last executing test programs: 54.700031765s ago: executing program 2 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x9b}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$cgroup_devices(r7, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4000, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 54.36298107s ago: executing program 2 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) pipe(&(0x7f00000000c0)) 54.052762884s ago: executing program 2 (id=598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x5}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c, 0x3}}}}]}]}, 0x68}}, 0x0) 40.304156455s ago: executing program 2 (id=598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x5}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c, 0x3}}}}]}]}, 0x68}}, 0x0) 27.869942954s ago: executing program 2 (id=598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x5}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c, 0x3}}}}]}]}, 0x68}}, 0x0) 13.175147463s ago: executing program 2 (id=598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x5}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c, 0x3}}}}]}]}, 0x68}}, 0x0) 3.256708678s ago: executing program 3 (id=1026): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) 3.065365168s ago: executing program 3 (id=1029): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e1ff0000000000000000000e00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x60}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000010000000000000700000000000000000008000201000000002e2a"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000300), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xefbb, 0x10}) 2.866473927s ago: executing program 3 (id=1032): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x48010) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) 2.703695901s ago: executing program 3 (id=1033): socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10140, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f0000000640)=0x3) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) 2.57207306s ago: executing program 0 (id=1034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x22, 0x2, 0x4) bind$bt_hci(r1, &(0x7f00000001c0)={0x22, 0x4, 0x4}, 0x6) sendmsg$rds(r1, &(0x7f0000002dc0)={&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)=""/149, 0x95}], 0x1, &(0x7f0000002bc0)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{0x10001, 0x64}, {&(0x7f0000000400)=""/70, 0x46}, &(0x7f00000027c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000240)}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/105, 0x69}, {&(0x7f0000002640)=""/75, 0x4b}, {&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f00000026c0)=""/236, 0xec}], 0x8, 0x0, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3ff, 0xfffffffd}, &(0x7f0000002540)=0x1fc0, &(0x7f0000002840)=0x4b0, 0x2, 0x48b, 0x8, 0x4, 0x21, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x10000, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002880)=""/141, 0x8d}, &(0x7f0000002940), 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002980)=""/215, 0xd7}, &(0x7f0000002a80), 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x2b450947, 0xe0e}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2}, &(0x7f0000002ac0)=0x369a1514, &(0x7f0000002b00)=0x7, 0x800000000000, 0x10000, 0x7fff, 0x7, 0x50, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x9d}, &(0x7f0000002b40)=0x7fffffffffffffff, &(0x7f0000002b80)=0x80000000, 0x22a, 0x1000, 0x4, 0x5, 0x51, 0x5}}], 0x1f8, 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 1.931853826s ago: executing program 1 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0x10}, {0x0, 0xb}}}, 0x24}}, 0x20044000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10d, 0x10d, 0x3, [@union={0x7, 0x2, 0x0, 0x5, 0x1, 0x6, [{0x6, 0x5, 0x3}, {0xd, 0x2, 0x4}]}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x1, [{0x6, 0x31, 0x3}, {0xa, 0x4, 0x4}, {0x3, 0xfffffff9, 0x8}, {0x9, 0x9, 0x5}, {0xa, 0x1, 0xfffffff0}]}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0xe, 0x4}, {0x10}]}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @datasec={0xe, 0x8, 0x0, 0xf, 0x1, [{0x4, 0xcd3, 0x5}, {0x4, 0x1000, 0x3}, {0x5, 0x4, 0x9}, {0x4, 0x9, 0x9}, {0x4, 0x7f, 0xb}, {0x3, 0x0, 0xfc}, {0x2, 0x46, 0x1000}, {0x3, 0xef, 0x2}], "f6"}, @float={0xe, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000400)=""/193, 0x12b, 0xc1, 0x1, 0x401, 0x10000, @value}, 0x28) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000640)={0xfffffffe, {{0x2, 0x4e23, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e20, @multicast1}}]}, 0x110) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) close(r11) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x14, 0x16, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x5bbd36f8dd88720f, 0xc, '\x00', r4, @lirc_mode2=0x30189de0e5d87250, r3, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.80721563s ago: executing program 1 (id=1040): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100"], 0x60}], 0x1, 0x8001) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x804, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) getpeername(r0, &(0x7f0000000080)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x88, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x88}}, 0x1080) readv(r1, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000000840)=""/111, 0x6f}], 0x2) 1.695823003s ago: executing program 4 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r1, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900012308008000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000001800)=""/4119, 0x1017}], 0x1}, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x1000) (async, rerun: 64) r7 = socket$kcm(0x21, 0x2, 0x2) (rerun: 64) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xc}}], 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x5c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xa8, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xa8}}, 0x40) 1.619349326s ago: executing program 3 (id=1042): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8003, 0x16080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8003, 0x16080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x5d, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.595860934s ago: executing program 0 (id=1043): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000240)="f50086364dd28c47835cbb2b9923742a0a20e7123716a82eaf4c656cca63c16fb30ccb5f552089565f64de504ecb703be7632be287dac4c23418a4eec16aed05fb7ef0fe13c8e53d832b8dae7783121f3fb1fce2ca9aed9a24284e7be7c9ecb76df5b5ba384893e4a5", 0x69, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x81, @loopback, 0xffff7fff}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "4289b015b1"}]}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xec, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffc}, @NL80211_ATTR_FRAME_MATCH={0xc5, 0x5b, "3d1e1ba56e7667aefd4230aa02454a8a728bcbc67174b599bbb944b94bd7f43ec323763fe0b0d801ad9b7680a2fdac272ed153265624bdb4f8d3811aaef6cb3eb2145824e68367e8cb6e283533b2d541b3bad94b66b5a65025ecbe9556f6e22547e183dbf683c6efefa0c30cd29ab8a21c6bc6b95ee5bda8ff4aab6699680784aa85a73a2af485c7d06dbe9268bc51cd07cecb10b82c04ec526093df5868b4826bcf98716cf0b9a2c58db9c41cb0d563e61e11ee404df418ef95861371a942d3fe"}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x6, [@const={0xf, 0x0, 0x0, 0xa, 0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}, @restrict={0xc, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0x6}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x5}]}, @enum64={0x10, 0x4, 0x0, 0x13, 0x1, 0x0, [{0x10, 0x5, 0x2}, {0x1, 0x2ac, 0x7}, {0xb, 0x1, 0x4}, {0xa, 0x6, 0x6}]}]}, {0x0, [0x61, 0x30, 0x0, 0x5f]}}, &(0x7f0000000000)=""/32, 0xa6, 0x20, 0x1, 0x10, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.348954647s ago: executing program 3 (id=1044): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x0, 0x0, 0xffff, 0x1080, r2, 0xccf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}]}, 0x18}], 0x1}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6e7}, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x21, 0x0, 0x0, 0x7, 0x24, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendto$inet6(r9, &(0x7f0000000680)='m', 0x1, 0x8000, 0x0, 0x0) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x11a}}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x2, 0x5, 0x8, r8}, &(0x7f0000000100)=0x10) 1.267974943s ago: executing program 0 (id=1045): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000012002102000000001000000000000000", @ANYRES64], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001540)="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", 0xfd}], 0x4}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000140)=0x24, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)=0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.266093759s ago: executing program 4 (id=1046): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x5c) 1.056892504s ago: executing program 0 (id=1047): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x38}}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x12}]}, 0x38}}, 0x0) 1.055250617s ago: executing program 4 (id=1048): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0x190, 0xa, 0x148, 0x0, 0x10, 0x3a0, 0x2a8, 0x2a8, 0x3a0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'virt_wifi0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x0, 0x30, 0x0, 0x0, 0x7fff, 0x1ff}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x498) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x85}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0xe, 0x80800) socketpair(0x1b, 0x2, 0x4, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000005c0)) connect$bt_l2cap(r2, &(0x7f0000000540)={0x1f, 0xc144, @any, 0x6, 0x1}, 0xe) 803.281105ms ago: executing program 1 (id=1049): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "000000000000000e"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008800000079ff9eab8182d2d0000000000000000000e3c4df48ff0000", @ANYRES8=r1, @ANYRESOCT=r1], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000240)=""/198, 0x41000, 0x0, '\x00', r1, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="51492e530a95ad5ce8718cb8494c40a8a2b24271c44fab24f67f743020892b15c642d1b4774621cf0922da1de424f9caca807ae9d28cefdac14d30668a681f14b9497d1605a28d00047bfea8834a7a775b69381e953294e5155e4c67e3c6b811519e27abacc0b02773bd34a20648fd85ffae0528e60fb73643f13cc65a3b094a27eb184905e3008f1802ebf29f91b1c1433237bacadb3872c2b5fb818b3f92", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c0002000000000000000000040007800c0004000000008000000000"], 0x3c}}, 0x0) 709.769871ms ago: executing program 0 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000840)) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4068, 