10152] report_bug+0x2b3/0x500 [ 228.273203][T10152] ? __local_bh_enable_ip+0x1be/0x200 [ 228.278632][T10152] handle_bug+0x3e/0x70 [ 228.282833][T10152] exc_invalid_op+0x1a/0x50 [ 228.287403][T10152] asm_exc_invalid_op+0x1a/0x20 [ 228.292303][T10152] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 228.298424][T10152] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 228.318089][T10152] RSP: 0018:ffffc9001793ef40 EFLAGS: 00010046 [ 228.324201][T10152] RAX: 0000000000000000 RBX: 1ffff92002f27dec RCX: ffffc9001793ef03 [ 228.332261][T10152] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff8987822a [ 228.340368][T10152] RBP: ffffc9001793eff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 228.348388][T10152] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 228.356847][T10152] R13: 1ffff1100376f120 R14: ffffc9001793ef80 R15: 0000000000000200 [ 228.364887][T10152] ? __dev_queue_xmit+0x2da/0x3e90 [ 228.370065][T10152] ? dev_hard_start_xmit+0x773/0x7e0 [ 228.375456][T10152] ? __dev_queue_xmit+0x2da/0x3e90 [ 228.380622][T10152] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 228.386401][T10152] ? __dev_queue_xmit+0x2da/0x3e90 [ 228.391570][T10152] __dev_queue_xmit+0x1763/0x3e90 [ 228.396641][T10152] ? kasan_save_track+0x51/0x80 [ 228.401591][T10152] ? ieee80211_do_stop+0x13d9/0x1f40 [ 228.406922][T10152] ? cfg80211_change_iface+0x782/0xf30 [ 228.412513][T10152] ? wext_ioctl_dispatch+0x58e/0x640 [ 228.417847][T10152] ? __dev_queue_xmit+0x2da/0x3e90 [ 228.423005][T10152] ? __se_sys_ioctl+0xfc/0x170 [ 228.427982][T10152] ? do_syscall_64+0xf3/0x230 [ 228.432700][T10152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.438817][T10152] ? __pfx___dev_queue_xmit+0x10/0x10 [ 228.444257][T10152] ? __copy_skb_header+0x437/0x5b0 [ 228.449432][T10152] ? __asan_memcpy+0x40/0x70 [ 228.454100][T10152] ? skb_clone+0x240/0x390 [ 228.458579][T10152] __netlink_deliver_tap+0x54d/0x7c0 [ 228.463920][T10152] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.469153][T10152] netlink_deliver_tap+0x19d/0x1b0 [ 228.474316][T10152] netlink_broadcast_filtered+0xe60/0x12a0 [ 228.480205][T10152] genlmsg_multicast_netns+0x93/0xd0 [ 228.485565][T10152] nl80211_frame_tx_status+0x8fa/0xda0 [ 228.491100][T10152] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 228.497134][T10152] ? do_raw_spin_unlock+0x13c/0x8b0 [ 228.502388][T10152] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 228.508342][T10152] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 228.514741][T10152] ? ieee80211_report_used_skb+0x1621/0x2470 [ 228.520789][T10152] ieee80211_report_used_skb+0x19eb/0x2470 [ 228.526667][T10152] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 228.532886][T10152] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 228.538406][T10152] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 228.544365][T10152] ieee80211_free_txskb+0x24/0x40 [ 228.549447][T10152] ieee80211_do_stop+0x13d9/0x1f40 [ 228.554699][T10152] ? __ieee80211_stop_queue+0x1fe/0x460 [ 228.560285][T10152] ? _find_next_bit+0xec/0x120 [ 228.565098][T10152] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 228.570589][T10152] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 228.576447][T10152] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 228.582648][T10152] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 228.589133][T10152] ieee80211_if_change_type+0x4cd/0xad0 [ 228.594752][T10152] ieee80211_change_iface+0xd2/0x4f0 [ 228.600091][T10152] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 228.606643][T10152] cfg80211_change_iface+0x782/0xf30 [ 228.611991][T10152] cfg80211_wext_siwmode+0x1bb/0x290 [ 228.617330][T10152] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 228.623196][T10152] ? __pfx___mutex_lock+0x10/0x10 [ 228.628288][T10152] ? full_name_hash+0x93/0xe0 [ 228.633121][T10152] ioctl_standard_call+0xe3/0x290 [ 228.638207][T10152] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 228.644096][T10152] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 228.649957][T10152] wext_ioctl_dispatch+0x58e/0x640 [ 228.655127][T10152] ? __pfx_ioctl_standard_call+0x10/0x10 [ 228.660801][T10152] ? __pfx_ioctl_private_call+0x10/0x10 [ 228.666403][T10152] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 228.672094][T10152] ? __might_fault+0xc6/0x120 [ 228.676826][T10152] wext_handle_ioctl+0x15f/0x270 [ 228.681812][T10152] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 228.687341][T10152] sock_ioctl+0x17f/0x8e0 [ 228.691855][T10152] ? __pfx_sock_ioctl+0x10/0x10 [ 228.696754][T10152] ? __fget_files+0x29/0x470 [ 228.701404][T10152] ? __fget_files+0x3f6/0x470 [ 228.706119][T10152] ? __fget_files+0x29/0x470 [ 228.710774][T10152] ? bpf_lsm_file_ioctl+0x9/0x10 [ 228.715758][T10152] ? security_file_ioctl+0x87/0xb0 [ 228.720913][T10152] ? __pfx_sock_ioctl+0x10/0x10 [ 228.725813][T10152] __se_sys_ioctl+0xfc/0x170 [ 228.730447][T10152] do_syscall_64+0xf3/0x230 [ 228.734990][T10152] ? clear_bhb_loop+0x35/0x90 [ 228.739710][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.745647][T10152] RIP: 0033:0x7f1addd7def9 [ 228.750095][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.769742][T10152] RSP: 002b:00007f1adeb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.778220][T10152] RAX: ffffffffffffffda RBX: 00007f1addf35f80 RCX: 00007f1addd7def9 [ 228.786239][T10152] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 228.794250][T10152] RBP: 00007f1adddf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 228.802292][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.810308][T10152] R13: 0000000000000000 R14: 00007f1addf35f80 R15: 00007ffc5e3dce68 [ 228.818353][T10152] [ 228.821680][T10152] Kernel Offset: disabled [ 228.826161][T10152] Rebooting in 86400 seconds..