last executing test programs: 38.137271762s ago: executing program 1 (id=269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50) 38.137124975s ago: executing program 1 (id=269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50) 38.136989447s ago: executing program 1 (id=269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50) 32.283822696s ago: executing program 1 (id=269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50) 21.183908668s ago: executing program 1 (id=269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50) 9.293498305s ago: executing program 1 (id=269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50) 2.68568571s ago: executing program 2 (id=1415): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085f309000000000095000000008582b46337664205ff88c239000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.596097242s ago: executing program 2 (id=1417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) sendmsg$unix(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="826d87688c04", 0x6}, {&(0x7f0000001a40)="c81f3665b9884e5bddaf615ce8091fbcc02e2e7da20c62da6350898572063cf3000fd5b6bd20a2031f91689578948f105a8d7c2a149353f4bc3388527d326f878ab2271715496bc596dc80fc86b0875a8733eac0c9961e4d2240fe8b21288f916cb9391f58a23266db362b09758e69996f3d432f5aeca5a605ef33d58ea9c0f96dd28d75da590f37619b76f0c21743a73a3b8498c9646d4e988a8e40b866b4d5ae01e92f6cef93854de50f4257deea6048bf8237cd5ee3e499cd8083f1be444025c0306d8cbab1895c71dc05993c32a736e1ee6214ca04725d68461eaa290de9666d30277d628f3cf439f3cb511f89514e0b3ff599f9a379f4f743586af2cc0b88c2681018a2e6ef8f7f46f4b522fab8a3e1c0e799d2bd3574cc9798985a5cfbf477a9ef8e6a21796051c1bbb2d2c12b87060df82f15172509463b563b74fd9de450e6138be4a33fbcf262cb793c044cfbf22e631a52df878f611082549aed4acb47a87f95a8c1ba70bbb7da52ac5ff64572bbe1eee8299a874a9a9bb1d95d6df111ee312294567f3d3c32ab48be463421a8d9f97db3014051ca034366d76c07903f241c689567dc1d69e2a53429a5b4458f13013868666421ba39432e46c36e5721310f11006036e33c2fb20aed5904cbe13a4056274a209f218f1a39641eb5212ff47e9684e46bf6fba68744aa1beda590caee654df571abb7d7045b02b9fa7f943b7bf5e4dab43dfd5ae75a065a30d61b60077aecc54ea4050c067a47a4a4f708b8fa130638399c5737f1700f9da410f18f23029da99071b4a6f0da08d07130413d19f9821bbc5e12b76c87822b727b4aa10a7b3d77f9bd2af19488f42fcd6b3258e8eb69adbd36f1bdf88c7357ae78fac44a8cf882250bfa4029e08fa060051b28790190ec482bf0e0133041e9b8fa6e3b03c4758813b2c58fafdeb746d1e649c0ee43e878981cd2c689f3ed31f33b7b00edb387e2891c1cf504cdc3ba116e7eae6ca36ace429b4cc4aed198df32ac9b508bfbb6a665251711bd5bcae7c7d65956149a665eabbc161152317d0b58f0a5c8bee203d27df5843c5eedf980c9ee8fbf37def9d34256bbfa2ee2466302b901cc09dad9c87481be804ca69e467ff10789ecc22c7621c0800ba642acefdb85e66bcdc4177996a1e376e21b7df8041140180d8592d99eca647ff71064591e7d6f37d7139dfb10b4a16a225e538db334e45ab9ac612d0678031fa6b782acd3ae2c1af1baa99e2289ce895653e86f4c2522e953b5ad71e377ccb5f2fba2bb27671214578e19b6f68f66461b882ddecd09e181c7e768b44405159108ece20341c415acdb41236f08f92c541a23e138fd3ae3fa969575415245d3f648b02db900832a609d55cc04558c36e875872e06d1449bcc721f5235e4a158c3597ca1fe0870b053d3c79ba6b075bf5978299d859c9815c2315349e0f0e6d729708893adc5590291f79f445df4fd90fe2975a6b4ba23eb11dd0a3a0facb1b0708a3900a212612b48df130d4c1642509b450a6061100b7a640151a8836f91476abb8d366b9e94dc2f7d5a7a038556a168dbfac95fd8b3b9eb2cbcee52390d0e89c428b88464cf95ecd5a671b0d10c850999ee5c26a4db66262df8f2e23a7ac1c0fa65f18d7f3db445ecf15e3ee3981dbd90fbcc14eb69a42c0ed9aad6140847d3cd9db39f5a18aaebfc045e62716ff7a919fd1caf6f741cfd9844efe0a6f9b725e08e7b8fb1f8ff2e878e189a4c4d85fdd6d7508dbe1caca3612e411530456c4918b671e6003f809e91e8a866e7aa3108a111c273e551309f96bc4034c2823c484d665b91c118990275b835d3fd0cdcdbf73343a41b44076f35626e87f841c13fcfc255d9615574760c93b19f35c4c36ecb5520c7796cb840e24672b8082d54a2cdc316b952b6d3384605242578f3cda658b40d005a2e53140e772ebd5a4050d04b225dcb18da80c3c5068562d4f78e5a2f636f38756c5981af011d937152172b4c46de37ac8a4633ea457189841ef0a3db775ef59ec056c2cb7ecbfc08481715cdf455eb915ba07c40abd5bb8ab5726932212b67d43e7364975e3265db758f9d609ba9ef5d9b8f0db841e3116a74830d78c9fec7b5d3e253e33500fb11190278f9789378f4d13003327ae437a5968b87d145953eefe2c14886fa9cec6cfd3b39f484150437fafe0ce1b92b482eeed7576c2e9e58cba5132f97eafa8718d102248c24ec442846a4a5c40166c3132f2936c7fec8261dfc21e7965fc995418d871dea6d5428372abf8c087eec222ec886cccc6b48b2526778058b90e5140c501c3e2eeb61d3595cbf4bb353d423bbeb3f7a45f1d717ef04ec5dcdff163114856719932f058299a1b43995bc4e33d5c1ed5c35ada8ef4326ee488593c8e01acc88ac3112e2fc897bf0d31c46825052aab0f31096532e9e4b46cd382efd0ec9983f3792eaa590366a2b480b080e0371607f298cbcc24ecbc4c2bc05ab231d8c2b347d736a567d056a19ce444273e3942fd69273c58c7ee199fe3edddc50f93fed6a592584e5ef579acdbd4de55c0e5c63a654371134857853f89650d09ad142e513b8e6e8be4f50cbd39abdb08447d59eced8fcddb1ab60d5e906d3051797097f7841ed38e5c9669d9ab3cf3ec5b13f7296292eace0397a68c9554848b2afa56b11d43227fc0acaeb6aedbdc064e320e92c137172907d1861ccf4ad21dacd647c2a0e3d9bca386d647bf8f17e9f4bf5d7f3336fb4f67fee52e1977f077557602a64ba1f4c66faa5165f354da9b941d3e872e0603f123d2bdd8ffe4b4b04dc91a37afc156d626c081f0e0bd4bd91d10558f36e9a02231bfc90ebda4a289c7f55898ccb6f6af46fd811f8ac027734a73c7dcf10f5d160f53e5b2ce54d0f3e7c2bac45a487c8b11ed982153ee9b298dbaeb2579c7a51ebba2ecafe641c7f4a3883eb0007f0e10092210861b0d833e10446c6f38c82e4b07423321eb7cfbdab9660d716c8518f55a57c90d81c81b83cbd2e950749878277d4ab27e521ad6b2b31ae7aac8aad44b118337974ab0f7390e19e7dc27e03d180c7b0de1a01d7b7487cb4220eb9375db6b9c3bd0690f614e5edfc8eb3f10d06c2e7348f4b1158bb13e1d97df4dea0c3dd2ea9addee9166c2aa31fe7f7302668feb8621d1ceac533bdc692f026a1ccc1136c9aeb2842511f6ebfc7d01ec0edec855270f47cdc0beaefa5566d71879ea084bdbcb1c98196995c714143e5c17818593796c65a7d40cb574f73c4290022d8ceea712e2f492bcf5f9126dc9f553adbf7506a204f4e6de7c06174eee9e98720e1222459130a6d2a82bc9802148dc4b32fcb56e3c5675cfb516d307b4366f7d862b5de3c0162f943a140c5376a8a8ede0d373e7bceb5f9d2b17caa98ef2dce6d72ce6f78e532060a79879455cfe39ce1c92a6c2c0fc47baa45d3c6b235a966c120d1938478d8b25cff1d1b83fb0a96e909168eadc3da960eabef6d75cfa02af2cf2885ce421b501d6c53546fa6228b81fc579673032631c91bd00e30bb2a582273c9a4cc0bd9aa2916deafbe0398135c3f2bce66dfd6642bedd33bf2de5b5cb825f3b7eced6e5aab36e57c4aa0e13b9520720f9e4948890bf0bd9ca6fe050ddf12ff4ef5fca826f90d2b37e6a589403515f9c7002d7a9430acf034a1d9b5c29d48ff6f792c230cfeb8c5b9675c84ebab3cdeb210345e3209aad74524ce84f8b82307dd4e90c7de90a38deb008b393757cea1110a224e7238bfcdec0bdbf1533ffce7b954b9b86791ad602e01346a7eb927a0996edd01b15142fd73955cc0c49c73eb32cddde7f85cae8c99ba3eb78d16354304b13b48965ef25ff5324c4d99eb8e86a667c94593d3cbd98575be5722a1c77a506bf0f0877c4e1ace01fa54673c9930d00a1e129ac2aab94dd1aebefbd8ea23a8bfcee391f3a6cb01bd773bf6ca1503e9d5f7d6ea4a19ea61efe4eb611ea0598203fe45296e8d1062702840a418c3c920ed885fb4b4af0fa493d6246e0c98751d6ae0c1dbe4bf9f1b5e88714b53a2afe4f0437e9a03ef74c05362c7a248f0b9f4ec55370efba40f322beffb257068f8907c91cbf78f7bec1b2ae6479c52f0b9ce37ccd09335df17521401ae11054140cf40544e1ed2c9e6aa8b6016cd4a8f660808a2279f27f2214e18ebbc8a60dc4cfaac784b2c340ddb0088222174f468cacff73539e34acadf07dd203690f0cc14800514358c389eb8975fbcda2ba723cd01751cc217444f767174a38cc4957036f3369ef6fb0104e2709de496363166065de0cf99bce096716b837a15801ba97da7209881409010c24ffdc80e24ffe0a3b0adaf8de59639865f318f0ede31472628c51e4e6396c2e17f0993b4c1a170593d2314b928d084bd4060be2e46e1d63c4228448bebf2c36f5e1ff79ccd8b7f7016c4c7a8aa88d62b669faebf7fc73ba8a5e25ab0e344e1215ad20c2a9045e37897d9c41bd7e74c18921930f426af513eafcadff3caa06017fef79d41e327ff0941fdbbe97ecac2fe88834123b4154afedf342cae2658edab88ab9dd767c63e8f5d2f0aab55d60c5200ce0d1bda97fb45195fbe13c987d7b5e09216578d5f91dd1fa254866d4c058ac473511019288fdc21bb2d8453c4a47e78a6de2146ec3509a4d13750473dfe7778cc5ea933a91c98d33ac8c7f66b6c2f2baa3a072cb65fad2fe3692edf33f006f49b4a61fab385870a7af24260b16fbefc1e88b2b0a5ac979118b5a6cbb1b190e27a5dfbf15bd241645c36af7cd38ad28eef1fb90730047efb110cd67e92bec42dd65aed66e38e68450d9bb2f2c372371a4a8b10dd2020bdaba328841f705443928313b143530f03661f3979cf86f7f1ac693d9e01be256ea98f8cbbd78a407c768669e99485d7e4fa857c56ec6d3e8351eb4be36ba5ce3fea356b3aaaca6820d677a6c247cfbfce0beffa023ad1c3277de715a96dca51ca7de5305249a89e2acae240285dcf9f611e73f172583732b015248a1e5ba98e97e5c3e2cdac46e5f39763636882233830b61c1d63845419feff9beed39d9b74eb900873ac12c14b730d4be0cbf7f8cadfb34418f5677dec8865b17576081d8087fc273d0987b027e1329fab4c4720dba0ce2f0eb0a7cf94212ec711942c57612f2233f6f38f1344f6550805a0d5b0aeac9f93924c668f540dc1f5e57fed46873e15f59b80482b4ad268a959694224464983caf18b1be151d44d2537d552b4ad4c267ad9614a544338526a978480d8fb6797ed1a78ae9bf99f9b6d22377413f5eda8c12d26dec298a52300aacaaba74d732245e54e7f8bebc2f2e3a236", 0xebb}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000400)={0x2c}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='xdp_bulk_tx\x00', r6, 0x0, 0x7}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf256200000008000300", @ANYRES32=r3, @ANYBLOB="f0687d66d3ffcd4acdbb05fa39be211ea19c5f34fbe42f1a4bf56270048c1145b2b98da039c573b1c26d84ae6e4bc616f7eb6d9188150025abe7d5c7e1bb7d964428e73d96c5946341ac737a2dac95d25d3aa2d1963c2632eced3bc962756bbee4a7241e893177fe590fe32407837a9852afa031eb9dbde2384cb4daa8e664c3f5e722f54e5191536f948b73446d70acdee6e427d4ac3695236835a71d20493629e146c367ce28e89d23b3382731a2bf0b544bed4690"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000", 0x28}, {&(0x7f00000006c0)="e622a80a2b88a271cd340500000000000000a9546e4fdaeb374e6cf2a7dbdf1910a2abc1bb", 0x25}], 0x2}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)={0x224, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5a4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x10000, 0x8, 0x8, 0x7, 0x5325]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x11c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1a8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x468}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7e, 0x7, 0x1ff, 0x9, 0xffff, 0x1ff, 0x5]}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6c2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x130}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7, 0xf2dfd9d8, 0xe37, 0x40, 0x0, 0x1000]}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0xffff0001, 0xe06d, 0x0, 0x4d60, 0xfb, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xfffffff0, 0x0, 0x9, 0x3, 0xfffffff9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0x7]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c3}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}]}]}, 0x224}}, 0x20000000) 2.3614924s ago: executing program 2 (id=1421): socket$inet6(0xa, 0x40000080806, 0x0) socket$kcm(0xa, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)='|', 0x1}], 0x1}}], 0x1, 0x4008014) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x12, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2.24263671s ago: executing program 4 (id=1422): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000040), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x63, 0xa, 0xff00}, [@call={0x55}, @exit, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x306) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3f000000010000", 0x7) sendmmsg$inet(r0, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000001ac0)="15ac", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000004000)="23be5f", 0x3}], 0x1}}], 0x2, 0x8c1) close(r0) 1.852927768s ago: executing program 4 (id=1425): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x2e}]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x4b, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'bond0\x00', &(0x7f0000000340)=@ethtool_coalesce={0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0xfffffffc, 0x0, 0x4, 0x8000}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x100000b, 0x1010, r3, 0x80b8c000) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 1.617206503s ago: executing program 4 (id=1428): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839}, 0x24}}, 0x0) 1.456962607s ago: executing program 4 (id=1429): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000020000", 0x39}], 0x1) 1.232323916s ago: executing program 4 (id=1431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000040000000a000000010c0200f2c0827fb15843aca789c594ff8eab3759d6777314349cb1b6736acac770899eb08a6cc54ef1da81872eac3039f5de33e5a86b2e218714b6f7a5ecc9091127f93553aa4c7012302791561ed4b5af2f9d7f061ab60b013bde6055bb835caeabbfca738e2d82046d162df918067bb2d165bb6d43f71e30759acfb41bd6cf1cdd416e6e7088016021da822d58eb57745adbbb04543532c2b0fc2ba3d3ee9e94f29ab4a1d8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x3000000, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.210927428s ago: executing program 0 (id=1432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, 0x0, 0xc800) 1.091531262s ago: executing program 3 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x61]}}, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 1.001219708s ago: executing program 0 (id=1434): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom}, [@netrom, @bcast, @null, @rose, @bcast, @rose, @rose, @netrom]}, &(0x7f0000000140)=0x48) close(r0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004480)=ANY=[@ANYBLOB="a01300001900010026bd7000000000001d010900381212803112d88023006200b440027209e07c9b346694bef4b5e4ec123fb99aa0440d8c9b6abc2633e0af00ed1099805cfaffe3ab8f2f08d5280e6b3547ec3909fc66ba8b1aefad2c59167356"], 0x13a0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000340)={0x4, 0x5, 0x1, 0x2, 0x4, 0x0, [{0x0, 0xbbb, 0x1, '\x00', 0x280}, {0x6, 0x7, 0x902, '\x00', 0x800}, {0x80000000, 0x7, 0x10, '\x00', 0x800}, {0xce, 0x8, 0x7fff, '\x00', 0x900}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], 0x38) syz_emit_ethernet(0x56, &(0x7f0000001440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d00004810000000000690780a210104ac1414aa44140a01ac1414bb00000000e000000100000000070b04030e00012b05fc0f00000000fc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="52200000907800007041d046e11daec7ac4f848ccbab0f3465279512cb2461f7672888b6ac8bd1ceff5e41e1bdbf2daa200d716ceb272239eda73e82c56877c84300cb83ed6fdb28910e4d5fe25cba670d9fa0d430984f2b57f2725482b95ec91c5f7afd097c3d3a3804ad598ae733e72ea225d562158fc6fd655a1eac37bf9bc13d815a494a0ed1347666613ba1fd25c81520dca4"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@RTM_DELMDB={0x38, 0x55, 0x211, 0x70bd2a, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x1, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0xd}, 0x18367}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) accept$netrom(r5, 0x0, &(0x7f0000000440)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@local, 0x100, 0x0, 0x2, 0x0, 0xa, 0x10}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x40000000, 0x0, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x4}}, 0xe8) readv(r3, &(0x7f0000001740)=[{&(0x7f0000001540)=""/13, 0xd}, {&(0x7f0000001580)=""/248, 0xf8}, {&(0x7f0000001680)=""/3, 0x3}, {&(0x7f00000016c0)=""/84, 0x54}], 0x4) sendmmsg$inet6(r7, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f00000004c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, 0x0) bind$can_j1939(r9, &(0x7f00000000c0), 0x18) 972.772129ms ago: executing program 4 (id=1435): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000040), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x63, 0xa, 0xff00}, [@call={0x55}, @exit, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x306) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3f000000010000", 0x7) sendmmsg$inet(r0, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000001ac0)="15ac", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000004000)="23be5f", 0x3}], 0x1}}], 0x2, 0x8c1) close(r0) 920.074208ms ago: executing program 3 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000000000000000000000000000085680000", @ANYRES32, @ANYBLOB="0000000000f2488cf6d58c0d0f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x1000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x0, 0x53, 0x0, 0x0, 0x2000, 0x0, @void, @value}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r8, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x2c, r9, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x69d04b0f8018158) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000ffffffffffffaaaaaaaaaaaa86dd60721910001011ff20010000000000000000000000000000ff02"], 0x4a) 787.460091ms ago: executing program 0 (id=1437): r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000011c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x3, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x34, r4, 0x1, 0x3, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001300), 0xffffffffffffffff) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x2c, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000dc0000004000cd8c950000000000000009fc28b1482b936bea2775ff91a44de632176d77d61341cfc22a0495e249d25a6dde2dbafde21ff66cd143f0e7ab4d980205adbaea3bba507996ad3d6e4965b56879d122e534246fc902a51f828874c896c788c7483a4be000f900b3820074e813fa8e0000000000000000000014ef3b812f"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r7, 0x0, 0x19, 0x1005, &(0x7f00000000c0)="101b46513919eb2330b7fc87ae7de17d4e87e05dd79653904d", &(0x7f0000001b00)=""/4101, 0xb0, 0x0, 0x13, 0xb6, &(0x7f0000001080)="302fde71bebc728148fae5183e824c085d2db6", &(0x7f00000010c0)="65f3eae4eb4c2db4873b2dcdfe9752be01333434fc7731ca1e317390aa359f64996fcd634e1742b5b7a451b5d9fb7b96646f859cc8bae16878014a449811b53d8cf6214ffbf59e3a0eddb2171cd944e3b73d7862e5c9775fd2b91d48349002a2d9d4c76ff1361b113d45fa24a6bca281490a5cdb8a0d2b49416e18cb32f63e2e4575d458772b2f5904c6e03f8301ba8249b157600456587889ff36ee4311b66a2d7cb1dfd34c4a609900e003b940842150c37a9d1c37", 0x7, 0x0, 0x100}, 0x50) 502.416421ms ago: executing program 3 (id=1438): sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008084}, 