0xfe4}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000100)=""/29, 0x1d}], 0x3}, 0x12100) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff77}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000280)='syzkaller\x00', 0x40, 0x19, &(0x7f0000000480)=""/25, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xb, 0x7, 0xffff8001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x5, 0x3, 0x7, 0x6}], 0x10, 0xffff, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000800)=r8) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r2, 0xf21, 0xfffffffe, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) r11 = socket(0x1, 0x3, 0x0) unshare(0x20000400) connect$inet6(r11, &(0x7f0000000380)={0xa, 0x4e20, 0x1b47, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 678.165127ms ago: executing program 4 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x20, 0xa05, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1) close(r2) 553.275514ms ago: executing program 1 (id=1052): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xfd9b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) select(0x40, &(0x7f0000000240)={0x9, 0x5, 0xffffffffffffff5d, 0x5, 0x8b, 0x1, 0x5, 0xffffffffffffffff}, &(0x7f00000002c0)={0x8, 0x5, 0x0, 0x8, 0xfffffffffffffffc, 0x5, 0x80000001, 0xffffffffffffffff}, &(0x7f0000000300)={0x8, 0xffffffffffffffff, 0xb, 0x9, 0x5, 0x953, 0x3, 0x9}, &(0x7f0000000340)={0x0, 0x2710}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x31}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004044}, 0x20000880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000340)={0x0, 0x40, &(0x7f00000004c0)={&(0x7f0000000380)={0x44, r7, 0x1, 0x70bd2d, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r7, 0x100, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 347.943245ms ago: executing program 4 (id=1053): syz_emit_ethernet(0x40, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x7, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x1}, {0x3}, {0x3}, {0x7fff}], @llc={@llc={0x80, 0x4, "e117", "5e352b6706603dedbb088318e51326c8883b13a4cfbe"}}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x5d3, 0x101, 0xb5b, 0x408]}) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x103, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 347.210767ms ago: executing program 1 (id=1054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write(r4, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0xfdef) close(0x4) 161.183445ms ago: executing program 0 (id=1055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x3, @mcast1}], 0x4c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc880) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x39b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x27, 0x0, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x64, 0x0, 0x7, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @remote, {[@ssrr={0x89, 0xb, 0x49, [@dev={0xac, 0x14, 0x14, 0x1d}, @multicast1]}, @generic={0x88, 0x2}]}}}}}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x8}, 0xc) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x401, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7a0a}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x1d, &(0x7f0000000340)=""/29, 0x0, 0x10, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r7, 0x1, 0x1, r8], &(0x7f00000006c0)=[{0x3, 0x2, 0xb, 0xa}, {0x1, 0x5, 0x6, 0x5}, {0x4, 0x1, 0xe, 0x2}, {0x5, 0x1, 0x9, 0x9}], 0x10, 0x7, @void, @value}, 0x94) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r9, 0x51f723591d62d1ee, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x80}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x43d}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xfffeffff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) 118.902734ms ago: executing program 4 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x22008040}, 0x4010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x177}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x364}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80) 0s ago: executing program 1 (id=1057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, 0x2, 0x9, 0x5}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) sendto$inet(r2, &(0x7f0000000040)="bdefd3f3ebe56a260d233fb14fec7610ed4f9d98610d95325deb998beedf6a06cfd2724b274df347690c6d9ec60d0399348f7863693c531769c1aa8aa1421c3ef4e3489f2ac9926315f6b8ca7ae6f67e90b255a0b4238328d3c8cf400b3562e2e847fbd8dbb985cf3366d3cebc84d174f48f1a00f4d67b8922ef48f01a541634eab1061d506c08b5d5757254a5", 0x8d, 0x4000, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000000)='}\x00', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 83.059821][ T5816] cgroup: Unknown subsys name 'net' [ 83.190902][ T5816] cgroup: Unknown subsys name 'cpuset' [ 83.199967][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.845978][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.601720][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.609476][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.622537][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.630075][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.637780][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.646009][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.653969][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.701036][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.701464][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.715924][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.723647][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.726556][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.732320][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.741843][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.746053][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.753035][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.758610][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.767267][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.773625][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.781577][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.790633][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.796392][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.800961][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.808714][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.836392][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.445711][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 88.499920][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.643152][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.702013][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 88.714077][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.901701][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.909354][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.917081][ T5847] bridge_slave_0: entered allmulticast mode [ 88.924751][ T5847] bridge_slave_0: entered promiscuous mode [ 88.934045][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.941992][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.949305][ T5847] bridge_slave_1: entered allmulticast mode [ 88.956916][ T5847] bridge_slave_1: entered promiscuous mode [ 88.970359][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.977668][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.984799][ T5832] bridge_slave_0: entered allmulticast mode [ 88.992702][ T5832] bridge_slave_0: entered promiscuous mode [ 89.005884][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.013339][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.020819][ T5834] bridge_slave_0: entered allmulticast mode [ 89.028748][ T5834] bridge_slave_0: entered promiscuous mode [ 89.071304][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.078596][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.085706][ T5832] bridge_slave_1: entered allmulticast mode [ 89.093773][ T5832] bridge_slave_1: entered promiscuous mode [ 89.106650][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.113843][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.121077][ T5834] bridge_slave_1: entered allmulticast mode [ 89.128368][ T5834] bridge_slave_1: entered promiscuous mode [ 89.138450][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.229801][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.267613][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.280432][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.321548][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.344570][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.351940][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.359651][ T5849] bridge_slave_0: entered allmulticast mode [ 89.368072][ T5849] bridge_slave_0: entered promiscuous mode [ 89.392362][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.399934][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.407423][ T5833] bridge_slave_0: entered allmulticast mode [ 89.414691][ T5833] bridge_slave_0: entered promiscuous mode [ 89.424807][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.437267][ T5847] team0: Port device team_slave_0 added [ 89.443576][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.450892][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.458141][ T5849] bridge_slave_1: entered allmulticast mode [ 89.465415][ T5849] bridge_slave_1: entered promiscuous mode [ 89.484138][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.491535][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.498832][ T5833] bridge_slave_1: entered allmulticast mode [ 89.506546][ T5833] bridge_slave_1: entered promiscuous mode [ 89.529059][ T5847] team0: Port device team_slave_1 added [ 89.563423][ T5832] team0: Port device team_slave_0 added [ 89.613764][ T5834] team0: Port device team_slave_0 added [ 89.624289][ T5834] team0: Port device team_slave_1 added [ 89.645818][ T5832] team0: Port device team_slave_1 added [ 89.676474][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.683432][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.710722][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.724507][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.731746][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.757799][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.784549][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.810392][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.843673][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.859763][ T5846] Bluetooth: hci3: command tx timeout [ 89.865497][ T55] Bluetooth: hci1: command tx timeout [ 89.873832][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.881459][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.907660][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.920902][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.926377][ T5844] Bluetooth: hci2: command tx timeout [ 89.935618][ T5846] Bluetooth: hci0: command tx timeout [ 89.937092][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.941162][ T55] Bluetooth: hci4: command tx timeout [ 89.952661][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.979831][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.028841][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.035908][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.062194][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.080464][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.087886][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.113987][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.134374][ T5849] team0: Port device team_slave_0 added [ 90.174793][ T5847] hsr_slave_0: entered promiscuous mode [ 90.181555][ T5847] hsr_slave_1: entered promiscuous mode [ 90.209474][ T5849] team0: Port device team_slave_1 added [ 90.219490][ T5833] team0: Port device team_slave_0 added [ 90.283399][ T5833] team0: Port device team_slave_1 added [ 90.320680][ T5832] hsr_slave_0: entered promiscuous mode [ 90.327763][ T5832] hsr_slave_1: entered promiscuous mode [ 90.333763][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.341584][ T5832] Cannot create hsr debugfs directory [ 90.385013][ T5834] hsr_slave_0: entered promiscuous mode [ 90.391450][ T5834] hsr_slave_1: entered promiscuous mode [ 90.398375][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.406052][ T5834] Cannot create hsr debugfs directory [ 90.422447][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.430174][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.456403][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.469393][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.476453][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.502583][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.525356][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.532420][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.558692][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.599349][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.606344][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.632452][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.830512][ T5833] hsr_slave_0: entered promiscuous mode [ 90.837372][ T5833] hsr_slave_1: entered promiscuous mode [ 90.843496][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.851323][ T5833] Cannot create hsr debugfs directory [ 90.908204][ T5849] hsr_slave_0: entered promiscuous mode [ 90.914671][ T5849] hsr_slave_1: entered promiscuous mode [ 90.921138][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.928873][ T5849] Cannot create hsr debugfs directory [ 91.304100][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.317624][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.343123][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.353036][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.448229][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.474736][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.487947][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.514339][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.584923][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.604947][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.633144][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.662665][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.715751][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.741191][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.761779][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.777463][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.777897][ T1208] cfg80211: failed to load regulatory.db [ 91.874171][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.921841][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.936708][ T55] Bluetooth: hci1: command tx timeout [ 91.936810][ T5846] Bluetooth: hci3: command tx timeout [ 91.957534][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.968839][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.981717][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.017419][ T5846] Bluetooth: hci4: command tx timeout [ 92.020494][ T55] Bluetooth: hci0: command tx timeout [ 92.022847][ T5846] Bluetooth: hci2: command tx timeout [ 92.039173][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.053260][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.068073][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.075356][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.128146][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.144040][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.157955][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.165132][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.178762][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.185867][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.225599][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.232788][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.255252][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.325389][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.332641][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.374061][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.381277][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.399263][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.512362][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.579463][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.586664][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.602854][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.610033][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.629038][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.660112][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.753339][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.760558][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.830044][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.837241][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.023245][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.053105][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.084666][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.234344][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.354771][ T5847] veth0_vlan: entered promiscuous mode [ 93.414684][ T5847] veth1_vlan: entered promiscuous mode [ 93.435965][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.493843][ T5833] veth0_vlan: entered promiscuous mode [ 93.610081][ T5833] veth1_vlan: entered promiscuous mode [ 93.634669][ T5847] veth0_macvtap: entered promiscuous mode [ 93.650376][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.660748][ T5847] veth1_macvtap: entered promiscuous mode [ 93.698159][ T5834] veth0_vlan: entered promiscuous mode [ 93.724286][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.751443][ T5834] veth1_vlan: entered promiscuous mode [ 93.762477][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.791185][ T5833] veth0_macvtap: entered promiscuous mode [ 93.805080][ T5832] veth0_vlan: entered promiscuous mode [ 93.818181][ T5833] veth1_macvtap: entered promiscuous mode [ 93.834306][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.843465][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.854110][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.863748][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.902468][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.910985][ T5832] veth1_vlan: entered promiscuous mode [ 93.935255][ T5849] veth0_vlan: entered promiscuous mode [ 93.943756][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.969935][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.978776][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.988052][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.996958][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.006888][ T5846] Bluetooth: hci1: command tx timeout [ 94.007530][ T55] Bluetooth: hci3: command tx timeout [ 94.032745][ T5834] veth0_macvtap: entered promiscuous mode [ 94.044911][ T5849] veth1_vlan: entered promiscuous mode [ 94.087550][ T55] Bluetooth: hci2: command tx timeout [ 94.087672][ T5846] Bluetooth: hci0: command tx timeout [ 94.093009][ T55] Bluetooth: hci4: command tx timeout [ 94.104529][ T5834] veth1_macvtap: entered promiscuous mode [ 94.151100][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.161728][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.232386][ T5832] veth0_macvtap: entered promiscuous mode [ 94.242439][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.278135][ T5832] veth1_macvtap: entered promiscuous mode [ 94.286731][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.302129][ T5849] veth0_macvtap: entered promiscuous mode [ 94.328810][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.330486][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.337393][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.347547][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.362593][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.371465][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.389596][ T5849] veth1_macvtap: entered promiscuous mode [ 94.416973][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.424806][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.462479][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.483261][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.505158][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.511000][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.520741][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.545791][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.563787][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.579389][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.604528][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.636470][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.645230][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.713421][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.744610][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.756062][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.765312][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.013962][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.031025][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.142884][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.167251][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.215798][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.252039][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.261273][ T5938] Bluetooth: MGMT ver 1.23 [ 95.344918][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.355074][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.408023][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 95.502598][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.532606][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.576674][ T5940] netlink: 'syz.3.10': attribute type 11 has an invalid length. [ 95.600657][ T5940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10'. [ 95.631817][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.687191][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.086506][ T55] Bluetooth: hci3: command tx timeout [ 96.096569][ T55] Bluetooth: hci1: command tx timeout [ 96.145832][ T5962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15'. [ 96.168922][ T55] Bluetooth: hci4: command tx timeout [ 96.168950][ T5844] Bluetooth: hci2: command tx timeout [ 96.180475][ T5846] Bluetooth: hci0: command tx timeout [ 96.338201][ T5968] Zero length message leads to an empty skb [ 97.342150][ T6007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.514265][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 97.765270][ T5919] IPVS: starting estimator thread 0... [ 97.786735][ T6039] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 97.908071][ T6046] IPVS: using max 25 ests per chain, 60000 per kthread [ 98.253131][ T6063] syzkaller1: entered promiscuous mode [ 98.275530][ T6063] syzkaller1: entered allmulticast mode [ 98.299183][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 98.762137][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.925535][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 98.974925][ T6102] netlink: 56 bytes leftover after parsing attributes in process `syz.2.49'. [ 98.998431][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 99.007378][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 99.026268][ T6101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.50'. [ 99.035367][ T6103] netlink: 'syz.3.48': attribute type 12 has an invalid length. [ 99.209086][ T6111] delete_channel: no stack [ 99.839087][ T6145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.082088][ T6147] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 100.386220][ T6163] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 100.611463][ T6171] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.639908][ T6171] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 100.804157][ T6180] netlink: 'syz.4.76': attribute type 3 has an invalid length. [ 100.842062][ T6180] __nla_validate_parse: 10 callbacks suppressed [ 100.842081][ T6180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.76'. [ 100.868593][ T6185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.74'. [ 101.072501][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'. [ 101.153126][ T6192] xfrm1: entered promiscuous mode [ 101.174617][ T6192] xfrm1: entered allmulticast mode [ 101.178130][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'. [ 101.348437][ T6208] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 101.700436][ T6226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.89'. [ 101.866861][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 101.901908][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 101.922534][ T6234] syz.2.92 uses obsolete (PF_INET,SOCK_PACKET) [ 101.976493][ T6234] netlink: 'syz.2.92': attribute type 10 has an invalid length. [ 102.052645][ T6234] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 102.135932][ T6248] tipc: Started in network mode [ 102.141436][ T6248] tipc: Node identity , cluster identity 4711 [ 102.185826][ T6247] tipc: Started in network mode [ 102.198411][ T6247] tipc: Node identity , cluster identity 4711 [ 102.374161][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 102.378159][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'. [ 102.533629][ T6253] xt_CT: No such helper "snmp_trap" [ 102.819144][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'. [ 102.844213][ T6267] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 103.152754][ T6297] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 103.334583][ T6303] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 103.770728][ T6321] bridge_slave_0: left allmulticast mode [ 103.792327][ T6321] bridge_slave_0: left promiscuous mode [ 103.820624][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.864463][ T6321] bridge_slave_1: left allmulticast mode [ 103.871850][ T6321] bridge_slave_1: left promiscuous mode [ 103.880656][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.914281][ T6321] bond0: (slave bond_slave_0): Releasing backup interface [ 103.954634][ T6321] bond0: (slave bond_slave_1): Releasing backup interface [ 103.980490][ T6321] team0: Port device team_slave_0 removed [ 103.994197][ T6321] team0: Port device team_slave_1 removed [ 104.020058][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.036695][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.053680][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.078090][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.593491][ T6361] ipt_rpfilter: unknown options [ 104.750353][ T6367] netlink: 'syz.2.132': attribute type 10 has an invalid length. [ 104.772937][ T6367] batadv0: entered promiscuous mode [ 104.803606][ T6367] batadv0: entered allmulticast mode [ 104.832250][ T6367] bridge0: port 3(batadv0) entered blocking state [ 104.884957][ T6367] bridge0: port 3(batadv0) entered disabled state [ 104.909287][ T6367] bridge0: port 3(batadv0) entered blocking state [ 104.915872][ T6367] bridge0: port 3(batadv0) entered forwarding state [ 105.006902][ T1150] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 105.016528][ T1150] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 105.060084][ T6381] veth1_macvtap: left promiscuous mode [ 105.299801][ T6398] openvswitch: netlink: IP tunnel dst address not specified [ 105.407517][ T6395] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 106.353565][ T6440] __nla_validate_parse: 10 callbacks suppressed [ 106.353584][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 106.481797][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 106.751729][ T6457] Cannot find set identified by id 0 to match [ 106.814553][ T6459] veth0: entered promiscuous mode [ 106.858598][ T6459] warning: `syz.1.156' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.901291][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 107.179959][ T6475] C: renamed from lo (while UP) [ 107.188462][ T6475] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 107.214301][ T6472] netlink: 76 bytes leftover after parsing attributes in process `syz.0.161'. [ 107.350775][ T6455] geneve2: entered promiscuous mode [ 107.357349][ T6455] geneve2: entered allmulticast mode [ 107.404026][ T6480] xt_TPROXY: Can be used only with -p tcp or -p udp [ 107.462343][ T6483] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 107.470405][ T6483] netlink: 224 bytes leftover after parsing attributes in process `syz.0.164'. [ 107.790754][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 109.422195][ T6569] netlink: 284 bytes leftover after parsing attributes in process `syz.0.188'. [ 109.481730][ T6568] netlink: 284 bytes leftover after parsing attributes in process `syz.0.188'. [ 109.919344][ T6590] netlink: 56 bytes leftover after parsing attributes in process `syz.1.193'. [ 110.071502][ T6586] veth5: entered allmulticast mode [ 110.225024][ T6577] netlink: 'syz.2.190': attribute type 4 has an invalid length. [ 111.311903][ T6577] syz.2.190 (6577) used greatest stack depth: 20296 bytes left [ 111.510590][ T6620] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 111.526732][ T6620] netlink: 224 bytes leftover after parsing attributes in process `syz.4.204'. [ 111.644866][ T9] IPVS: starting estimator thread 0... [ 111.652134][ T6630] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 111.736853][ T6631] IPVS: using max 37 ests per chain, 88800 per kthread [ 111.815711][ T5890] IPVS: starting estimator thread 0... [ 111.906475][ T6638] IPVS: using max 27 ests per chain, 64800 per kthread [ 112.210724][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 112.227695][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 112.263200][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 112.275974][ T6658] netlink: 'syz.3.214': attribute type 18 has an invalid length. [ 112.334645][ T6658] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.343883][ T6658] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.352757][ T6658] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.361532][ T6658] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.610178][ T6668] IPVS: length: 157 != 24 [ 112.621713][ T6668] openvswitch: netlink: Message has 3 unknown bytes. [ 112.645451][ T6668] openvswitch: netlink: Actions may not be safe on all matching packets [ 112.658604][ T6673] netlink: 'syz.3.218': attribute type 2 has an invalid length. [ 112.746788][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 112.887472][ T6688] xt_ecn: cannot match TCP bits for non-tcp packets [ 112.898496][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 113.092049][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 113.158626][ T6669] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 113.417844][ T6706] netlink: 'syz.3.226': attribute type 11 has an invalid length. [ 113.434626][ T6706] netlink: 224 bytes leftover after parsing attributes in process `syz.3.226'. [ 113.801605][ T6725] netlink: 80 bytes leftover after parsing attributes in process `syz.1.233'. [ 113.810550][ T6719] xt_l2tp: v2 sid > 0xffff: 262144 [ 113.813417][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 114.637880][ T6766] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 116.925497][ T6838] __nla_validate_parse: 3 callbacks suppressed [ 116.925514][ T6838] netlink: 96 bytes leftover after parsing attributes in process `syz.0.260'. [ 117.148976][ T6851] xfrm0 speed is unknown, defaulting to 1000 [ 117.186838][ T6851] xfrm0 speed is unknown, defaulting to 1000 [ 117.194979][ T6851] xfrm0 speed is unknown, defaulting to 1000 [ 117.296261][ T6851] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.383811][ T6851] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.430974][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 117.442049][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 117.481108][ T6865] netlink: 80 bytes leftover after parsing attributes in process `syz.3.266'. [ 117.584151][ T6851] xfrm0 speed is unknown, defaulting to 1000 [ 117.658934][ T6851] xfrm0 speed is unknown, defaulting to 1000 [ 117.727809][ T6851] xfrm0 speed is unknown, defaulting to 1000 [ 117.791761][ T6851] xfrm0 speed is unknown, defaulting to 1000 [ 117.881050][ T6851] xfrm0 speed is unknown, defaulting to 1000 [ 118.311763][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 118.784776][ T6914] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 118.855433][ T6918] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 118.949155][ T6918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 118.960997][ T6918] netlink: 'syz.0.281': attribute type 11 has an invalid length. [ 119.473315][ T6952] openvswitch: netlink: Message has -1 unknown bytes. [ 119.561094][ T6958] openvswitch: netlink: Message has -1 unknown bytes. [ 119.989771][ T6980] netlink: 248 bytes leftover after parsing attributes in process `syz.2.301'. [ 120.053480][ T6983] netlink: 'syz.1.299': attribute type 32 has an invalid length. [ 120.210672][ T6987] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 120.299401][ T6992] netlink: 3 bytes leftover after parsing attributes in process `syz.3.304'. [ 120.343990][ T6992] openvswitch: netlink: Actions may not be safe on all matching packets [ 120.345136][ T6996] ieee802154 phy1 wpan1: encryption failed: -22 [ 120.375609][ T7001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.425979][ T7001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.509318][ T7005] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 120.761891][ T7019] netlink: 'syz.1.310': attribute type 33 has an invalid length. [ 120.813824][ T7019] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.310'. [ 121.054674][ T7031] netlink: 14 bytes leftover after parsing attributes in process `syz.4.314'. [ 121.769258][ T7066] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.940371][ T7080] __nla_validate_parse: 4 callbacks suppressed [ 121.940391][ T7080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.326'. [ 122.017765][ T7080] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 122.064501][ T7082] bridge0: port 3(batadv0) entered disabled state [ 122.144632][ T7082] bridge_slave_0: left allmulticast mode [ 122.170887][ T7082] bridge_slave_0: left promiscuous mode [ 122.187208][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.212786][ T7086] xt_TCPMSS: Only works on TCP SYN packets [ 122.214553][ T7082] bridge_slave_1: left allmulticast mode [ 122.234690][ T7086] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 122.240659][ T7082] bridge_slave_1: left promiscuous mode [ 122.251107][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.282315][ T7082] bond0: (slave veth0_to_bond): Releasing backup interface [ 122.350497][ T7082] bond0: (slave bond_slave_0): Releasing backup interface [ 122.375951][ T7082] bond0: (slave bond_slave_1): Releasing backup interface [ 122.399435][ T7082] team0: Port device team_slave_0 removed [ 122.413415][ T7082] team0: Port device team_slave_1 removed [ 122.420855][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.432666][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.442161][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.451861][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.676093][ T7091] netlink: 88 bytes leftover after parsing attributes in process `syz.4.330'. [ 122.699404][ T7091] netem: invalid attributes len -24 [ 122.706496][ T7091] netem: change failed [ 122.723515][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 122.824397][ T7101] batman_adv: batadv0: Adding interface: gretap1 [ 122.845818][ T7101] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 124.033261][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.346'. [ 124.110777][ T7155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.162154][ T7156] can: request_module (can-proto-0) failed. [ 124.186012][ T7165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.349'. [ 124.466863][ T7177] netlink: 108 bytes leftover after parsing attributes in process `syz.3.351'. [ 124.475914][ T7177] netlink: 108 bytes leftover after parsing attributes in process `syz.3.351'. [ 124.518724][ T7180] netlink: 64 bytes leftover after parsing attributes in process `syz.0.352'. [ 124.534821][ T7177] netlink: 108 bytes leftover after parsing attributes in process `syz.3.351'. [ 124.830788][ T7190] netlink: 'syz.0.355': attribute type 142 has an invalid length. [ 124.855817][ T7189] netlink: 'syz.0.355': attribute type 142 has an invalid length. [ 125.042781][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 125.084563][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 125.857635][ T7249] netlink: 'syz.3.373': attribute type 3 has an invalid length. [ 126.767229][ T7290] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.180342][ T7319] __nla_validate_parse: 10 callbacks suppressed [ 127.180360][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 127.206046][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.393'. [ 127.693003][ T7346] netlink: 'syz.0.404': attribute type 1 has an invalid length. [ 127.724139][ T7346] netlink: 'syz.0.404': attribute type 10 has an invalid length. [ 127.735652][ T7346] netlink: 'syz.0.404': attribute type 4 has an invalid length. [ 127.789741][ T7346] netlink: 'syz.0.404': attribute type 1 has an invalid length. [ 127.813917][ T7346] netlink: 192 bytes leftover after parsing attributes in process `syz.0.404'. [ 127.834641][ T7350] netlink: 240 bytes leftover after parsing attributes in process `syz.3.403'. [ 128.132431][ T7363] netlink: zone id is out of range [ 128.151073][ T7363] netlink: zone id is out of range [ 128.160947][ T7363] netlink: zone id is out of range [ 128.174545][ T7363] netlink: zone id is out of range [ 128.184652][ T7363] netlink: zone id is out of range [ 128.193549][ T7363] netlink: zone id is out of range [ 128.203131][ T7363] netlink: zone id is out of range [ 128.229404][ T7363] netlink: zone id is out of range [ 128.254141][ T7363] netlink: zone id is out of range [ 128.318611][ T7368] pim6reg1: entered promiscuous mode [ 128.323957][ T7368] pim6reg1: entered allmulticast mode [ 128.717074][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 128.833921][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 128.864192][ T7394] vlan1: entered allmulticast mode [ 128.874342][ T7394] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 128.971839][ T7412] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 128.986971][ T7412] netlink: 'syz.3.426': attribute type 2 has an invalid length. [ 129.028105][ T7415] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 129.043134][ T7415] netlink: 56 bytes leftover after parsing attributes in process `syz.0.427'. [ 129.085918][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 129.268898][ T7428] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 129.504981][ T7436] team0: Device hsr_slave_0 failed to register rx_handler [ 129.893226][ T7454] validate_nla: 1 callbacks suppressed [ 129.893244][ T7454] netlink: 'syz.1.442': attribute type 21 has an invalid length. [ 129.957294][ T7454] netlink: 156 bytes leftover after parsing attributes in process `syz.1.442'. [ 129.982594][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'. [ 130.243680][ T7477] netlink: 'syz.4.447': attribute type 21 has an invalid length. [ 130.843935][ T7508] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 130.980444][ T7508] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 131.467739][ T7543] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 131.543589][ T7543] macvlan0: entered promiscuous mode [ 131.592337][ T7543] macvlan0: entered allmulticast mode [ 131.610117][ T7543] veth1_vlan: entered allmulticast mode [ 131.620597][ T7543] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 132.011788][ T7573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.392447][ T7595] net_ratelimit: 396 callbacks suppressed [ 132.392464][ T7595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 132.481841][ T7598] __nla_validate_parse: 6 callbacks suppressed [ 132.481861][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 132.531120][ T7598] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 132.562880][ T7598] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.575086][ T7598] gretap1: entered promiscuous mode [ 132.609774][ T7598] gretap1: entered allmulticast mode [ 132.632214][ T7602] sctp: [Deprecated]: syz.0.483 (pid 7602) Use of int in max_burst socket option. [ 132.632214][ T7602] Use struct sctp_assoc_value instead [ 132.731316][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.232274][ T7633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'. [ 133.776605][ T7660] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 133.902614][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 133.951729][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 133.967574][ T7660] wireguard: wg1: Could not create IPv4 socket [ 133.974938][ T7669] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 134.236074][ T7688] raw_sendmsg: syz.0.502 forgot to set AF_INET. Fix it! [ 134.578315][ T7706] xt_addrtype: ipv6 does not support BROADCAST matching [ 134.667317][ T7707] netlink: 'syz.2.505': attribute type 1 has an invalid length. [ 135.080468][ T7722] netlink: 21 bytes leftover after parsing attributes in process `syz.3.511'. [ 135.226819][ T7729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 135.334233][ T7732] pimreg: entered allmulticast mode [ 135.652544][ T7752] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 135.660694][ T7752] netlink: 224 bytes leftover after parsing attributes in process `syz.4.519'. [ 135.671670][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 135.784273][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.0.521'. [ 136.319735][ T7778] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 136.529862][ T7795] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.805738][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.537'. [ 137.103648][ T7813] sctp: [Deprecated]: syz.2.539 (pid 7813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.103648][ T7813] Use struct sctp_sack_info instead [ 137.213256][ T7822] netlink: 'syz.0.542': attribute type 3 has an invalid length. [ 137.238239][ T7822] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 137.261173][ T7822] netlink: 'syz.0.542': attribute type 3 has an invalid length. [ 137.330492][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.520757][ T7839] openvswitch: netlink: Actions may not be safe on all matching packets [ 137.536687][ T7837] only policy match revision 0 supported [ 137.536707][ T7837] unable to load match [ 137.659462][ T7843] syzkaller1: entered promiscuous mode [ 137.687941][ T7843] syzkaller1: entered allmulticast mode [ 137.908654][ T7854] __nla_validate_parse: 4 callbacks suppressed [ 137.908673][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 