0x20000080) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100020e00000029bd70000000000005000600000000000a0000000000000000000000000000002300000000000000004000000000000005000500000000000a000080ff000000000000000000000000000000000000000000000000000000020013"], 0x70}}, 0x0) 476.369311ms ago: executing program 0 (id=1439): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 340.215871ms ago: executing program 3 (id=1440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x775c9000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2dbe25bd7000fbdb3a254400000008000300", @ANYRES32=r6, @ANYBLOB="0c00990008000000110000000400a9b7c2cc000c002380080014003affffff0400bf00040008010a00180003030303030300000b0024004896a4e085800400140070e40300070005000800081318b421bd"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="055e0e7006f89e68924c9d0382d567e2", 0x10) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x3, 0x0, 0x0, 0x4, 0x5, 0xc8, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x45, [0x67, 0xffff0001]}}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000000c0)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611000000000000095000000004c9ebc000000c481542c18a2174b9226eb03bd1be2d685c3194888ac15a53994414a525fdaf7a71887520614e4a6bf08641322246145a55c1334ba38af793cd38b38e6735f78a7a0e0859907"], &(0x7f0000000980)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x4, '\x00', r7, 0xb, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 248.411844ms ago: executing program 0 (id=1441): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000030000", 0x39}], 0x1) 188.997807ms ago: executing program 2 (id=1442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0002400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c00014000000000000000090900030073797a32000000000b00070066696c746572000030000480080002406b10a61d140003007465616d5f736c6176655f3000000000080002404e73b858080001"], 0x130}}, 0x0) 104.230284ms ago: executing program 3 (id=1443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000400f0000001c0007800c000400002e3a2d000000400c0003"], 0x30}}, 0x0) 89.659227ms ago: executing program 2 (id=1444): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x150, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0xf8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0xdc, 0x6, [@m_nat={0xd8, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xad, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92dc41f8de6392fb42903838dda4a8bcd9ea2a7ef200b02fb961cc3dddbb717e88bb314bbce94391f87d06a838a9957ccce7feaaf32e9d14398b60f4b34967f32f57c2d3d6939ab4bb4f2ac96daa3247403e773d7b7b15514a5fdc891227676c981222abfb6fffff71541e4446e5f84c25e6f1726ead4d745a9f287323"}, {0xc}, {0xc}}}]}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x413, 0x70bd28, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x30}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000530400022dbd7000fbdbdf25b1836a8cb9e98cdd018307ef6b19452cf6a66a3361847d6eca39b09ef672d77d686c77eed7c5655626d474e70f34b3cf8985dfcb2b39fc99f5e385e6e61d57bbc2fb690ca2210b8f228d243b3d818c0babe7912af31ef281"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={<r4=>r1, 0x3, 0x80000001, 0x6}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f00000001c0)={r7}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r7, 0x5, 0x27, 0x1, 0x4}, 0x14) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 87.326289ms ago: executing program 0 (id=1445): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000040000000a000000010c0200f2c0827fb15843aca789c594ff8eab3759d6777314349cb1b6736acac770899eb08a6cc54ef1da81872eac3039f5de33e5a86b2e218714b6f7a5ecc9091127f93553aa4c7012302791561ed4b5af2f9d7f061ab60b013bde6055bb835caeabbfca738e2d82046d162df918067bb2d165bb6d43f71e30759acfb41bd6cf1cdd416e6e7088016021da822d58eb57745adbbb04543532c2b0fc2ba3d3ee9e94f29ab4a1d8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x3000000, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 732.263µs ago: executing program 3 (id=1446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1805}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000080)=0xffffffff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000150a54000000060a0104801c0001800900010068617384000000000c00028008000740000000010900010073797a30000000000900020073797a320000000005000740df000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) 0s ago: executing program 2 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x1e) r2 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8d40, 0x0) write$tun(r3, &(0x7f00000002c0)={@void, @void, @llc={@llc={0xbc, 0x7e, "86", "f7c678f982a17c4d9af3039ccdbc198edc244cdba4f4df953b88e4a58077223eeebd73f5b3da0851131242fb7d9f0cd26398591c3eb294901bf824640856726ecb3cf5d6f93187e16e71bbaa8f466e3849de75a97907d78be3521448a35caa18e2d0ba6544cd4751973f60eb825f9fd8f927b308cf0ef191658e1eea72976d0c26b58dc2463b68"}}}, 0x8a) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r1, 0x24, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xc020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000004100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x167c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1610, 0x3, 0x0, 0x1, [{0x1b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x164, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "292e39bc6a69b1dd72b914e38eff2bda9f85cfd0d97aa381edfef15e5fec8521745d5338ff47b9c6840d6bf2fb4162bc66170fae5e28277775cd25ea2bbe87fecabe0d14498fbb8d91c82f5989313485df8a08cc1e44047142ddeeed2a45c5ff656aae095ca8884089e2338217fab5d9411ee88f2e57babc009a9f66ef6bda79260fb42ce5ed6ded2e5d1ed1910a41b67d6a39130183b2c026367ae3805474789a1833803f9c4331885cbd6e400a5e57"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x13, 0x1, "505e191b0497c224e697e396656e7b"}, @NFTA_DATA_VALUE={0x34, 0x1, "1736e2122d481e458622f36fd73295d86af5b8b392784fee33ea0471d2f4c287561cc43a66461ae28cdfb925e25f5b3a"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, {0x1454, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x69, 0x1, "9b096e4113c86b6edfec3b5b81f32d35cceea5d35d440945c6216e53a421e97be5cb237f902df7de3197c764b3fa24f93d559b7f31695500473842f6cb15692a4d64ea80ca576e94cf2c2c5bd823f8c10a99d3f4c833141c2e1d73ea76786751712e5e0413"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x23, 0x1, "0ad00009d9f95cc5dfb525d88c093a4254f8a32e6713b5faec641f6a247a51"}]}, @NFTA_SET_ELEM_DATA={0x130c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "67f858ce21ce1c96207888620453636e9a598cea21df9969fecc072b88c8b9443f375519c8ee5baf00f7c88db07e459d3871986ee0ef28851d6b40bfa9a2c2c81cbb02af650ac0c3c1b6549c9fd8d1c20bbf6ff40a7f2ce2ed26a3dc95998b741e87dbe2f7bf85a71fbf43846e756eb961633c6c9713800eed190992cf23339ca4e72732bb2d5dcabbde0d904f71cc45ac62e54043f4d231f59e6220de9f8eef722dee866084a1a27aacaee3585408d1"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xe1, 0x1, "ceb1d8222b8d168fcbb591cade9427746af56d1f288122320578743b4599adcbba1ce98de66384d77e2e4ec6bef250917260b3503f2069d98b42f6a87906dc594917c3f03aad2d91c2bf8c03eb4f7c9b4a1d5d2c9692fad5888003fb52caaabe8d202b0370455107c3c60da517336dfd234a41d8ce366aa59b365007046ded4d360b176c5d5b6fe1925a1efb4b0e635807ad0aae8fa2be1ad04d9341870057b4a3d0be0f3bd61938cc6c71c294d625b76439fb73ebead4674e125d9cdd69b1ffeb52d27a0de3de5c1aabab0ba045797ec0324dd1faffca3e84ba9efb5a"}, @NFTA_DATA_VALUE={0x59, 0x1, "6cdc2d4fa4dd55d7e55e157cc0c236a170d690d0709669ef02608b82ba81e745f998e6b2afb4cf82f2c6fe4a88c244173c6fe1cb9fcbb8714fcac3e7567a776f74b9135a1c0d30744f0fe194f0a97fb7ffbb7e6c42"}, @NFTA_DATA_VALUE={0xb8, 0x1, "f4cc9f7deb274ac8a075a022b16c133022e08c6cf25c5c08a25794ebaf2e1ec7fd7769f12755419f2969c9037b52f2aa1caafa3b3beea626eeb5e4e5d6d423e850f63e574d8eaaf932c08562c0c8b58c676098c3b319da5afaa4cba78816a3dbfd284ea97f0dbe30810da3f0df513cd3729160f73b8c19112bfa111a5200e847025768fc24e1b132a3828d6516ad0c0b5765f0b1cb61be35b010f5f85ed5745b5b27b0c6f03d82095145655799cad76852a6d055"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5fa22a93}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4fcfdb20}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x180, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x118, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x18a8}, 0x1, 0x0, 0x0, 0x200488d0}, 0x14) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0xfe}]}}}]}, 0x3c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socket(0x10, 0x803, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x18, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x1}, [@nested={0x4, 0x1}]}, 0x18}}, 0x800) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'. [ 127.513589][ T7872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.679277][ T7915] netlink: 'syz.2.547': attribute type 3 has an invalid length. [ 128.725785][ T7929] Cannot find set identified by id 0 to match [ 129.022528][ T7944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.517681][ T7972] Cannot find set identified by id 0 to match [ 129.535336][ T7967] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 129.549235][ T7974] pimreg: entered allmulticast mode [ 129.581852][ T7974] pimreg: left allmulticast mode [ 129.655821][ T7977] __nla_validate_parse: 11 callbacks suppressed [ 129.655840][ T7977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'. [ 129.783562][ T7982] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.567'. [ 129.825821][ T7982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.431860][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 130.443018][ T8009] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 130.448789][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 130.500572][ T8015] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 130.513857][ T8016] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.554543][ T8009] bond2: entered promiscuous mode [ 130.560172][ T8009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.591048][ T8015] netlink: 3 bytes leftover after parsing attributes in process `syz.4.576'. [ 130.711696][ T8015] batadv1: entered allmulticast mode [ 130.821714][ T8022] RDS: rds_bind could not find a transport for ::ffff:0.0.0.2, load rds_tcp or rds_rdma? [ 130.852488][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.579'. [ 130.925430][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 131.154503][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 131.176772][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 131.307889][ T8048] pimreg: entered allmulticast mode [ 131.325065][ T8048] pimreg: left allmulticast mode [ 131.474177][ T8055] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media [ 131.619712][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 131.670272][ T8066] Cannot find set identified by id 0 to match [ 132.094076][ T8088] openvswitch: netlink: Duplicate or invalid key (type 0). [ 132.107850][ T8088] openvswitch: netlink: Actions may not be safe on all matching packets [ 132.546405][ T8110] netlink: 'syz.3.603': attribute type 6 has an invalid length. [ 132.583621][ T8112] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 133.092446][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.099150][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.866011][ T8159] netlink: 'syz.3.619': attribute type 1 has an invalid length. [ 134.390392][ T8192] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 134.498852][ T8197] bridge_slave_0: left allmulticast mode [ 134.505804][ T8197] bridge_slave_0: left promiscuous mode [ 134.512027][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.556625][ T8197] bond0: (slave bond_slave_0): Releasing backup interface [ 134.575764][ T8197] bond0: (slave bond_slave_1): Releasing backup interface [ 134.603309][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.621956][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.631383][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.639075][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.656978][ T8197] vlan2: left allmulticast mode [ 134.662011][ T8197] vlan2: left promiscuous mode [ 134.667189][ T8197] 0�X��D: left promiscuous mode [ 134.673629][ T8197] bridge0: port 2(vlan2) entered disabled state [ 134.766661][ T8197] bond0: (slave bond1): Releasing backup interface [ 134.832180][ T8210] syzkaller1: entered promiscuous mode [ 134.861963][ T8210] syzkaller1: entered allmulticast mode [ 134.907991][ T8208] __nla_validate_parse: 13 callbacks suppressed [ 134.908008][ T8208] netlink: 70 bytes leftover after parsing attributes in process `syz.4.636'. [ 135.041832][ T8218] pim6reg1: entered promiscuous mode [ 135.057133][ T8218] pim6reg1: entered allmulticast mode [ 135.319904][ T8224] netlink: 332 bytes leftover after parsing attributes in process `syz.0.641'. [ 135.591725][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 135.659153][ T8237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.690627][ T8237] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 135.874966][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 135.990805][ T8252] netlink: 'syz.0.649': attribute type 3 has an invalid length. [ 136.460482][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 136.469911][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 137.316863][ T8320] netlink: 'syz.0.670': attribute type 3 has an invalid length. [ 137.340271][ T8320] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.670'. [ 137.422437][ T8310] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 138.757563][ T8338] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 140.126556][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 140.373861][ T8423] ip6gretap0: entered promiscuous mode [ 140.388480][ T8423] batadv_slave_0: entered promiscuous mode [ 140.593422][ T8433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 140.811770][ T8448] FAULT_INJECTION: forcing a failure. [ 140.811770][ T8448] name failslab, interval 1, probability 0, space 0, times 1 [ 140.826861][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.0.716 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0 [ 140.826888][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 140.826902][ T8448] Call Trace: [ 140.826908][ T8448] <TASK> [ 140.826915][ T8448] dump_stack_lvl+0x241/0x360 [ 140.826950][ T8448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.826967][ T8448] ? __pfx__printk+0x10/0x10 [ 140.826991][ T8448] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 140.827011][ T8448] ? __pfx___might_resched+0x10/0x10 [ 140.827034][ T8448] should_fail_ex+0x40a/0x550 [ 140.827057][ T8448] should_failslab+0xac/0x100 [ 140.827075][ T8448] kmem_cache_alloc_node_noprof+0x77/0x380 [ 140.827092][ T8448] ? __alloc_skb+0x1c3/0x440 [ 140.827117][ T8448] __alloc_skb+0x1c3/0x440 [ 140.827143][ T8448] ? __pfx___alloc_skb+0x10/0x10 [ 140.827166][ T8448] ? netlink_autobind+0xd6/0x2f0 [ 140.827182][ T8448] ? netlink_autobind+0x2b0/0x2f0 [ 140.827203][ T8448] netlink_sendmsg+0x638/0xcb0 [ 140.827231][ T8448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.827257][ T8448] ? aa_sock_msg_perm+0x91/0x160 [ 140.827283][ T8448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.827297][ T8448] __sock_sendmsg+0x221/0x270 [ 140.827320][ T8448] ____sys_sendmsg+0x52a/0x7e0 [ 140.827344][ T8448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.827358][ T8448] ? __fget_files+0x2a/0x410 [ 140.827378][ T8448] ? __fget_files+0x2a/0x410 [ 140.827403][ T8448] __sys_sendmmsg+0x36a/0x720 [ 140.827430][ T8448] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.827457][ T8448] ? __pfx_lock_release+0x10/0x10 [ 140.827476][ T8448] ? kstrtouint_from_user+0x128/0x190 [ 140.827518][ T8448] ? ksys_write+0x22a/0x2b0 [ 140.827538][ T8448] ? __pfx_lock_release+0x10/0x10 [ 140.827564][ T8448] ? sb_end_write+0xe9/0x1c0 [ 140.827582][ T8448] ? vfs_write+0x7fa/0xd10 [ 140.827604][ T8448] ? __mutex_unlock_slowpath+0x227/0x800 [ 140.827652][ T8448] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 140.827674][ T8448] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.827696][ T8448] ? do_syscall_64+0x100/0x230 [ 140.827720][ T8448] __x64_sys_sendmmsg+0xa0/0xb0 [ 140.827738][ T8448] do_syscall_64+0xf3/0x230 [ 140.827759][ T8448] ? clear_bhb_loop+0x35/0x90 [ 140.827782][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.827802][ T8448] RIP: 0033:0x7f907f98cde9 [ 140.827821][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.827833][ T8448] RSP: 002b:00007f9080893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.827857][ T8448] RAX: ffffffffffffffda RBX: 00007f907fba5fa0 RCX: 00007f907f98cde9 [ 140.827869][ T8448] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000005 [ 140.827879][ T8448] RBP: 00007f9080893090 R08: 0000000000000000 R09: 0000000000000000 [ 140.827889][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.827899][ T8448] R13: 0000000000000000 R14: 00007f907fba5fa0 R15: 00007ffd3d79c748 [ 140.827927][ T8448] </TASK> [ 141.301302][ T8458] netlink: 'syz.3.720': attribute type 3 has an invalid length. [ 141.310417][ T8458] netlink: 666 bytes leftover after parsing attributes in process `syz.3.720'. [ 141.361231][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 141.384182][ T8463] netlink: 'syz.2.722': attribute type 2 has an invalid length. [ 141.643225][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.3.727'. [ 141.875145][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 141.974009][ T8491] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 1, id = 0 [ 141.979342][ T8490] x_tables: duplicate underflow at hook 2 [ 142.404883][ T8509] FAULT_INJECTION: forcing a failure. [ 142.404883][ T8509] name failslab, interval 1, probability 0, space 0, times 0 [ 142.427321][ T8509] CPU: 1 UID: 0 PID: 8509 Comm: syz.0.737 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0 [ 142.427346][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 142.427354][ T8509] Call Trace: [ 142.427359][ T8509] <TASK> [ 142.427366][ T8509] dump_stack_lvl+0x241/0x360 [ 142.427388][ T8509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.427402][ T8509] ? __pfx__printk+0x10/0x10 [ 142.427424][ T8509] ? fs_reclaim_acquire+0x93/0x130 [ 142.427441][ T8509] ? __pfx___might_resched+0x10/0x10 [ 142.427462][ T8509] should_fail_ex+0x40a/0x550 [ 142.427487][ T8509] should_failslab+0xac/0x100 [ 142.427502][ T8509] __kmalloc_noprof+0xdd/0x4c0 [ 142.427518][ T8509] ? kobject_get_path+0xb8/0x230 [ 142.427543][ T8509] kobject_get_path+0xb8/0x230 [ 142.427569][ T8509] kobject_uevent_env+0x2a5/0x8e0 [ 142.427593][ T8509] device_del+0x7db/0x9b0 [ 142.427618][ T8509] ? __pfx_device_del+0x10/0x10 [ 142.427634][ T8509] ? read_tsc+0x9/0x20 [ 142.427650][ T8509] ? ktime_get_mono_fast_ns+0x303/0x320 [ 142.427676][ T8509] device_unregister+0x20/0xc0 [ 142.427694][ T8509] wakeup_source_unregister+0x171/0x190 [ 142.427718][ T8509] ep_modify+0x255/0xa80 [ 142.427747][ T8509] ? __pfx_ep_modify+0x10/0x10 [ 142.427767][ T8509] ? __fget_files+0x2a/0x410 [ 142.427785][ T8509] ? __fget_files+0x395/0x410 [ 142.427799][ T8509] ? __fget_files+0x2a/0x410 [ 142.427823][ T8509] do_epoll_ctl+0x761/0xf80 [ 142.427853][ T8509] __x64_sys_epoll_ctl+0x161/0x1a0 [ 142.427885][ T8509] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 142.427907][ T8509] ? do_syscall_64+0x100/0x230 [ 142.427931][ T8509] ? do_syscall_64+0xb6/0x230 [ 142.427954][ T8509] do_syscall_64+0xf3/0x230 [ 142.427974][ T8509] ? clear_bhb_loop+0x35/0x90 [ 142.427999][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.428019][ T8509] RIP: 0033:0x7f907f98cde9 [ 142.428034][ T8509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.428047][ T8509] RSP: 002b:00007f9080893038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 142.428066][ T8509] RAX: ffffffffffffffda RBX: 00007f907fba5fa0 RCX: 00007f907f98cde9 [ 142.428077][ T8509] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000004 [ 142.428087][ T8509] RBP: 00007f9080893090 R08: 0000000000000000 R09: 0000000000000000 [ 142.428096][ T8509] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 142.428106][ T8509] R13: 0000000000000000 R14: 00007f907fba5fa0 R15: 00007ffd3d79c748 [ 142.428132][ T8509] </TASK> [ 142.546299][ T8511] netlink: 'syz.2.736': attribute type 10 has an invalid length. [ 142.706784][ T8511] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 142.954667][ T8516] netlink: 'syz.0.739': attribute type 1 has an invalid length. [ 142.973411][ T8516] netlink: 'syz.0.739': attribute type 30 has an invalid length. [ 143.005632][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 143.069612][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.740'. [ 143.459621][ T8530] netlink: 'syz.3.744': attribute type 322 has an invalid length. [ 143.819922][ T8535] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 143.827486][ T8535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.837795][ T8536] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 143.845422][ T8536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.866249][ T8535] rdma_op ffff888060c3f1f0 conn xmit_rdma 0000000000000000 [ 143.881356][ T8536] rdma_op ffff88802438f1f0 conn xmit_rdma 0000000000000000 [ 143.968982][ T8538] syzkaller0: create flow: hash 3000917310 index 2 [ 144.044788][ T8540] netlink: 'syz.4.747': attribute type 3 has an invalid length. [ 144.052750][ T8542] bridge3: entered promiscuous mode [ 144.062872][ T8542] bridge3: entered allmulticast mode [ 144.072071][ T8544] netlink: 'syz.3.748': attribute type 10 has an invalid length. [ 144.095309][ T8542] team0: Port device bridge3 added [ 144.111187][ T8543] syzkaller0: delete flow: hash 3000917310 index 2 [ 146.150302][ T8544] bridge0: port 1(ip6gretap0) entered blocking state [ 146.161602][ T8544] bridge0: port 1(ip6gretap0) entered disabled state [ 146.169752][ T8544] ip6gretap0: entered allmulticast mode [ 146.177333][ T8544] ip6gretap0: entered promiscuous mode [ 146.444616][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'. [ 146.731446][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 146.752564][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 146.803489][ T8588] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 147.159429][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.771'. [ 147.348496][ T8620] IPv6: Can't replace route, no match found [ 147.684565][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 147.717462][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 147.888556][ T8625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.777'. [ 147.908475][ T8649] FAULT_INJECTION: forcing a failure. [ 147.908475][ T8649] name failslab, interval 1, probability 0, space 0, times 0 [ 147.940977][ T8649] CPU: 0 UID: 0 PID: 8649 Comm: syz.2.784 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0 [ 147.941004][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 147.941014][ T8649] Call Trace: [ 147.941021][ T8649] <TASK> [ 147.941028][ T8649] dump_stack_lvl+0x241/0x360 [ 147.941053][ T8649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.941069][ T8649] ? __pfx__printk+0x10/0x10 [ 147.941093][ T8649] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 147.941113][ T8649] ? __pfx___might_resched+0x10/0x10 [ 147.941135][ T8649] should_fail_ex+0x40a/0x550 [ 147.941161][ T8649] should_failslab+0xac/0x100 [ 147.941179][ T8649] kmem_cache_alloc_node_noprof+0x77/0x380 [ 147.941196][ T8649] ? __alloc_skb+0x1c3/0x440 [ 147.941221][ T8649] __alloc_skb+0x1c3/0x440 [ 147.941248][ T8649] ? __pfx___alloc_skb+0x10/0x10 [ 147.941273][ T8649] ? netlink_ack_tlv_len+0x6e/0x200 [ 147.941299][ T8649] netlink_ack+0x145/0xa50 [ 147.941336][ T8649] netlink_rcv_skb+0x262/0x430 [ 147.941352][ T8649] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.941373][ T8649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.941414][ T8649] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.941433][ T8649] netlink_unicast+0x7f6/0x990 [ 147.941462][ T8649] ? __pfx_netlink_unicast+0x10/0x10 [ 147.941482][ T8649] ? __virt_addr_valid+0x45f/0x530 [ 147.941506][ T8649] ? __phys_addr_symbol+0x2f/0x70 [ 147.941526][ T8649] ? __check_object_size+0x47a/0x730 [ 147.941546][ T8649] netlink_sendmsg+0x8e4/0xcb0 [ 147.941574][ T8649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.941594][ T8649] ? aa_sock_msg_perm+0x91/0x160 [ 147.941620][ T8649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.941634][ T8649] __sock_sendmsg+0x221/0x270 [ 147.941656][ T8649] ____sys_sendmsg+0x52a/0x7e0 [ 147.941680][ T8649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.941694][ T8649] ? __fget_files+0x2a/0x410 [ 147.941714][ T8649] ? __fget_files+0x2a/0x410 [ 147.941739][ T8649] __sys_sendmmsg+0x36a/0x720 [ 147.941766][ T8649] ? __pfx___sys_sendmmsg+0x10/0x10 [ 147.941793][ T8649] ? __pfx_lock_release+0x10/0x10 [ 147.941812][ T8649] ? kstrtouint_from_user+0x128/0x190 [ 147.941855][ T8649] ? ksys_write+0x22a/0x2b0 [ 147.941875][ T8649] ? __pfx_lock_release+0x10/0x10 [ 147.941901][ T8649] ? sb_end_write+0xe9/0x1c0 [ 147.941919][ T8649] ? vfs_write+0x7fa/0xd10 [ 147.941941][ T8649] ? __mutex_unlock_slowpath+0x227/0x800 [ 147.941988][ T8649] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.942011][ T8649] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.942032][ T8649] ? do_syscall_64+0x100/0x230 [ 147.942056][ T8649] __x64_sys_sendmmsg+0xa0/0xb0 [ 147.942074][ T8649] do_syscall_64+0xf3/0x230 [ 147.942094][ T8649] ? clear_bhb_loop+0x35/0x90 [ 147.942118][ T8649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.942138][ T8649] RIP: 0033:0x7f696418cde9 [ 147.942153][ T8649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.942166][ T8649] RSP: 002b:00007f6965019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 147.942184][ T8649] RAX: ffffffffffffffda RBX: 00007f69643a5fa0 RCX: 00007f696418cde9 [ 147.942196][ T8649] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000005 [ 147.942206][ T8649] RBP: 00007f6965019090 R08: 0000000000000000 R09: 0000000000000000 [ 147.942217][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.942226][ T8649] R13: 0000000000000000 R14: 00007f69643a5fa0 R15: 00007ffe32f90c48 [ 147.942251][ T8649] </TASK> [ 148.522721][ T8654] netlink: 256 bytes leftover after parsing attributes in process `syz.0.785'. [ 148.735892][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 149.358449][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 149.605486][ T8710] bridge0: entered promiscuous mode [ 149.615781][ T8710] bridge0: left promiscuous mode [ 150.095967][ T8714] bond_slave_0: left promiscuous mode [ 150.102623][ T8714] bond_slave_1: left promiscuous mode [ 150.405819][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.448952][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.674555][ T8714] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.682974][ T8714] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.701043][ T8714] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.709804][ T8714] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.825493][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.833200][ T8720] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.850797][ T8720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.923337][ T8720] syz.4.809 (8720) used greatest stack depth: 17648 bytes left [ 151.067664][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.101395][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.495592][ T8767] __nla_validate_parse: 11 callbacks suppressed [ 151.495610][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.824'. [ 151.523503][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 151.567172][ T8767] bridge0: entered promiscuous mode [ 151.596592][ T8767] bridge0: left promiscuous mode [ 151.711357][ T8771] vlan3: entered allmulticast mode [ 151.727937][ T8771] bridge0: entered allmulticast mode [ 151.762757][ T8771] bridge0: left allmulticast mode [ 151.824721][ T8773] tipc: Started in network mode [ 151.829707][ T8773] tipc: Node identity , cluster identity 4711 [ 152.165404][ T8792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.283863][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 152.353467][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'. [ 152.503874][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 152.579167][ T8812] tipc: Started in network mode [ 152.584635][ T8812] tipc: Node identity , cluster identity 4711 [ 152.644243][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 152.867484][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 152.961088][ T8826] netlink: 'syz.2.845': attribute type 4 has an invalid length. [ 153.437631][ T8842] Bluetooth: MGMT ver 1.23 [ 153.752992][ T8856] netlink: 'syz.3.857': attribute type 4 has an invalid length. [ 153.928695][ T8864] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.862'. [ 153.940070][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'. [ 153.972092][ T8864] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.862'. [ 154.016069][ T8869] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 154.130424][ T8873] xt_TCPMSS: Only works on TCP SYN packets [ 154.311609][ T8878] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ�D��UD�w�}�z [ 154.431302][ T8882] xt_CT: No such helper "snmp" [ 154.752691][ T8906] netlink: 'syz.4.874': attribute type 1 has an invalid length. [ 155.624923][ T8935] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004 [ 155.814426][ T8943] netlink: 'syz.0.885': attribute type 4 has an invalid length. [ 156.083172][ T8959] bridge0: entered promiscuous mode [ 156.105670][ T8959] bridge0: left promiscuous mode [ 156.636343][ T8978] __nla_validate_parse: 8 callbacks suppressed [ 156.636362][ T8978] netlink: 280 bytes leftover after parsing attributes in process `syz.4.899'. [ 156.929971][ T8991] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.980553][ T8995] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.093312][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'. [ 157.119079][ T9004] bridge0: entered promiscuous mode [ 157.132349][ T9004] bridge0: left promiscuous mode [ 157.245423][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.908'. [ 157.280131][ T9012] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.289191][ T9012] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.298195][ T9012] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.307059][ T9012] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.449775][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.916'. [ 157.484761][ T9022] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 157.559616][ T9027] dvmrp0: entered allmulticast mode [ 157.604432][ T9031] dvmrp0: left allmulticast mode [ 157.691066][ T9038] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 157.728351][ T9039] netlink: 3 bytes leftover after parsing attributes in process `syz.4.920'. [ 157.739368][ T9038] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 157.752130][ T9039] batadv2: entered promiscuous mode [ 157.773854][ T9039] batadv2: entered allmulticast mode [ 157.781070][ T9046] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.786496][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 157.801029][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'. [ 157.847951][ T9044] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 157.876748][ T9044] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 157.906592][ T9044] xt_TCPMSS: Only works on TCP SYN packets [ 157.991712][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.924'. [ 158.124055][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 158.190055][ T9062] bridge0: entered promiscuous mode [ 158.219548][ T9062] bridge0: left promiscuous mode [ 158.334559][ T9073] syz.3.930 (9073) used obsolete PPPIOCDETACH ioctl [ 158.365642][ T9070] xt_bpf: check failed: parse error [ 158.378327][ T9073] xt_bpf: check failed: parse error [ 158.491565][ T9080] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 158.515703][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'. [ 158.641984][ T9091] set match dimension is over the limit! [ 158.985584][ T9112] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 159.003849][ T9112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.066273][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.180973][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.289154][ T9123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.348436][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.504632][ T9130] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.553997][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.621870][ T9135] netlink: 'syz.0.946': attribute type 3 has an invalid length. [ 159.773408][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.804855][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.820768][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.829936][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.846741][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.860703][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.951963][ T11] bridge_slave_1: left allmulticast mode [ 159.965820][ T11] bridge_slave_1: left promiscuous mode [ 159.971596][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.984651][ T9151] netlink: 'syz.3.954': attribute type 3 has an invalid length. [ 160.026176][ T11] bridge_slave_0: left allmulticast mode [ 160.031874][ T11] bridge_slave_0: left promiscuous mode [ 160.055922][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.610856][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.634827][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.655428][ T11] bond0 (unregistering): Released all slaves [ 160.934482][ T9184] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.186429][ T9141] chnl_net:caif_netlink_parms(): no params data found [ 161.241882][ T9201] netlink: 'syz.3.967': attribute type 20 has an invalid length. [ 161.393843][ T11] hsr_slave_0: left promiscuous mode [ 161.411387][ T11] hsr_slave_1: left promiscuous mode [ 161.423844][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.448991][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.460582][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.468608][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.520830][ T9217] Bluetooth: MGMT ver 1.23 [ 161.527451][ T11] veth1_macvtap: left promiscuous mode [ 161.532991][ T11] veth0_macvtap: left promiscuous mode [ 161.549376][ T11] veth1_vlan: left promiscuous mode [ 161.560364][ T11] veth0_vlan: left promiscuous mode [ 161.889094][ T54] Bluetooth: hci0: command tx timeout [ 162.013865][ T11] team0 (unregistering): Port device team_slave_1 removed [ 162.061161][ T11] team0 (unregistering): Port device team_slave_0 removed [ 162.635541][ T9234] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 162.656552][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.671443][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.682895][ T9234] netlink: 'syz.4.973': attribute type 4 has an invalid length. [ 162.694903][ T9234] __nla_validate_parse: 17 callbacks suppressed [ 162.694922][ T9234] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.973'. [ 162.714510][ T9141] bridge_slave_0: entered allmulticast mode [ 162.728921][ T9141] bridge_slave_0: entered promiscuous mode [ 162.738755][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 162.774790][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 162.787472][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.797264][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.805744][ T9141] bridge_slave_1: entered allmulticast mode [ 162.806760][ T9239] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 162.813876][ T9141] bridge_slave_1: entered promiscuous mode [ 162.844933][ T9239] netlink: 'syz.3.976': attribute type 1 has an invalid length. [ 162.855224][ T9242] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 162.942752][ T9239] bond2: entered promiscuous mode [ 162.972734][ T9239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.047020][ T9141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.064125][ T9141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.081100][ T9246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.094879][ T9246] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 163.113190][ T9246] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 163.126102][ T9246] bond2: (slave ip6gre1): making interface the new active one [ 163.133915][ T9246] ip6gre1: entered promiscuous mode [ 163.141770][ T9246] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 163.158960][ T9253] tipc: Started in network mode [ 163.166010][ T9253] tipc: Node identity , cluster identity 4711 [ 163.308787][ T9141] team0: Port device team_slave_0 added [ 163.338798][ T9141] team0: Port device team_slave_1 added [ 163.470918][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.480223][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.508878][ T9141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.580941][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.605091][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.639287][ T9141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.713018][ T9141] hsr_slave_0: entered promiscuous mode [ 163.720275][ T9141] hsr_slave_1: entered promiscuous mode [ 163.726582][ T9141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.735528][ T9141] Cannot create hsr debugfs directory [ 163.965938][ T54] Bluetooth: hci0: command tx timeout [ 163.997718][ T9287] tipc: Started in network mode [ 164.002723][ T9287] tipc: Node identity , cluster identity 4711 [ 164.210695][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 164.227337][ T9299] pim6reg: entered allmulticast mode [ 164.299792][ T9299] pim6reg: left allmulticast mode [ 164.864166][ T9141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.924801][ T9328] tipc: Started in network mode [ 164.929833][ T9328] tipc: Node identity , cluster identity 4711 [ 164.944354][ T9141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.001536][ T9141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.037489][ T9141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.097249][ T9336] ipvlan2: entered promiscuous mode [ 165.102517][ T9336] ipvlan2: entered allmulticast mode [ 165.120645][ T9336] bridge0: entered allmulticast mode [ 165.128506][ T9336] bridge0: port 1(ipvlan2) entered blocking state [ 165.135651][ T9336] bridge0: port 1(ipvlan2) entered disabled state [ 165.173489][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 165.207000][ T9342] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1007'. [ 165.357547][ T9141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.392776][ T9141] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.431132][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.438363][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.472140][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.479360][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.826637][ T9141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.932939][ T9141] veth0_vlan: entered promiscuous mode [ 165.960816][ T9141] veth1_vlan: entered promiscuous mode [ 166.005314][ T9141] veth0_macvtap: entered promiscuous mode [ 166.020401][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 166.031726][ T9141] veth1_macvtap: entered promiscuous mode [ 166.037429][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 166.047442][ T54] Bluetooth: hci0: command tx timeout [ 166.091049][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.109928][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.121990][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.141731][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.153456][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.177832][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.189795][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.203639][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.216313][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.227618][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.257205][ T9141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.266455][ T9141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.275959][ T9141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.285284][ T9141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.449054][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 166.470172][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 166.484951][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.503117][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.526956][ T9377] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 166.574868][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.591767][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.735005][ T9384] openvswitch: netlink: IP tunnel dst address not specified [ 166.760301][ T9386] netlink: 'syz.3.1018': attribute type 5 has an invalid length. [ 166.962709][ T9389] ip6gretap0: entered promiscuous mode [ 167.000417][ T9389] ip6gretap0: left promiscuous mode [ 167.701060][ T9411] Cannot find set identified by id 0 to match [ 168.106249][ T9423] __nla_validate_parse: 5 callbacks suppressed [ 168.106268][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1030'. [ 168.170816][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.992330][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 169.017346][ T9440] ip6gretap0: left allmulticast mode [ 169.022708][ T9440] ip6gretap0: left promiscuous mode [ 169.055981][ T9440] bridge0: port 1(ip6gretap0) entered disabled state [ 169.089210][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 169.178354][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.191450][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.200422][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.208658][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.222844][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.231497][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.389402][ T9462] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1043'. [ 169.413280][ T9448] chnl_net:caif_netlink_parms(): no params data found [ 169.419595][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1043'. [ 169.448038][ T9462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1043'. [ 169.474775][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1043'. [ 169.590388][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 169.718169][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.745151][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 169.784695][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 169.836591][ T9487] Cannot find set identified by id 0 to match [ 169.884934][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.896648][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.911802][ T9448] bridge_slave_0: entered allmulticast mode [ 169.926995][ T9448] bridge_slave_0: entered promiscuous mode [ 170.005925][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.021018][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.033990][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.042247][ T9448] bridge_slave_1: entered allmulticast mode [ 170.054085][ T9448] bridge_slave_1: entered promiscuous mode [ 170.150655][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.244494][ T9501] tipc: Started in network mode [ 170.249414][ T9501] tipc: Node identity , cluster identity 4711 [ 170.353871][ T9448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.396157][ T9448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.636667][ T9448] team0: Port device team_slave_0 added [ 170.684984][ T9448] team0: Port device team_slave_1 added [ 170.742533][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.751131][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.779104][ T9448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.797044][ T35] bridge_slave_1: left allmulticast mode [ 170.803940][ T35] bridge_slave_1: left promiscuous mode [ 170.809944][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.819454][ T35] bridge_slave_0: left allmulticast mode [ 170.825542][ T35] bridge_slave_0: left promiscuous mode [ 170.831854][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.261862][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.272611][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.297708][ T35] bond0 (unregistering): Released all slaves [ 171.312929][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.320731][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.348026][ T9448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.354807][ T5838] Bluetooth: hci0: command tx timeout [ 171.466856][ T9519] netdevsim netdevsim2: Direct firmware load for � failed with error -2 [ 171.476525][ T9519] netdevsim netdevsim2: Falling back to sysfs fallback for: � [ 171.683572][ T9448] hsr_slave_0: entered promiscuous mode [ 171.701163][ T9448] hsr_slave_1: entered promiscuous mode [ 171.714764][ T9448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.722376][ T9448] Cannot create hsr debugfs directory [ 171.981881][ T9547] tipc: Cannot configure node identity twice [ 172.081117][ T35] hsr_slave_0: left promiscuous mode [ 172.099932][ T35] hsr_slave_1: left promiscuous mode [ 172.120572][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.141418][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.172972][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.181133][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.260157][ T35] veth1_macvtap: left promiscuous mode [ 172.280253][ T35] veth0_macvtap: left promiscuous mode [ 172.290811][ T35] veth1_vlan: left promiscuous mode [ 172.303902][ T35] veth0_vlan: left promiscuous mode [ 172.304228][ T9565] Bluetooth: MGMT ver 1.23 [ 172.792455][ T35] team0 (unregistering): Port device team_slave_1 removed [ 172.838456][ T35] team0 (unregistering): Port device team_slave_0 removed [ 173.414628][ T5838] Bluetooth: hci0: command tx timeout [ 173.444056][ T9569] netlink: 'syz.0.1074': attribute type 9 has an invalid length. [ 173.506305][ T9569] __nla_validate_parse: 4 callbacks suppressed [ 173.506324][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 173.679786][ T9575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1073'. [ 173.804020][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 174.207186][ T9448] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.229616][ T9587] openvswitch: netlink: IPv4 tunnel dst address is zero [ 174.233752][ T9448] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.257952][ T9599] netlink: 'syz.2.1083': attribute type 10 has an invalid length. [ 174.286021][ T9448] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.317184][ T9599] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 174.362323][ T9448] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.476932][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'. [ 174.494970][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 174.613485][ T9617] Bluetooth: MGMT ver 1.23 [ 174.668143][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1089'. [ 174.708074][ T9448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.753781][ T9448] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.790535][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.797752][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.859898][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.867079][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.013286][ T9448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.050668][ T9448] veth0_vlan: entered promiscuous mode [ 175.060497][ T9448] veth1_vlan: entered promiscuous mode [ 175.086541][ T9448] veth0_macvtap: entered promiscuous mode [ 175.096519][ T9448] veth1_macvtap: entered promiscuous mode [ 175.112631][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.131081][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.141680][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.152646][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.164044][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.176956][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.193436][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.203553][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.214765][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.225911][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.246162][ T9448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.263156][ T9448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.272079][ T9448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.281140][ T9448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.343276][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.354320][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.379533][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.387563][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.810594][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.563173][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.572137][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.582397][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.592083][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.599872][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.608170][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.727950][ T9628] chnl_net:caif_netlink_parms(): no params data found [ 177.808177][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.833029][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.840373][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.847846][ T9628] bridge_slave_0: entered allmulticast mode [ 177.854588][ T9628] bridge_slave_0: entered promiscuous mode [ 177.861841][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.869405][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.876890][ T9628] bridge_slave_1: entered allmulticast mode [ 177.883553][ T9628] bridge_slave_1: entered promiscuous mode [ 177.911028][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.923768][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.952585][ T9628] team0: Port device team_slave_0 added [ 177.961398][ T9628] team0: Port device team_slave_1 added [ 177.981924][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.989401][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.016099][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.029597][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.038301][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.064939][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.096800][ T9628] hsr_slave_0: entered promiscuous mode [ 178.103935][ T9628] hsr_slave_1: entered promiscuous mode [ 178.110157][ T9628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.117935][ T9628] Cannot create hsr debugfs directory [ 178.469946][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.521245][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.623767][ T12] bridge_slave_1: left allmulticast mode [ 178.629736][ T12] bridge_slave_1: left promiscuous mode [ 178.635611][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.644221][ T12] bridge_slave_0: left allmulticast mode [ 178.650109][ T12] bridge_slave_0: left promiscuous mode [ 178.662148][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.972342][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.983020][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.993083][ T12] bond0 (unregistering): Released all slaves [ 179.219564][ T12] hsr_slave_0: left promiscuous mode [ 179.225733][ T12] hsr_slave_1: left promiscuous mode [ 179.231707][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.241071][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.249457][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.257088][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.279233][ T12] veth1_macvtap: left promiscuous mode [ 179.285109][ T12] veth0_macvtap: left promiscuous mode [ 179.291303][ T12] veth1_vlan: left promiscuous mode [ 179.296704][ T12] veth0_vlan: left promiscuous mode [ 179.659414][ T5838] Bluetooth: hci0: command tx timeout [ 179.714189][ T12] team0 (unregistering): Port device team_slave_1 removed [ 179.758331][ T12] team0 (unregistering): Port device team_slave_0 removed [ 180.196215][ T9628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.206113][ T9628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.220078][ T9628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.236644][ T9628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.320228][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.366395][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.382766][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.389898][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.405874][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.412947][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.462338][ T9628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.566992][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.601362][ T9628] veth0_vlan: entered promiscuous mode [ 180.616164][ T9628] veth1_vlan: entered promiscuous mode [ 180.641287][ T9628] veth0_macvtap: entered promiscuous mode [ 180.650898][ T9628] veth1_macvtap: entered promiscuous mode [ 