138.003904][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 138.035293][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'. [ 138.330493][ T7872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'. [ 138.345902][ T7872] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 138.398774][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 138.518687][ T7877] bond3: entered allmulticast mode [ 138.549719][ T7877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.823189][ T7896] netlink: 'syz.2.562': attribute type 4 has an invalid length. [ 138.856247][ T7896] netlink: 17 bytes leftover after parsing attributes in process `syz.2.562'. [ 138.871527][ T7898] bond0: entered allmulticast mode [ 138.887610][ T7898] bond_slave_0: entered allmulticast mode [ 138.902669][ T7898] bond_slave_1: entered allmulticast mode [ 138.925913][ T7901] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 138.929950][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 139.047828][ T7909] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 139.055521][ T7909] netlink: 216 bytes leftover after parsing attributes in process `syz.2.567'. [ 139.148752][ T7910] IPVS: stopping master sync thread 7914 ... [ 139.169963][ T7915] netlink: 'syz.0.566': attribute type 2 has an invalid length. [ 139.203717][ T7920] netlink: 'syz.3.568': attribute type 4 has an invalid length. [ 139.238653][ T7908] block nbd2: not configured, cannot reconfigure [ 139.294303][ T7920] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 139.499340][ T7928] Bluetooth: MGMT ver 1.23 [ 139.696423][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 139.707147][ T7939] netlink: 112 bytes leftover after parsing attributes in process `syz.2.573'. [ 140.041832][ T7956] openvswitch: netlink: Multiple metadata blocks provided [ 140.447072][ T7977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.456572][ T7972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.943120][ T6746] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.103142][ T6746] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.175744][ T6746] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.434688][ T6746] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.522905][ T8059] wg2: entered promiscuous mode [ 142.540705][ T8059] wg2: entered allmulticast mode [ 142.847259][ T5919] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 142.855509][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.864534][ T5919] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 142.876211][ T5919] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 142.883808][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.898582][ T5919] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 142.906214][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.923305][ T5919] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 142.930942][ T5919] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 142.945401][ T5919] hid-generic 0005:0008:5505.0001: unknown main item tag 0x1 [ 142.953101][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.963643][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.981540][ T5919] hid-generic 0005:0008:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 143.412731][ T8088] fido_id[8088]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 143.451245][ T8103] netlink: 'syz.0.612': attribute type 4 has an invalid length. [ 143.538506][ T8108] __nla_validate_parse: 8 callbacks suppressed [ 143.538525][ T8108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.615'. [ 143.640926][ T8100] xt_CT: No such helper "pptp" [ 143.695578][ T8116] x_tables: duplicate underflow at hook 2 [ 143.716600][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 144.127395][ T6746] bond0 (unregistering): Released all slaves [ 144.145738][ T6746] bond1 (unregistering): Released all slaves [ 144.163001][ T6746] bond2 (unregistering): Released all slaves [ 144.242018][ T6746] bond3 (unregistering): Released all slaves [ 144.257656][ T975] xfrm0 speed is unknown, defaulting to 1000 [ 144.264043][ T975] infiniband syz1: ib_query_port failed (-19) [ 144.283818][ T8117] bridge_slave_1: left allmulticast mode [ 144.306933][ T8117] bridge_slave_1: left promiscuous mode [ 144.316919][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.418630][ T8117] bridge_slave_0: left allmulticast mode [ 144.429771][ T8117] bridge_slave_0: left promiscuous mode [ 144.436858][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.489714][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 144.499036][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 145.046281][ T5844] Bluetooth: hci3: command tx timeout [ 145.091433][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 145.180234][ T8161] sctp: [Deprecated]: syz.3.627 (pid 8161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.180234][ T8161] Use struct sctp_sack_info instead [ 145.210524][ T8156] xt_connbytes: Forcing CT accounting to be enabled [ 145.217383][ T8156] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.283891][ T8167] sctp: [Deprecated]: syz.3.627 (pid 8167) Use of int in max_burst socket option deprecated. [ 145.283891][ T8167] Use struct sctp_assoc_value instead [ 145.318944][ T6746] hsr_slave_0: left promiscuous mode [ 145.350935][ T6746] hsr_slave_1: left promiscuous mode [ 145.415457][ T6746] veth1_macvtap: left promiscuous mode [ 145.424877][ T6746] veth0_macvtap: left promiscuous mode [ 145.440606][ T6746] veth1_vlan: left promiscuous mode [ 145.446162][ T6746] veth0_vlan: left promiscuous mode [ 145.593290][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 146.265412][ T8181] netlink: 165 bytes leftover after parsing attributes in process `syz.0.630'. [ 146.477426][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 146.672757][ T8080] chnl_net:caif_netlink_parms(): no params data found [ 146.802489][ T8204] netlink: 'syz.4.637': attribute type 29 has an invalid length. [ 146.882378][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.639'. [ 146.883112][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 146.916937][ T8210] x_tables: ip_tables: osf match: only valid for protocol 6 [ 146.924345][ T8211] netlink: 'syz.4.637': attribute type 29 has an invalid length. [ 146.966688][ T8208] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.006595][ T8215] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 147.052773][ T8211] netlink: 'syz.4.637': attribute type 10 has an invalid length. [ 147.128554][ T5844] Bluetooth: hci3: command tx timeout [ 147.170174][ T8211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.230251][ T8211] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 147.431985][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.504091][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.553532][ T8080] bridge_slave_0: entered allmulticast mode [ 147.568275][ T8080] bridge_slave_0: entered promiscuous mode [ 147.594376][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.630872][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.657415][ T8080] bridge_slave_1: entered allmulticast mode [ 147.665318][ T8080] bridge_slave_1: entered promiscuous mode [ 147.974934][ T8080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.024942][ T8259] can: request_module (can-proto-3) failed. [ 148.070370][ T8260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.091892][ T8080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.136738][ T8260] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 148.427329][ T8265] vlan0: entered allmulticast mode [ 148.432502][ T8265] bond2: entered allmulticast mode [ 148.643895][ T8278] smc: net device bond0 applied user defined pnetid SYZ2 [ 148.660036][ T8080] team0: Port device team_slave_0 added [ 148.675701][ T8280] smc: net device bond0 erased user defined pnetid SYZ2 [ 148.696530][ T8080] team0: Port device team_slave_1 added [ 148.818577][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.825570][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.889341][ T8080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.937758][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.947980][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.026249][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.213151][ T5844] Bluetooth: hci3: command tx timeout [ 149.345651][ T8307] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 149.363085][ T8080] hsr_slave_0: entered promiscuous mode [ 149.412278][ T8080] hsr_slave_1: entered promiscuous mode [ 149.925148][ T8340] __nla_validate_parse: 2 callbacks suppressed [ 149.925165][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 149.960196][ T8339] xt_HMARK: proto mask must be zero with L3 mode [ 149.993850][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 150.088135][ T8351] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 150.469351][ T8362] netlink: 810 bytes leftover after parsing attributes in process `syz.4.668'. [ 150.491608][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.670'. [ 150.574543][ T8367] netlink: 64 bytes leftover after parsing attributes in process `syz.0.669'. [ 150.747492][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 150.760610][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 150.778153][ T8377] netlink: 'syz.3.673': attribute type 13 has an invalid length. [ 151.145309][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.676'. [ 151.190296][ T8387] netlink: 'syz.4.676': attribute type 7 has an invalid length. [ 151.223365][ T8387] netlink: 'syz.4.676': attribute type 8 has an invalid length. [ 151.246498][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 151.288746][ T5844] Bluetooth: hci3: command tx timeout [ 151.371256][ T8404] x_tables: duplicate underflow at hook 2 [ 151.504262][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 151.756810][ T8080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.828498][ T8080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.884797][ T8080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.965547][ T8080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.370755][ T8080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.474762][ T8080] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.534129][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.541351][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.571708][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.579015][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.835417][ T8455] batadv0: Device is already in use. [ 153.295698][ T8080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.518736][ T8080] veth0_vlan: entered promiscuous mode [ 153.570641][ T8080] veth1_vlan: entered promiscuous mode [ 153.691651][ T8080] veth0_macvtap: entered promiscuous mode [ 153.768617][ T8080] veth1_macvtap: entered promiscuous mode [ 153.913602][ T8500] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 153.917036][ T8504] netlink: 'syz.3.701': attribute type 14 has an invalid length. [ 153.954397][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.963015][ T8505] netlink: 'syz.3.701': attribute type 14 has an invalid length. [ 154.003771][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.024743][ T8080] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.060317][ T8080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.089828][ T8080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.118049][ T8080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.310578][ T8515] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 154.472381][ T8511] bond3: (slave gretap2): making interface the new active one [ 154.482692][ T8511] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 154.498920][ T8522] veth0: entered promiscuous mode [ 154.782084][ T6742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.807992][ T6742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.863856][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.894875][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.069629][ T8547] __nla_validate_parse: 16 callbacks suppressed [ 155.069649][ T8547] netlink: 96 bytes leftover after parsing attributes in process `syz.3.711'. [ 155.116817][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'. [ 155.159021][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'. [ 155.205922][ T8553] netlink: 56 bytes leftover after parsing attributes in process `syz.1.713'. [ 155.213092][ T8547] vlan2: entered allmulticast mode [ 155.240415][ T8547] gretap0: entered allmulticast mode [ 155.585690][ T8567] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 155.640797][ T6742] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.910547][ T6742] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.038269][ T6742] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.214285][ T6742] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.321339][ T8589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.454445][ T8594] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 156.589688][ T8594] netlink: 76 bytes leftover after parsing attributes in process `syz.4.724'. [ 156.782815][ T6742] bridge_slave_1: left allmulticast mode [ 156.812502][ T6742] bridge_slave_1: left promiscuous mode [ 156.846867][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.905122][ T6742] bridge_slave_0: left allmulticast mode [ 156.912037][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.728'. [ 156.939209][ T6742] bridge_slave_0: left promiscuous mode [ 156.987912][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.175466][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 157.294261][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.309625][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.319359][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.334278][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.344036][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.490983][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 157.752948][ T6742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.774315][ T6742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.790090][ T6742] bond0 (unregistering): Released all slaves [ 158.482576][ T8675] tipc: Started in network mode [ 158.519740][ T8675] tipc: Node identity f20cec624ef3, cluster identity 4711 [ 158.537571][ T8675] tipc: Enabled bearer , priority 0 [ 158.601680][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 158.642034][ T8675] tipc: Resetting bearer [ 158.687723][ T8680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.742659][ T8686] pimreg: entered allmulticast mode [ 158.764356][ T6742] hsr_slave_0: left promiscuous mode [ 158.771493][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 158.774165][ T6742] hsr_slave_1: left promiscuous mode [ 158.810915][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.821393][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.836632][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.844210][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.870060][ T6742] veth1_macvtap: left promiscuous mode [ 158.875772][ T6742] veth0_macvtap: left promiscuous mode [ 158.881943][ T6742] veth1_vlan: left promiscuous mode [ 158.890672][ T6742] veth0_vlan: left promiscuous mode [ 159.250267][ T6742] team0 (unregistering): Port device team_slave_1 removed [ 159.282675][ T6742] team0 (unregistering): Port device team_slave_0 removed [ 159.379023][ T5844] Bluetooth: hci3: command tx timeout [ 159.647526][ T975] tipc: Node number set to 3170888802 [ 159.726727][ T8686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.735990][ T8686] bond0: (slave bond1): Enslaving as an active interface with an up link [ 159.755267][ T8691] pimreg: left allmulticast mode [ 159.823944][ T8675] tipc: Disabling bearer [ 160.035046][ T8630] chnl_net:caif_netlink_parms(): no params data found [ 160.593704][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.625075][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.660866][ T8630] bridge_slave_0: entered allmulticast mode [ 160.705445][ T8630] bridge_slave_0: entered promiscuous mode [ 160.819534][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.852541][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.879703][ T8630] bridge_slave_1: entered allmulticast mode [ 160.902777][ T8630] bridge_slave_1: entered promiscuous mode [ 161.081948][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.123869][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.220910][ T8630] team0: Port device team_slave_0 added [ 161.241522][ T8630] team0: Port device team_slave_1 added [ 161.257756][ T8773] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 161.265792][ T8773] netlink: 'syz.1.758': attribute type 2 has an invalid length. [ 161.374181][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.381536][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.412759][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.444952][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.456963][ T5844] Bluetooth: hci3: command tx timeout [ 161.474158][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.506998][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.615787][ T8630] hsr_slave_0: entered promiscuous mode [ 161.623246][ T8630] hsr_slave_1: entered promiscuous mode [ 161.864274][ T8791] __nla_validate_parse: 1 callbacks suppressed [ 161.864292][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.762'. [ 161.979217][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.763'. [ 162.071669][ T8795] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 162.132500][ T8802] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 162.459140][ T8820] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.918986][ T8833] syzkaller1: entered promiscuous mode [ 162.924599][ T8833] syzkaller1: entered allmulticast mode [ 162.944890][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.772'. [ 163.076297][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 163.100974][ T8630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.113881][ T8630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.121921][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 163.147253][ T8630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.207667][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.774'. [ 163.236032][ T8630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.435178][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 163.450283][ T8849] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 163.528035][ T5844] Bluetooth: hci3: command tx timeout [ 163.571044][ T8630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.601854][ T8630] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.635559][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.642750][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.721611][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 163.834767][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.841984][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.062245][ T8870] netlink: 56 bytes leftover after parsing attributes in process `syz.4.782'. [ 164.074699][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.782'. [ 164.097494][ T8870] netlink: 'syz.4.782': attribute type 3 has an invalid length. [ 164.116274][ T8870] netlink: 'syz.4.782': attribute type 2 has an invalid length. [ 164.219894][ T8862] tipc: Enabled bearer , priority 10 [ 164.236756][ T8865] macsec1: entered allmulticast mode [ 164.244195][ T8865] macvlan0: entered allmulticast mode [ 164.250452][ T8865] veth1_vlan: entered allmulticast mode [ 164.259737][ T8865] macvlan0: left allmulticast mode [ 164.265024][ T8865] veth1_vlan: left allmulticast mode [ 164.660970][ T8893] tipc: Enabled bearer , priority 10 [ 165.092744][ T8912] xt_l2tp: v2 doesn't support IP mode [ 165.165661][ T8630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.439746][ T8630] veth0_vlan: entered promiscuous mode [ 165.472510][ T8630] veth1_vlan: entered promiscuous mode [ 165.486952][ T8933] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 165.514685][ T8933] netlink: 'syz.3.796': attribute type 2 has an invalid length. [ 165.608569][ T5844] Bluetooth: hci3: command tx timeout [ 165.729499][ T8943] bridge0: entered promiscuous mode [ 165.747839][ T8943] bridge0: entered allmulticast mode [ 165.855425][ T8630] veth0_macvtap: entered promiscuous mode [ 165.884168][ T8630] veth1_macvtap: entered promiscuous mode [ 165.911965][ T8954] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 166.170869][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.240276][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.315160][ T8630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.341093][ T8630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.352645][ T8630] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.376590][ T8630] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.477175][ T8975] sch_tbf: burst 0 is lower than device veth1_to_hsr mtu (1514) ! [ 166.956507][ T6746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.964380][ T6746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.112347][ T9016] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 167.120263][ T9016] __nla_validate_parse: 8 callbacks suppressed [ 167.120276][ T9016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.813'. [ 167.154755][ T6742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.165564][ T6742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.179686][ T9021] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 