180.668362][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.679832][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.690760][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.701384][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.712632][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.728011][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.738999][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.749354][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.759938][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.771241][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.782243][ T9628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.791783][ T9628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.800784][ T9628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.809655][ T9628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.869964][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.882834][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.904437][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.912371][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.779384][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.666246][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.675628][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.684906][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.693709][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.701544][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.713938][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.830253][ T9642] chnl_net:caif_netlink_parms(): no params data found [ 183.891260][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.900434][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.907845][ T9642] bridge_slave_0: entered allmulticast mode [ 183.914808][ T9642] bridge_slave_0: entered promiscuous mode [ 183.923679][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.930917][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.944085][ T9642] bridge_slave_1: entered allmulticast mode [ 183.951213][ T9642] bridge_slave_1: entered promiscuous mode [ 183.977938][ T9642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.989186][ T9642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.017247][ T9642] team0: Port device team_slave_0 added [ 184.024874][ T9642] team0: Port device team_slave_1 added [ 184.053685][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.061012][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.087277][ T9642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.100451][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.107469][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.134072][ T9642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.168099][ T9642] hsr_slave_0: entered promiscuous mode [ 184.174875][ T9642] hsr_slave_1: entered promiscuous mode [ 184.181089][ T9642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.188745][ T9642] Cannot create hsr debugfs directory [ 184.281333][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.354043][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.409883][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.499845][ T11] bridge_slave_1: left allmulticast mode [ 184.505841][ T11] bridge_slave_1: left promiscuous mode [ 184.511580][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.520103][ T11] bridge_slave_0: left allmulticast mode [ 184.526159][ T11] bridge_slave_0: left promiscuous mode [ 184.531916][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.866579][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.877321][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.888577][ T11] bond0 (unregistering): Released all slaves [ 185.160061][ T11] hsr_slave_0: left promiscuous mode [ 185.166793][ T11] hsr_slave_1: left promiscuous mode [ 185.173802][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.181720][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.191533][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.199229][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.229155][ T11] veth1_macvtap: left promiscuous mode [ 185.234995][ T11] veth0_macvtap: left promiscuous mode [ 185.240600][ T11] veth1_vlan: left promiscuous mode [ 185.246482][ T11] veth0_vlan: left promiscuous mode [ 185.662276][ T11] team0 (unregistering): Port device team_slave_1 removed [ 185.710123][ T11] team0 (unregistering): Port device team_slave_0 removed [ 185.805654][ T5841] Bluetooth: hci0: command tx timeout [ 186.189986][ T9642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.200504][ T9642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.210625][ T9642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.240843][ T9642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.313140][ T9642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.342835][ T9642] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.355897][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.363028][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.370015][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 186.375557][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 186.376461][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 186.415925][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.423031][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.553920][ T9642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.590408][ T9642] veth0_vlan: entered promiscuous mode [ 186.600293][ T9642] veth1_vlan: entered promiscuous mode [ 186.627926][ T9642] veth0_macvtap: entered promiscuous mode [ 186.637637][ T9642] veth1_macvtap: entered promiscuous mode [ 186.653229][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.665059][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.675206][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.685802][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.697024][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.707561][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.718837][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.729037][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.739571][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.750697][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.763816][ T9642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.773649][ T9642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.783589][ T9642] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.793228][ T9642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.845785][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.853652][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.876224][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.884206][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.563647][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.532114][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.541835][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.550163][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.558969][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.568462][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.576355][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.691065][ T9656] chnl_net:caif_netlink_parms(): no params data found [ 189.741652][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.749747][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.757059][ T9656] bridge_slave_0: entered allmulticast mode [ 189.763865][ T9656] bridge_slave_0: entered promiscuous mode [ 189.772960][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.780399][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.788184][ T9656] bridge_slave_1: entered allmulticast mode [ 189.795139][ T9656] bridge_slave_1: entered promiscuous mode [ 189.820113][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.833256][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.863963][ T9656] team0: Port device team_slave_0 added [ 189.873579][ T9656] team0: Port device team_slave_1 added [ 189.898515][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.905633][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.932041][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.946120][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.953113][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.979471][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.013593][ T9656] hsr_slave_0: entered promiscuous mode [ 190.019923][ T9656] hsr_slave_1: entered promiscuous mode [ 190.026434][ T9656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.034001][ T9656] Cannot create hsr debugfs directory [ 190.162809][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.233875][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.306264][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.389363][ T12] bridge_slave_1: left allmulticast mode [ 190.395824][ T12] bridge_slave_1: left promiscuous mode [ 190.401529][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.410860][ T12] bridge_slave_0: left allmulticast mode [ 190.416925][ T12] bridge_slave_0: left promiscuous mode [ 190.422690][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.798099][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1095'. [ 190.841347][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.857718][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.872131][ T12] bond0 (unregistering): Released all slaves [ 190.908768][ T9678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'. [ 191.031678][ T9683] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1096'. [ 191.068852][ T9668] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 191.085305][ T9668] netlink: 'syz.2.1093': attribute type 2 has an invalid length. [ 191.120436][ T9671] delete_channel: no stack [ 191.135425][ T9675] vlan4: entered promiscuous mode [ 191.140640][ T9675] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 191.153724][ T9675] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 191.227549][ T9671] delete_channel: no stack [ 191.232153][ T9671] delete_channel: no stack [ 191.240576][ T9687] Bluetooth: MGMT ver 1.23 [ 191.462867][ T9695] netlink: 700 bytes leftover after parsing attributes in process `syz.4.1099'. [ 191.528946][ T12] hsr_slave_0: left promiscuous mode [ 191.537244][ T12] hsr_slave_1: left promiscuous mode [ 191.547768][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.562959][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.575954][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.583898][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.630168][ T12] veth1_macvtap: left promiscuous mode [ 191.636568][ T12] veth0_macvtap: left promiscuous mode [ 191.642590][ T12] veth1_vlan: left promiscuous mode [ 191.648148][ T54] Bluetooth: hci0: command tx timeout [ 191.649587][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 191.663199][ T12] veth0_vlan: left promiscuous mode [ 192.247812][ T12] team0 (unregistering): Port device team_slave_1 removed [ 192.310949][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.019323][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 193.155240][ T9717] dvmrp0: entered allmulticast mode [ 193.199465][ T9717] pimreg: entered allmulticast mode [ 193.263955][ T9717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.285888][ T9717] batadv_slave_1: entered promiscuous mode [ 193.487130][ T9656] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.512548][ T9656] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.582436][ T9656] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.619776][ T9725] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 193.674108][ T9656] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.719573][ T9721] lo speed is unknown, defaulting to 1000 [ 193.736255][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 193.774055][ T9721] lo speed is unknown, defaulting to 1000 [ 193.792334][ T9736] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1114'. [ 193.813195][ T9721] lo speed is unknown, defaulting to 1000 [ 193.832754][ T9721] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 193.856968][ T9721] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.912063][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.950605][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.980290][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.987477][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.997582][ T9721] lo speed is unknown, defaulting to 1000 [ 194.020978][ T9721] lo speed is unknown, defaulting to 1000 [ 194.027922][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.035071][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.047432][ T9721] lo speed is unknown, defaulting to 1000 [ 194.056504][ T9721] lo speed is unknown, defaulting to 1000 [ 194.071109][ T9721] lo speed is unknown, defaulting to 1000 [ 194.082596][ T9721] lo speed is unknown, defaulting to 1000 [ 194.122442][ T9721] lo speed is unknown, defaulting to 1000 [ 194.283004][ T9751] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 194.302350][ T9751] netlink: 'syz.4.1116': attribute type 2 has an invalid length. [ 194.350185][ T9751] vlan4: entered promiscuous mode [ 194.396276][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.406553][ T9755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 194.480492][ T9656] veth0_vlan: entered promiscuous mode [ 194.499948][ T9656] veth1_vlan: entered promiscuous mode [ 194.533211][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540601][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.568076][ T9656] veth0_macvtap: entered promiscuous mode [ 194.578816][ T9656] veth1_macvtap: entered promiscuous mode [ 194.598255][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.626121][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.654934][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.667418][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.678916][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.698688][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.747076][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.795755][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.814989][ T9763] dvmrp0: entered allmulticast mode [ 194.822935][ T9656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.861323][ T9656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.881925][ T9656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.904776][ T9656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.938116][ T9763] pimreg: entered allmulticast mode [ 195.008404][ T9763] batadv_slave_1: entered promiscuous mode [ 195.135313][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.162153][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.196598][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1126'. [ 195.221399][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.239613][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.315667][ T9788] bridge0: entered promiscuous mode [ 195.323450][ T9788] bridge0: left promiscuous mode [ 195.601684][ T9801] netlink: 'syz.4.1133': attribute type 13 has an invalid length. [ 195.646047][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 196.168306][ T9814] __nla_validate_parse: 4 callbacks suppressed [ 196.168326][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 196.239381][ T9826] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1138'. [ 196.254029][ T9824] IPVS: length: 78 != 422621984 [ 196.259613][ T9826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1138'. [ 196.307836][ T9826] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1138'. [ 196.337234][ T9826] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1138'. [ 196.373260][ T9826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1138'. [ 196.736636][ T1122] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.858255][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1141'. [ 197.470088][ T1122] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.612206][ T1122] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.660720][ T1122] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.733556][ T1122] bridge_slave_1: left allmulticast mode [ 197.739384][ T1122] bridge_slave_1: left promiscuous mode [ 197.745157][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.841260][ T9849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1145'. [ 197.851208][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 197.874526][ T1122] bridge_slave_0: left allmulticast mode [ 197.880228][ T1122] bridge_slave_0: left promiscuous mode [ 197.911765][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.007083][ T9864] netlink: 'syz.0.1142': attribute type 4 has an invalid length. [ 198.267111][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.288994][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.302208][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.313253][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1147'. [ 198.313465][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.331521][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.339197][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.690865][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.702931][ T9883] IPVS: length: 78 != 422621984 [ 198.708498][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.720182][ T1122] bond0 (unregistering): Released all slaves [ 198.750789][ T9868] macsec1: entered promiscuous mode [ 198.764523][ T9868] team0: entered promiscuous mode [ 198.769673][ T9868] team_slave_0: entered promiscuous mode [ 198.787545][ T9868] team_slave_1: entered promiscuous mode [ 198.793592][ T9868] macsec1: entered allmulticast mode [ 198.811537][ T9868] team0: entered allmulticast mode [ 198.817058][ T9868] team_slave_0: entered allmulticast mode [ 198.822806][ T9868] team_slave_1: entered allmulticast mode [ 199.045921][ T9872] lo speed is unknown, defaulting to 1000 [ 199.472179][ T9908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.506581][ T9908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.531383][ T9908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 199.551037][ T9923] netlink: 'syz.2.1161': attribute type 4 has an invalid length. [ 199.858211][ T1122] hsr_slave_0: left promiscuous mode [ 199.871711][ T1122] hsr_slave_1: left promiscuous mode [ 199.890909][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.908223][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.945435][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.974136][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.016215][ T1122] veth1_macvtap: left promiscuous mode [ 200.021960][ T1122] veth0_macvtap: left promiscuous mode [ 200.028695][ T1122] veth1_vlan: left promiscuous mode [ 200.034152][ T1122] veth0_vlan: left promiscuous mode [ 200.373538][ T54] Bluetooth: hci0: command tx timeout [ 200.651351][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 200.706391][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 201.165245][ T9908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.183647][ T9908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.194654][ T9908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.211634][ T9936] __nla_validate_parse: 4 callbacks suppressed [ 201.211651][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1165'. [ 201.244654][ T9943] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy��آ�D��UD�w�}�zR' [ 201.267432][ T9943] CPU: 1 UID: 0 PID: 9943 Comm: syz.3.1166 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0 [ 201.267461][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 201.267477][ T9943] Call Trace: [ 201.267484][ T9943] <TASK> [ 201.267492][ T9943] dump_stack_lvl+0x241/0x360 [ 201.267520][ T9943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.267539][ T9943] ? __pfx__printk+0x10/0x10 [ 201.267580][ T9943] ? __kmalloc_cache_noprof+0x243/0x390 [ 201.267598][ T9943] ? sysfs_warn_dup+0x51/0xa0 [ 201.267625][ T9943] sysfs_warn_dup+0x8e/0xa0 [ 201.267648][ T9943] sysfs_do_create_link_sd+0xbe/0x110 [ 201.267673][ T9943] device_add_class_symlinks+0x1c5/0x250 [ 201.267694][ T9943] device_add+0x553/0xbf0 [ 201.267718][ T9943] wiphy_register+0x1a58/0x27b0 [ 201.267753][ T9943] ? __pfx_wiphy_register+0x10/0x10 [ 201.267771][ T9943] ? minstrel_ht_alloc+0x72b/0x860 [ 201.267798][ T9943] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 201.267825][ T9943] ieee80211_register_hw+0x354e/0x4240 [ 201.267861][ T9943] ? ieee80211_register_hw+0x15b1/0x4240 [ 201.267892][ T9943] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 201.267927][ T9943] ? __asan_memset+0x23/0x50 [ 201.267949][ T9943] ? __hrtimer_init+0x170/0x250 [ 201.267979][ T9943] mac80211_hwsim_new_radio+0x2a9f/0x4aa0 [ 201.268034][ T9943] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 201.268057][ T9943] ? kstrndup+0x5c/0xb0 [ 201.268078][ T9943] ? __asan_memcpy+0x40/0x70 [ 201.268104][ T9943] hwsim_new_radio_nl+0xece/0x2290 [ 201.268141][ T9943] ? __pfx___nla_validate_parse+0x10/0x10 [ 201.268168][ T9943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.268227][ T9943] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 201.268255][ T9943] genl_rcv_msg+0xb14/0xec0 [ 201.268284][ T9943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.268334][ T9943] ? __pfx_lock_acquire+0x10/0x10 [ 201.268356][ T9943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.268380][ T9943] ? __pfx___might_resched+0x10/0x10 [ 201.268407][ T9943] netlink_rcv_skb+0x1e3/0x430 [ 201.268423][ T9943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.268444][ T9943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.268492][ T9943] genl_rcv+0x28/0x40 [ 201.268509][ T9943] netlink_unicast+0x7f6/0x990 [ 201.268539][ T9943] ? __pfx_netlink_unicast+0x10/0x10 [ 201.268570][ T9943] ? __virt_addr_valid+0x45f/0x530 [ 201.268595][ T9943] ? __phys_addr_symbol+0x2f/0x70 [ 201.268617][ T9943] ? __check_object_size+0x47a/0x730 [ 201.268638][ T9943] netlink_sendmsg+0x8e4/0xcb0 [ 201.268667][ T9943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.268688][ T9943] ? aa_sock_msg_perm+0x91/0x160 [ 201.268714][ T9943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.268729][ T9943] __sock_sendmsg+0x221/0x270 [ 201.268752][ T9943] ____sys_sendmsg+0x52a/0x7e0 [ 201.268778][ T9943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.268792][ T9943] ? __fget_files+0x2a/0x410 [ 201.268811][ T9943] ? __fget_files+0x2a/0x410 [ 201.268840][ T9943] __sys_sendmsg+0x269/0x350 [ 201.268855][ T9943] ? __pfx_futex_wake+0x10/0x10 [ 201.268881][ T9943] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.268945][ T9943] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.268969][ T9943] ? do_syscall_64+0x100/0x230 [ 201.268994][ T9943] ? do_syscall_64+0xb6/0x230 [ 201.269019][ T9943] do_syscall_64+0xf3/0x230 [ 201.269041][ T9943] ? clear_bhb_loop+0x35/0x90 [ 201.269066][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.269086][ T9943] RIP: 0033:0x7f883d98cde9 [ 201.269102][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.269117][ T9943] RSP: 002b:00007f883b7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.269136][ T9943] RAX: ffffffffffffffda RBX: 00007f883dba6080 RCX: 00007f883d98cde9 [ 201.269148][ T9943] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000009 [ 201.269159][ T9943] RBP: 00007f883da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.269169][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.269179][ T9943] R13: 0000000000000000 R14: 00007f883dba6080 R15: 00007ffcd97bd8b8 [ 201.269209][ T9943] </TASK> [ 201.739091][ T9908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.750583][ T9908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.762206][ T9908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.890049][ T9961] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 201.913302][ T9908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.924062][ T9908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.934931][ T9908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.957182][ T9872] chnl_net:caif_netlink_parms(): no params data found [ 202.043602][ T9967] netlink: 'syz.4.1172': attribute type 8 has an invalid length. [ 202.146720][ T9974] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1171'. [ 202.214078][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.248817][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.269724][ T9872] bridge_slave_0: entered allmulticast mode [ 202.290345][ T9872] bridge_slave_0: entered promiscuous mode [ 202.335498][ T9908] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.358007][ T9908] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.361876][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 202.377405][ T9908] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.397784][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.414459][ T9872] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.432583][ T9872] bridge_slave_1: entered allmulticast mode [ 202.441539][ T9872] bridge_slave_1: entered promiscuous mode [ 202.447963][ T54] Bluetooth: hci0: command tx timeout [ 202.530168][ T9908] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.554440][ T9908] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.562998][ T9908] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.580569][ T9908] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.589317][ T9908] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.598729][ T9908] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.644571][ T9994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 202.666970][ T9994] bridge0: entered promiscuous mode [ 202.677192][ T9994] bridge0: left promiscuous mode [ 202.738583][ T9908] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.755882][ T9908] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.764198][ T9908] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.806474][ T9872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.860705][ T9872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.871056][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1178'. [ 202.972098][ T9872] team0: Port device team_slave_0 added [ 203.119230][ T9872] team0: Port device team_slave_1 added [ 203.209572][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.225704][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.253047][ T9872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.281070][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1187'. [ 203.301555][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.334421][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.378741][ T9872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.429415][T10027] netlink: 'syz.4.1187': attribute type 4 has an invalid length. [ 203.440287][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1188'. [ 203.552201][ T46] lo speed is unknown, defaulting to 1000 [ 203.583439][T10034] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.625432][ T9872] hsr_slave_0: entered promiscuous mode [ 203.672767][ T9872] hsr_slave_1: entered promiscuous mode [ 203.686207][ T9872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.705379][ T9872] Cannot create hsr debugfs directory [ 203.710989][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1192'. [ 204.029723][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 204.062435][T10060] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.074062][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 204.091761][T10061] Cannot find add_set index 32768 as target [ 204.106925][T10064] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.400984][T10073] syzkaller1: entered promiscuous mode [ 204.409927][T10073] syzkaller1: entered allmulticast mode [ 204.431244][T10073] netlink: 'syz.0.1202': attribute type 4 has an invalid length. [ 204.525255][ T54] Bluetooth: hci0: command tx timeout [ 204.670053][ T9872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.680231][ T9872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.699795][ T9872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.713320][ T9872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.722488][T10084] Bluetooth: MGMT ver 1.23 [ 204.872614][ T9872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.908139][ T9872] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.921773][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.928991][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.966272][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.973437][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.120071][T10102] vlan3: left allmulticast mode [ 205.165556][T10102] team0: left allmulticast mode [ 205.183775][T10102] team_slave_0: left allmulticast mode [ 205.194011][T10102] team_slave_1: left allmulticast mode [ 205.200899][T10102] vlan3: left promiscuous mode [ 205.206115][T10102] team0: left promiscuous mode [ 205.211093][T10102] team_slave_0: left promiscuous mode [ 205.221383][T10102] team_slave_1: left promiscuous mode [ 205.234788][T10102] bridge0: port 4(vlan3) entered disabled state [ 205.243088][T10102] vlan2: left allmulticast mode [ 205.258593][T10102] gretap0: left allmulticast mode [ 205.263779][T10102] vlan2: left promiscuous mode [ 205.270031][T10102] gretap0: left promiscuous mode [ 205.275567][T10102] bridge0: port 3(vlan2) entered disabled state [ 205.295923][T10102] bridge_slave_1: left allmulticast mode [ 205.301614][T10102] bridge_slave_1: left promiscuous mode [ 205.308016][T10102] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.317897][T10102] bridge_slave_0: left allmulticast mode [ 205.323712][T10102] bridge_slave_0: left promiscuous mode [ 205.333197][T10102] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.618852][ T9872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.765839][ T9872] veth0_vlan: entered promiscuous mode [ 205.791147][ T9872] veth1_vlan: entered promiscuous mode [ 205.849266][T10128] netlink: 'syz.2.1222': attribute type 4 has an invalid length. [ 205.855669][ T9872] veth0_macvtap: entered promiscuous mode [ 205.877692][ T9872] veth1_macvtap: entered promiscuous mode [ 205.936179][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.953483][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.992229][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.009689][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.023958][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.053969][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.086242][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.097613][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.118269][ T9872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.137687][ T9872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.155284][ T9872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.178395][ T9872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.334246][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.362827][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.382720][T10143] __nla_validate_parse: 9 callbacks suppressed [ 206.382739][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 206.465930][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.474071][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.604733][ T54] Bluetooth: hci0: command tx timeout [ 206.706487][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 206.801050][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 206.815777][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1234'. [ 206.829831][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1234'. [ 207.000921][T10168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1236'. [ 207.032306][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1237'. [ 207.199999][T10178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1240'. [ 207.301401][T10180] lo speed is unknown, defaulting to 1000 [ 207.426067][T10188] netlink: 'syz.4.1244': attribute type 2 has an invalid length. [ 207.434121][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 207.736748][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1246'. [ 207.854064][ T1163] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.702984][ T1163] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.786311][ T1163] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.849778][ T1163] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.166464][ T1163] bridge_slave_1: left allmulticast mode [ 209.172539][ T1163] bridge_slave_1: left promiscuous mode [ 209.204559][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.274803][ T1163] bridge_slave_0: left allmulticast mode [ 209.280517][ T1163] bridge_slave_0: left promiscuous mode [ 209.305036][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.443111][T10234] Cannot find add_set index 32768 as target [ 209.582657][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.594235][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.607077][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.617051][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.633940][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.642263][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.996914][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.008830][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.019304][ T1163] bond0 (unregistering): Released all slaves [ 210.081119][T10240] lo speed is unknown, defaulting to 1000 [ 210.738063][T10240] chnl_net:caif_netlink_parms(): no params data found [ 210.767737][T10275] x_tables: duplicate underflow at hook 1 [ 210.998831][ T1163] hsr_slave_0: left promiscuous mode [ 211.008349][ T1163] hsr_slave_1: left promiscuous mode [ 211.044484][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.051965][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.079898][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.103259][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.153536][ T1163] veth1_macvtap: left promiscuous mode [ 211.167225][ T1163] veth0_macvtap: left promiscuous mode [ 211.180468][ T1163] veth1_vlan: left promiscuous mode [ 211.186384][ T1163] veth0_vlan: left promiscuous mode [ 211.665860][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 211.715030][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 211.739799][ T5838] Bluetooth: hci0: command tx timeout [ 212.175313][T10296] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 212.204442][T10299] __nla_validate_parse: 8 callbacks suppressed [ 212.204461][T10299] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1280'. [ 212.310147][T10322] Bluetooth: MGMT ver 1.23 [ 212.452344][T10325] lo speed is unknown, defaulting to 1000 [ 212.458287][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1287'. [ 212.530909][T10334] FAULT_INJECTION: forcing a failure. [ 212.530909][T10334] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 212.545754][T10334] CPU: 1 UID: 0 PID: 10334 Comm: syz.2.1289 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0 [ 212.545779][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 212.545790][T10334] Call Trace: [ 212.545797][T10334] <TASK> [ 212.545803][T10334] dump_stack_lvl+0x241/0x360 [ 212.545828][T10334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.545845][T10334] ? __pfx__printk+0x10/0x10 [ 212.545871][T10334] ? __pfx_lock_release+0x10/0x10 [ 212.545900][T10334] should_fail_ex+0x40a/0x550 [ 212.545922][T10334] _copy_from_user+0x2d/0xb0 [ 212.545938][T10334] copy_msghdr_from_user+0xae/0x680 [ 212.545961][T10334] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 212.545974][T10334] ? __fget_files+0x2a/0x410 [ 212.545991][T10334] ? __fget_files+0x2a/0x410 [ 212.546010][T10334] __sys_sendmmsg+0x32b/0x720 [ 212.546029][T10334] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.546048][T10334] ? __pfx_lock_release+0x10/0x10 [ 212.546065][T10334] ? kstrtouint_from_user+0x128/0x190 [ 212.546103][T10334] ? ksys_write+0x22a/0x2b0 [ 212.546122][T10334] ? __pfx_lock_release+0x10/0x10 [ 212.546146][T10334] ? sb_end_write+0xe9/0x1c0 [ 212.546163][T10334] ? vfs_write+0x7fa/0xd10 [ 212.546183][T10334] ? __mutex_unlock_slowpath+0x227/0x800 [ 212.546226][T10334] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 212.546248][T10334] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.546269][T10334] ? do_syscall_64+0x100/0x230 [ 212.546291][T10334] __x64_sys_sendmmsg+0xa0/0xb0 [ 212.546309][T10334] do_syscall_64+0xf3/0x230 [ 212.546329][T10334] ? clear_bhb_loop+0x35/0x90 [ 212.546352][T10334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.546370][T10334] RIP: 0033:0x7f696418cde9 [ 212.546385][T10334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.546397][T10334] RSP: 002b:00007f6965019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.546414][T10334] RAX: ffffffffffffffda RBX: 00007f69643a5fa0 RCX: 00007f696418cde9 [ 212.546424][T10334] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000005 [ 212.546434][T10334] RBP: 00007f6965019090 R08: 0000000000000000 R09: 0000000000000000 [ 212.546444][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.546452][T10334] R13: 0000000000000000 R14: 00007f69643a5fa0 R15: 00007ffe32f90c48 [ 212.546474][T10334] </TASK> [ 212.547082][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.791319][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.800023][T10240] bridge_slave_0: entered allmulticast mode [ 212.807164][T10343] trusted_key: syz.2.1290 sent an empty control message without MSG_MORE. [ 212.810813][T10240] bridge_slave_0: entered promiscuous mode [ 212.871660][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.882147][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.934625][T10240] bridge_slave_1: entered allmulticast mode [ 212.941929][T10240] bridge_slave_1: entered promiscuous mode [ 213.066823][T10347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.067957][T10352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1295'. [ 213.107038][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.129462][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.136486][T10353] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1295'. [ 213.156047][T10353] openvswitch: netlink: Message has 44053 unknown bytes. [ 213.253669][T10240] team0: Port device team_slave_0 added [ 213.286295][T10240] team0: Port device team_slave_1 added [ 213.325183][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 213.416326][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.440423][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.486529][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.510063][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.517289][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.543738][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.612194][T10366] bond4: entered promiscuous mode [ 213.623297][T10366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.633858][T10240] hsr_slave_0: entered promiscuous mode [ 213.641788][T10240] hsr_slave_1: entered promiscuous mode [ 213.648300][T10240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.656195][T10240] Cannot create hsr debugfs directory [ 213.742395][T10374] FAULT_INJECTION: forcing a failure. [ 213.742395][T10374] name failslab, interval 1, probability 0, space 0, times 0 [ 213.764868][T10374] CPU: 0 UID: 0 PID: 10374 Comm: syz.3.1301 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0 [ 213.764894][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 213.764911][T10374] Call Trace: [ 213.764917][T10374] <TASK> [ 213.764924][T10374] dump_stack_lvl+0x241/0x360 [ 213.764949][T10374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.764967][T10374] ? __pfx__printk+0x10/0x10 [ 213.764991][T10374] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 213.765011][T10374] ? __pfx___might_resched+0x10/0x10 [ 213.765034][T10374] should_fail_ex+0x40a/0x550 [ 213.765057][T10374] should_failslab+0xac/0x100 [ 213.765076][T10374] kmem_cache_alloc_node_noprof+0x77/0x380 [ 213.765093][T10374] ? __alloc_skb+0x1c3/0x440 [ 213.765117][T10374] __alloc_skb+0x1c3/0x440 [ 213.765143][T10374] ? __pfx___alloc_skb+0x10/0x10 [ 213.765167][T10374] ? netlink_autobind+0xd6/0x2f0 [ 213.765182][T10374] ? netlink_autobind+0x2b0/0x2f0 [ 213.765202][T10374] netlink_sendmsg+0x638/0xcb0 [ 213.765229][T10374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.765249][T10374] ? aa_sock_msg_perm+0x91/0x160 [ 213.765273][T10374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.765286][T10374] __sock_sendmsg+0x221/0x270 [ 213.765305][T10374] ____sys_sendmsg+0x52a/0x7e0 [ 213.765328][T10374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.765342][T10374] ? __fget_files+0x2a/0x410 [ 213.765362][T10374] ? __fget_files+0x2a/0x410 [ 213.765386][T10374] __sys_sendmmsg+0x36a/0x720 [ 213.765412][T10374] ? __pfx___sys_sendmmsg+0x10/0x10 [ 213.765441][T10374] ? __pfx_lock_release+0x10/0x10 [ 213.765458][T10374] ? kstrtouint_from_user+0x128/0x190 [ 213.765498][T10374] ? ksys_write+0x22a/0x2b0 [ 213.765519][T10374] ? __pfx_lock_release+0x10/0x10 [ 213.765544][T10374] ? sb_end_write+0xe9/0x1c0 [ 213.765561][T10374] ? vfs_write+0x7fa/0xd10 [ 213.765583][T10374] ? __mutex_unlock_slowpath+0x227/0x800 [ 213.765629][T10374] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 213.765650][T10374] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 213.765672][T10374] ? do_syscall_64+0x100/0x230 [ 213.765695][T10374] __x64_sys_sendmmsg+0xa0/0xb0 [ 213.765712][T10374] do_syscall_64+0xf3/0x230 [ 213.765731][T10374] ? clear_bhb_loop+0x35/0x90 [ 213.765755][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.765774][T10374] RIP: 0033:0x7f883d98cde9 [ 213.765790][T10374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.765804][T10374] RSP: 002b:00007f883e70e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.765822][T10374] RAX: ffffffffffffffda RBX: 00007f883dba5fa0 RCX: 00007f883d98cde9 [ 213.765833][T10374] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000005 [ 213.765847][T10374] RBP: 00007f883e70e090 R08: 0000000000000000 R09: 0000000000000000 [ 213.765856][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.765865][T10374] R13: 0000000000000000 R14: 00007f883dba5fa0 R15: 00007ffcd97bd8b8 [ 213.765890][T10374] </TASK> [ 213.770739][T10376] netlink: 'syz.0.1302': attribute type 4 has an invalid length. [ 214.138702][T10350] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 214.198509][T10382] netlink: 'syz.3.1305': attribute type 4 has an invalid length. [ 214.279608][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 214.300607][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 214.340874][T10390] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.409689][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 214.557141][T10401] lo speed is unknown, defaulting to 1000 [ 214.716421][T10413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1311'. [ 215.382406][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.415025][T10406] batadv_slave_1: left promiscuous mode [ 215.731834][T10406] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.740831][T10406] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.749771][T10406] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.758725][T10406] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.802110][T10406] ip6erspan0: left promiscuous mode [ 215.849138][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1315'. [ 216.041090][T10240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.057245][T10240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.080528][T10433] netlink: 'syz.2.1319': attribute type 4 has an invalid length. [ 216.092606][T10240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.111191][T10240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.206665][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 216.243364][T10442] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 216.334066][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.351476][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.367121][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.374352][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.411494][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.418796][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.803465][T10457] lo speed is unknown, defaulting to 1000 [ 216.926606][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.976412][T10240] veth0_vlan: entered promiscuous mode [ 216.989618][T10240] veth1_vlan: entered promiscuous mode [ 217.033708][T10240] veth0_macvtap: entered promiscuous mode [ 217.053833][T10240] veth1_macvtap: entered promiscuous mode [ 217.099350][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.114735][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.128783][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.159178][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.178456][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.199495][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.217778][T10240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.241446][T10240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.254572][T10240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.270005][T10240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.371841][T10470] netlink: 'syz.4.1331': attribute type 2 has an invalid length. [ 217.382607][T10470] netlink: 'syz.4.1331': attribute type 9 has an invalid length. [ 217.393595][T10470] __nla_validate_parse: 6 callbacks suppressed [ 217.393614][T10470] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1331'. [ 217.510667][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1331'. [ 217.532676][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 217.545623][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1332'. [ 217.581135][T10470] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 217.616960][T10474] netlink: 'syz.0.1332': attribute type 4 has an invalid length. [ 217.629992][T10474] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1332'. [ 217.732303][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.773614][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.838776][T10479] macvlan4: entered promiscuous mode [ 217.849545][T10479] vlan0: entered promiscuous mode [ 217.914501][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.922425][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.953275][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 218.014707][T10488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1338'. [ 218.078413][T10492] tipc: Started in network mode [ 218.083341][T10492] tipc: Node identity c2acf649de13, cluster identity 4711 [ 218.098836][T10492] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 218.148500][T10492] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.1339'. [ 218.186428][T10492] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 218.281976][T10492] tipc: Disabling bearer <eth:syzkaller0> [ 218.381769][T10512] netlink: 'syz.3.1344': attribute type 4 has an invalid length. [ 218.486567][T10516] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 218.574873][T10521] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1349'. [ 218.615119][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 218.881571][T10543] netlink: 'syz.3.1356': attribute type 10 has an invalid length. [ 218.936190][T10543] dummy0: entered promiscuous mode [ 218.956674][T10543] dummy0: entered allmulticast mode [ 218.980099][T10543] team0: Port device dummy0 added [ 219.023718][T10551] bridge0: entered promiscuous mode [ 219.042204][T10551] bridge0: entered allmulticast mode [ 219.122652][T10553] bridge0: entered promiscuous mode [ 219.142877][T10553] bridge0: entered allmulticast mode [ 219.143226][T10560] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 219.182333][T10563] netlink: 'syz.2.1359': attribute type 4 has an invalid length. [ 219.233858][T10565] macsec2: entered allmulticast mode [ 219.254731][T10565] macvlan0: entered allmulticast mode [ 219.300245][T10565] macvlan0: left allmulticast mode [ 219.339853][T10567] macsec2: entered allmulticast mode [ 219.345324][T10567] macvlan0: entered allmulticast mode [ 219.352751][T10567] macvlan0: left allmulticast mode [ 219.508979][T10581] sctp: [Deprecated]: syz.4.1364 (pid 10581) Use of int in max_burst socket option deprecated. [ 219.508979][T10581] Use struct sctp_assoc_value instead [ 220.066998][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.923826][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.004707][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.056851][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.136724][ T35] bridge_slave_1: left allmulticast mode [ 221.142409][ T35] bridge_slave_1: left promiscuous mode [ 221.148953][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.157678][ T35] bridge_slave_0: left allmulticast mode [ 221.163410][ T35] bridge_slave_0: left promiscuous mode [ 221.169703][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.263712][ T5838] Bluetooth: hci4: link tx timeout [ 221.270252][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.281086][ T5838] Bluetooth: hci4: link tx timeout [ 221.286353][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.670932][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.685579][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.695239][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.709283][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.733662][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.742849][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.891670][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.904611][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.916525][ T35] bond0 (unregistering): Released all slaves [ 221.930855][T10611] veth0_to_bridge: entered promiscuous mode [ 221.951662][T10610] veth0_to_bridge: left promiscuous mode [ 222.011605][T10614] lo speed is unknown, defaulting to 1000 [ 222.582559][T10614] chnl_net:caif_netlink_parms(): no params data found [ 222.700547][T10646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.723050][T10647] sctp: [Deprecated]: syz.3.1383 (pid 10647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.723050][T10647] Use struct sctp_sack_info instead [ 222.780539][ T35] hsr_slave_0: left promiscuous mode [ 222.790259][ T35] hsr_slave_1: left promiscuous mode [ 222.796303][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.814682][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.830958][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.839644][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.891321][ T35] veth1_macvtap: left promiscuous mode [ 222.900949][ T35] veth0_macvtap: left promiscuous mode [ 222.910055][ T35] veth1_vlan: left promiscuous mode [ 222.918906][ T35] veth0_vlan: left promiscuous mode [ 223.079505][T10655] __nla_validate_parse: 6 callbacks suppressed [ 223.079527][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 223.325378][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 223.515118][ T35] team0 (unregistering): Port device team_slave_1 removed [ 223.563073][ T35] team0 (unregistering): Port device team_slave_0 removed [ 223.809028][ T54] Bluetooth: hci0: command tx timeout [ 224.241369][T10671] netlink: 'syz.4.1389': attribute type 32 has an invalid length. [ 224.248310][T10673] netlink: 'syz.3.1387': attribute type 4 has an invalid length. [ 224.265658][T10614] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.286745][T10614] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.295129][T10677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1388'. [ 224.309318][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 224.324819][T10614] bridge_slave_0: entered allmulticast mode [ 224.331877][T10614] bridge_slave_0: entered promiscuous mode [ 224.348060][T10614] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.364966][T10680] FAULT_INJECTION: forcing a failure. [ 224.364966][T10680] name failslab, interval 1, probability 0, space 0, times 0 [ 224.393588][T10680] CPU: 1 UID: 0 PID: 10680 Comm: syz.3.1391 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0 [ 224.393617][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 224.393626][T10680] Call Trace: [ 224.393632][T10680] <TASK> [ 224.393639][T10680] dump_stack_lvl+0x241/0x360 [ 224.393665][T10680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.393682][T10680] ? __pfx__printk+0x10/0x10 [ 224.393732][T10680] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 224.393752][T10680] ? __pfx___might_resched+0x10/0x10 [ 224.393773][T10680] should_fail_ex+0x40a/0x550 [ 224.393796][T10680] should_failslab+0xac/0x100 [ 224.393812][T10680] kmem_cache_alloc_node_noprof+0x77/0x380 [ 224.393829][T10680] ? __alloc_skb+0x1c3/0x440 [ 224.393854][T10680] __alloc_skb+0x1c3/0x440 [ 224.393879][T10680] ? __pfx___alloc_skb+0x10/0x10 [ 224.393903][T10680] ? netlink_autobind+0xd6/0x2f0 [ 224.393919][T10680] ? netlink_autobind+0x2b0/0x2f0 [ 224.393939][T10680] netlink_sendmsg+0x638/0xcb0 [ 224.393966][T10680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.393987][T10680] ? aa_sock_msg_perm+0x91/0x160 [ 224.394013][T10680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.394028][T10680] __sock_sendmsg+0x221/0x270 [ 224.394050][T10680] ____sys_sendmsg+0x52a/0x7e0 [ 224.394075][T10680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.394090][T10680] ? __fget_files+0x2a/0x410 [ 224.394116][T10680] ? __fget_files+0x2a/0x410 [ 224.394142][T10680] __sys_sendmmsg+0x36a/0x720 [ 224.394169][T10680] ? __pfx___sys_sendmmsg+0x10/0x10 [ 224.394197][T10680] ? __pfx_lock_release+0x10/0x10 [ 224.394216][T10680] ? kstrtouint_from_user+0x128/0x190 [ 224.394261][T10680] ? ksys_write+0x22a/0x2b0 [ 224.394279][T10680] ? __pfx_lock_release+0x10/0x10 [ 224.394303][T10680] ? sb_end_write+0xe9/0x1c0 [ 224.394320][T10680] ? vfs_write+0x7fa/0xd10 [ 224.394341][T10680] ? __mutex_unlock_slowpath+0x227/0x800 [ 224.394386][T10680] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.394409][T10680] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.394428][T10680] ? do_syscall_64+0x100/0x230 [ 224.394451][T10680] __x64_sys_sendmmsg+0xa0/0xb0 [ 224.394469][T10680] do_syscall_64+0xf3/0x230 [ 224.394489][T10680] ? clear_bhb_loop+0x35/0x90 [ 224.394513][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.394532][T10680] RIP: 0033:0x7f883d98cde9 [ 224.394546][T10680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.394559][T10680] RSP: 002b:00007f883e70e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 224.394578][T10680] RAX: ffffffffffffffda RBX: 00007f883dba5fa0 RCX: 00007f883d98cde9 [ 224.394590][T10680] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000009 [ 224.394600][T10680] RBP: 00007f883e70e090 R08: 0000000000000000 R09: 0000000000000000 [ 224.394610][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.394619][T10680] R13: 0000000000000000 R14: 00007f883dba5fa0 R15: 00007ffcd97bd8b8 [ 224.394645][T10680] </TASK> [ 224.401879][T10614] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.718426][T10614] bridge_slave_1: entered allmulticast mode [ 224.730399][T10614] bridge_slave_1: entered promiscuous mode [ 224.768435][T10671] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 224.939227][T10614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.993441][T10614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.086516][T10614] team0: Port device team_slave_0 added [ 225.169531][T10614] team0: Port device team_slave_1 added [ 225.204540][T10706] IPv6: sit4: Disabled Multicast RS [ 225.235725][T10614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.254426][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.314316][T10614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.335959][T10614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.343666][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.385468][T10614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.415389][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 225.454443][T10718] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 225.461716][T10614] hsr_slave_0: entered promiscuous mode [ 225.477116][T10614] hsr_slave_1: entered promiscuous mode [ 225.483565][T10614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.492086][T10614] Cannot create hsr debugfs directory [ 225.630500][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 225.756105][T10730] netlink: 'syz.0.1406': attribute type 6 has an invalid length. [ 225.776614][T10730] netlink: 'syz.0.1406': attribute type 7 has an invalid length. [ 225.789474][T10730] netlink: 'syz.0.1406': attribute type 8 has an invalid length. [ 225.800604][T10730] netlink: 'syz.0.1406': attribute type 13 has an invalid length. [ 225.884401][ T54] Bluetooth: hci0: command tx timeout [ 226.042211][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1411'. [ 226.066124][T10747] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1410'. [ 226.194162][T10754] netlink: 'syz.0.1413': attribute type 4 has an invalid length. [ 226.239891][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 226.381071][T10762] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 226.392634][T10767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1419'. [ 226.396344][T10762] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 226.482704][T10771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1420'. [ 226.519867][T10614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.539423][T10614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.644345][T10614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.692294][T10614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.828368][T10787] Bluetooth: MGMT ver 1.23 [ 226.848392][T10783] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 226.911387][T10614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.942577][T10614] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.984475][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.991640][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.032534][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.039702][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.458952][T10804] netlink: 'syz.4.1429': attribute type 4 has an invalid length. [ 227.512765][T10614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.623885][T10614] veth0_vlan: entered promiscuous mode [ 227.675514][T10614] veth1_vlan: entered promiscuous mode [ 227.731743][T10614] veth0_macvtap: entered promiscuous mode [ 227.768449][T10614] veth1_macvtap: entered promiscuous mode [ 227.817032][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.864169][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.876629][T10614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.917949][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.949022][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.979747][T10614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.006442][T10614] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.023878][T10614] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.032951][T10614] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.056443][T10614] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.146865][T10826] __nla_validate_parse: 4 callbacks suppressed [ 228.146885][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 228.169090][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 228.335377][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.364705][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.418192][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.433825][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.561581][T10839] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1440'. [ 228.681271][T10845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1442'. [ 228.760351][T10847] tipc: Cannot configure node identity twice [ 228.919917][T10856] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 228.928819][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 228.956289][T10816] ================================================================== [ 228.964402][T10816] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 228.972673][T10816] Read of size 8 at addr ffff88801294a858 by task syz.4.1435/10816 [ 228.980581][T10816] [ 228.982918][T10816] CPU: 1 UID: 0 PID: 10816 Comm: syz.4.1435 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0 [ 228.982943][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 228.982955][T10816] Call Trace: [ 228.982961][T10816] <TASK> [ 228.982969][T10816] dump_stack_lvl+0x241/0x360 [ 228.982993][T10816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.983010][T10816] ? __pfx__printk+0x10/0x10 [ 228.983036][T10816] ? _printk+0xd5/0x120 [ 228.983059][T10816] ? __virt_addr_valid+0x183/0x530 [ 228.983082][T10816] ? __virt_addr_valid+0x183/0x530 [ 228.983106][T10816] print_report+0x169/0x550 [ 228.983130][T10816] ? __virt_addr_valid+0x183/0x530 [ 228.983152][T10816] ? __virt_addr_valid+0x183/0x530 [ 228.983171][T10816] ? __virt_addr_valid+0x45f/0x530 [ 228.983192][T10816] ? __phys_addr+0xba/0x170 [ 228.983211][T10816] ? skb_queue_purge_reason+0xb9/0x500 [ 228.983230][T10816] kasan_report+0x143/0x180 [ 228.983254][T10816] ? skb_queue_purge_reason+0xb9/0x500 [ 228.983277][T10816] skb_queue_purge_reason+0xb9/0x500 [ 228.983299][T10816] ? __mutex_unlock_slowpath+0x227/0x800 [ 228.983321][T10816] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 228.983346][T10816] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 228.983367][T10816] ? drain_workqueue+0x2d3/0x3a0 [ 228.983398][T10816] vhci_flush+0x44/0x50 [ 228.983416][T10816] ? __pfx_vhci_flush+0x10/0x10 [ 228.983431][T10816] hci_dev_reset+0x42a/0x5d0 [ 228.983454][T10816] sock_do_ioctl+0x158/0x460 [ 228.983476][T10816] ? __pfx_sock_do_ioctl+0x10/0x10 [ 228.983517][T10816] sock_ioctl+0x626/0x8e0 [ 228.983537][T10816] ? __pfx_sock_ioctl+0x10/0x10 [ 228.983555][T10816] ? __fget_files+0x2a/0x410 [ 228.983574][T10816] ? __fget_files+0x2a/0x410 [ 228.983592][T10816] ? __pfx_sock_ioctl+0x10/0x10 [ 228.983609][T10816] __se_sys_ioctl+0xf5/0x170 [ 228.983630][T10816] do_syscall_64+0xf3/0x230 [ 228.983651][T10816] ? clear_bhb_loop+0x35/0x90 [ 228.983674][T10816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.983695][T10816] RIP: 0033:0x7f3c1bf8cde9 [ 228.983710][T10816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.983724][T10816] RSP: 002b:00007f3c1cdc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.983744][T10816] RAX: ffffffffffffffda RBX: 00007f3c1c1a5fa0 RCX: 00007f3c1bf8cde9 [ 228.983757][T10816] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009 [ 228.983768][T10816] RBP: 00007f3c1c00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 228.983780][T10816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.983791][T10816] R13: 0000000000000000 R14: 00007f3c1c1a5fa0 R15: 00007fffb2cace38 [ 228.983809][T10816] </TASK> [ 228.983816][T10816] [ 229.249530][T10816] Allocated by task 10614: [ 229.253943][T10816] kasan_save_track+0x3f/0x80 [ 229.258619][T10816] __kasan_kmalloc+0x98/0xb0 [ 229.263209][T10816] __kmalloc_cache_noprof+0x243/0x390 [ 229.268571][T10816] vhci_open+0x57/0x360 [ 229.272716][T10816] misc_open+0x2cc/0x340 [ 229.276943][T10816] chrdev_open+0x521/0x600 [ 229.281345][T10816] do_dentry_open+0xdec/0x1960 [ 229.286093][T10816] vfs_open+0x3b/0x370 [ 229.290148][T10816] path_openat+0x2c81/0x3590 [ 229.294729][T10816] do_filp_open+0x27f/0x4e0 [ 229.299221][T10816] do_sys_openat2+0x13e/0x1d0 [ 229.303885][T10816] __x64_sys_openat+0x247/0x2a0 [ 229.308730][T10816] do_syscall_64+0xf3/0x230 [ 229.313246][T10816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.319149][T10816] [ 229.321462][T10816] Freed by task 10614: [ 229.325511][T10816] kasan_save_track+0x3f/0x80 [ 229.330184][T10816] kasan_save_free_info+0x40/0x50 [ 229.335200][T10816] __kasan_slab_free+0x59/0x70 [ 229.339960][T10816] kfree+0x196/0x430 [ 229.343843][T10816] vhci_release+0xbc/0xd0 [ 229.348166][T10816] __fput+0x3e9/0x9f0 [ 229.352140][T10816] task_work_run+0x24f/0x310 [ 229.356727][T10816] do_exit+0xa2a/0x28e0 [ 229.360873][T10816] do_group_exit+0x207/0x2c0 [ 229.365462][T10816] __x64_sys_exit_group+0x3f/0x40 [ 229.370497][T10816] x64_sys_call+0x26a8/0x26b0 [ 229.375169][T10816] do_syscall_64+0xf3/0x230 [ 229.379664][T10816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.385637][T10816] [ 229.387947][T10816] The buggy address belongs to the object at ffff88801294a800 [ 229.387947][T10816] which belongs to the cache kmalloc-1k of size 1024 [ 229.401991][T10816] The buggy address is located 88 bytes inside of [ 229.401991][T10816] freed 1024-byte region [ffff88801294a800, ffff88801294ac00) [ 229.415784][T10816] [ 229.418098][T10816] The buggy address belongs to the physical page: [ 229.424509][T10816] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12948 [ 229.433259][T10816] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 229.441750][T10816] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 229.449730][T10816] page_type: f5(slab) [ 229.453712][T10816] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 229.462282][T10816] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 229.470853][T10816] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 229.479509][T10816] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 229.488263][T10816] head: 00fff00000000003 ffffea00004a5201 ffffffffffffffff 0000000000000000 [ 229.496922][T10816] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 229.505573][T10816] page dumped because: kasan: bad access detected [ 229.511981][T10816] page_owner tracks the page as allocated [ 229.517684][T10816] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1163, tgid 1163 (kworker/u8:8), ts 70403999856, free_ts 70299936732 [ 229.536949][T10816] post_alloc_hook+0x1f4/0x240 [ 229.541796][T10816] get_page_from_freelist+0x365c/0x37a0 [ 229.547348][T10816] __alloc_frozen_pages_noprof+0x292/0x710 [ 229.553144][T10816] alloc_pages_mpol+0x311/0x660 [ 229.557978][T10816] allocate_slab+0x8f/0x3a0 [ 229.562479][T10816] ___slab_alloc+0xc27/0x14a0 [ 229.567154][T10816] __slab_alloc+0x58/0xa0 [ 229.571473][T10816] __kmalloc_noprof+0x2e6/0x4c0 [ 229.576331][T10816] ___neigh_create+0x72b/0x2320 [ 229.581200][T10816] ip6_finish_output2+0xb48/0x1780 [ 229.586323][T10816] ip6_finish_output+0x41e/0x840 [ 229.591267][T10816] ndisc_send_skb+0xb30/0x1450 [ 229.596027][T10816] addrconf_dad_completed+0x76c/0xcd0 [ 229.601385][T10816] addrconf_dad_work+0xdbc/0x16a0 [ 229.606394][T10816] process_scheduled_works+0xa66/0x1840 [ 229.611931][T10816] worker_thread+0x870/0xd30 [ 229.616516][T10816] page last free pid 5830 tgid 5830 stack trace: [ 229.622824][T10816] free_frozen_pages+0xe0d/0x10e0 [ 229.627839][T10816] __put_partials+0x160/0x1c0 [ 229.632505][T10816] put_cpu_partial+0x17c/0x250 [ 229.637257][T10816] __slab_free+0x290/0x380 [ 229.641670][T10816] qlist_free_all+0x9a/0x140 [ 229.646256][T10816] kasan_quarantine_reduce+0x14f/0x170 [ 229.651703][T10816] __kasan_slab_alloc+0x23/0x80 [ 229.656605][T10816] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 229.662488][T10816] __alloc_skb+0x1c3/0x440 [ 229.666897][T10816] rtnl_getlink+0x673/0xc50 [ 229.671393][T10816] rtnetlink_rcv_msg+0x73f/0xcf0 [ 229.676322][T10816] netlink_rcv_skb+0x1e3/0x430 [ 229.681073][T10816] netlink_unicast+0x7f6/0x990 [ 229.685826][T10816] netlink_sendmsg+0x8e4/0xcb0 [ 229.690577][T10816] __sock_sendmsg+0x221/0x270 [ 229.695243][T10816] __sys_sendto+0x363/0x4c0 [ 229.699744][T10816] [ 229.702055][T10816] Memory state around the buggy address: [ 229.707671][T10816] ffff88801294a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 229.715731][T10816] ffff88801294a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 229.723782][T10816] >ffff88801294a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.731829][T10816] ^ [ 229.738758][T10816] ffff88801294a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.746808][T10816] ffff88801294a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.754853][T10816] ================================================================== [ 229.783045][T10862] validate_nla: 1 callbacks suppressed [ 229.783066][T10862] netlink: 'syz.2.1447': attribute type 1 has an invalid length. [ 229.788982][T10816] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 229.789002][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.4.1435 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0 [ 229.789022][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 229.789034][T10816] Call Trace: [ 229.789041][T10816] <TASK> [ 229.789049][T10816] dump_stack_lvl+0x241/0x360 [ 229.789074][T10816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.789090][T10816] ? __pfx__printk+0x10/0x10 [ 229.789116][T10816] ? preempt_schedule+0xe1/0xf0 [ 229.789138][T10816] ? vscnprintf+0x5d/0x90 [ 229.789157][T10816] panic+0x349/0x880 [ 229.789180][T10816] ? check_panic_on_warn+0x21/0xb0 [ 229.789203][T10816] ? __pfx_panic+0x10/0x10 [ 229.789229][T10816] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 229.789250][T10816] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 229.789269][T10816] ? print_report+0x502/0x550 [ 229.789296][T10816] check_panic_on_warn+0x86/0xb0 [ 229.789318][T10816] ? skb_queue_purge_reason+0xb9/0x500 [ 229.789340][T10816] end_report+0x77/0x160 [ 229.789363][T10816] kasan_report+0x154/0x180 [ 229.789388][T10816] ? skb_queue_purge_reason+0xb9/0x500 [ 229.789413][T10816] skb_queue_purge_reason+0xb9/0x500 [ 229.789436][T10816] ? __mutex_unlock_slowpath+0x227/0x800 [ 229.789458][T10816] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 229.789482][T10816] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 229.789516][T10816] ? drain_workqueue+0x2d3/0x3a0 [ 229.789540][T10816] vhci_flush+0x44/0x50 [ 229.789559][T10816] ? __pfx_vhci_flush+0x10/0x10 [ 229.789576][T10816] hci_dev_reset+0x42a/0x5d0 [ 229.789601][T10816] sock_do_ioctl+0x158/0x460 [ 229.789624][T10816] ? __pfx_sock_do_ioctl+0x10/0x10 [ 229.789652][T10816] sock_ioctl+0x626/0x8e0 [ 229.789672][T10816] ? __pfx_sock_ioctl+0x10/0x10 [ 229.789690][T10816] ? __fget_files+0x2a/0x410 [ 229.789709][T10816] ? __fget_files+0x2a/0x410 [ 229.789729][T10816] ? __pfx_sock_ioctl+0x10/0x10 [ 229.789747][T10816] __se_sys_ioctl+0xf5/0x170 [ 229.789769][T10816] do_syscall_64+0xf3/0x230 [ 229.789791][T10816] ? clear_bhb_loop+0x35/0x90 [ 229.789815][T10816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.789835][T10816] RIP: 0033:0x7f3c1bf8cde9 [ 230.007888][T10816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.027500][T10816] RSP: 002b:00007f3c1cdc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.035911][T10816] RAX: ffffffffffffffda RBX: 00007f3c1c1a5fa0 RCX: 00007f3c1bf8cde9 [ 230.043878][T10816] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009 [ 230.051835][T10816] RBP: 00007f3c1c00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 230.059803][T10816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.067786][T10816] R13: 0000000000000000 R14: 00007f3c1c1a5fa0 R15: 00007fffb2cace38 [ 230.075756][T10816] </TASK> [ 230.079053][T10816] Kernel Offset: disabled [ 230.083366][T10816] Rebooting in 86400 seconds..