167.575917][ T9040] sctp: [Deprecated]: syz.1.820 (pid 9040) Use of int in maxseg socket option. [ 167.575917][ T9040] Use struct sctp_assoc_value instead [ 167.811074][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 167.885192][ T9048] netlink: 60 bytes leftover after parsing attributes in process `syz.3.822'. [ 168.184207][ T1150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.211169][ T9062] netlink: 'syz.1.824': attribute type 6 has an invalid length. [ 168.274458][ T1150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.299922][ T9060] netlink: 'syz.1.824': attribute type 6 has an invalid length. [ 168.453292][ T1150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.567795][ T1150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.976629][ T1150] bridge_slave_1: left allmulticast mode [ 169.005737][ T1150] bridge_slave_1: left promiscuous mode [ 169.028695][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.100077][ T1150] bridge_slave_0: left allmulticast mode [ 169.105777][ T1150] bridge_slave_0: left promiscuous mode [ 169.157163][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.192063][ T9099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.443136][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.452683][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.461132][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.476011][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.504539][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.671134][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.682100][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.692771][ T1150] bond0 (unregistering): Released all slaves [ 169.965869][ T9121] sctp: [Deprecated]: syz.1.838 (pid 9121) Use of int in max_burst socket option. [ 169.965869][ T9121] Use struct sctp_assoc_value instead [ 170.529146][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 170.543410][ T9139] netlink: 5 bytes leftover after parsing attributes in process `syz.0.843'. [ 170.858064][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 170.861955][ T1150] hsr_slave_0: left promiscuous mode [ 170.880445][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 170.901131][ T1150] hsr_slave_1: left promiscuous mode [ 170.924999][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.966293][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.005319][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.028401][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.071125][ T1150] veth1_macvtap: left promiscuous mode [ 171.083463][ T1150] veth0_macvtap: left promiscuous mode [ 171.091385][ T1150] veth1_vlan: left promiscuous mode [ 171.098690][ T1150] veth0_vlan: left promiscuous mode [ 171.528339][ T5844] Bluetooth: hci3: command tx timeout [ 171.555722][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 171.593745][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 171.921384][ T9172] netlink: 'syz.3.847': attribute type 21 has an invalid length. [ 171.940534][ T9175] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 171.966546][ T9175] netlink: 'syz.0.850': attribute type 2 has an invalid length. [ 172.120365][ T9183] trusted_key: syz.3.851 sent an empty control message without MSG_MORE. [ 172.468473][ T9197] openvswitch: netlink: IP tunnel dst address not specified [ 172.551380][ T9108] chnl_net:caif_netlink_parms(): no params data found [ 172.658096][ T9208] netlink: 9 bytes leftover after parsing attributes in process `syz.0.859'. [ 172.722112][ T9208] gretap0: entered promiscuous mode [ 172.760410][ T9203] can: request_module (can-proto-3) failed. [ 172.845277][ T9218] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:65535 [ 172.875723][ T9214] netlink: 'syz.1.861': attribute type 4 has an invalid length. [ 172.930158][ T9217] netlink: 'syz.1.861': attribute type 4 has an invalid length. [ 173.130432][ T9231] netlink: 596 bytes leftover after parsing attributes in process `syz.3.864'. [ 173.372864][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 173.401437][ T9240] tipc: Enabling of bearer rejected, failed to enable media [ 173.423916][ T9108] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.442907][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.467032][ T9108] bridge_slave_0: entered allmulticast mode [ 173.490628][ T9108] bridge_slave_0: entered promiscuous mode [ 173.510390][ T9108] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.528138][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.547137][ T9108] bridge_slave_1: entered allmulticast mode [ 173.563324][ T9108] bridge_slave_1: entered promiscuous mode [ 173.606966][ T5844] Bluetooth: hci3: command tx timeout [ 173.854545][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 173.892848][ T9108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.007974][ T9108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.208403][ T9108] team0: Port device team_slave_0 added [ 174.220623][ T9108] team0: Port device team_slave_1 added [ 174.445661][ T9273] syz.0.875 (9273) used greatest stack depth: 17048 bytes left [ 174.555002][ T9108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.579987][ T9108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.611767][ T9108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.655011][ T9108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.697465][ T9294] netlink: 'syz.1.881': attribute type 10 has an invalid length. [ 174.710519][ T9108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.769686][ T9108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.824419][ T9294] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 175.141957][ T9314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.883'. [ 175.172256][ T9108] hsr_slave_0: entered promiscuous mode [ 175.234550][ T9108] hsr_slave_1: entered promiscuous mode [ 175.251432][ T9318] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 175.302713][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 175.687089][ T5844] Bluetooth: hci3: command tx timeout [ 175.933532][ T9353] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 176.225776][ T9361] netlink: 92 bytes leftover after parsing attributes in process `syz.1.892'. [ 176.590731][ T9373] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 176.956888][ T9388] netlink: 96 bytes leftover after parsing attributes in process `syz.4.901'. [ 177.517265][ T9108] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.562290][ T9108] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.621514][ T9108] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.665902][ T9108] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.771388][ T5844] Bluetooth: hci3: command tx timeout [ 178.092749][ T9108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.163867][ T9108] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.228584][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.236104][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.265706][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 178.309716][ T9450] bridge_slave_1: left allmulticast mode [ 178.315398][ T9450] bridge_slave_1: left promiscuous mode [ 178.368204][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.393354][ T9450] bridge_slave_0: left allmulticast mode [ 178.417995][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.441541][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 178.513288][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.520530][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.127753][ T9477] netlink: 43 bytes leftover after parsing attributes in process `syz.3.926'. [ 179.163744][ T9477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.926'. [ 179.217364][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 179.297054][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 179.678344][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.929'. [ 179.688420][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 179.799385][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 180.393776][ T9108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.415328][ T9496] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.688450][ T9108] veth0_vlan: entered promiscuous mode [ 180.695710][ T9526] tipc: Enabling of bearer rejected, failed to enable media [ 180.811245][ T9108] veth1_vlan: entered promiscuous mode [ 180.832963][ T9534] netlink: 132 bytes leftover after parsing attributes in process `syz.4.935'. [ 180.972737][ T9108] veth0_macvtap: entered promiscuous mode [ 181.040524][ T9108] veth1_macvtap: entered promiscuous mode [ 181.181522][ T9108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.241451][ T9108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.290875][ T9108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.316915][ T9108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.356796][ T9108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.409003][ T9108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.710686][ T9570] netlink: 'syz.4.941': attribute type 32 has an invalid length. [ 181.722909][ T6746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.752888][ T6746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.917810][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.979462][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.127328][ T9578] ieee802154 phy1 wpan1: encryption failed: -22 [ 182.699746][ T9606] nbd: must specify a size in bytes for the device [ 182.784136][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.060354][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.173873][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.300602][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.536904][ T1100] bridge_slave_1: left allmulticast mode [ 183.546587][ T1100] bridge_slave_1: left promiscuous mode [ 183.552386][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.610783][ T1100] bridge_slave_0: left allmulticast mode [ 183.627781][ T1100] bridge_slave_0: left promiscuous mode [ 183.633664][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.801772][ T9644] netlink: 'syz.1.955': attribute type 4 has an invalid length. [ 183.919032][ T9652] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 184.421194][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.435842][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.448800][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.480793][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.497692][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.528764][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.543179][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.556752][ T1100] bond0 (unregistering): Released all slaves [ 185.144950][ T9689] __nla_validate_parse: 7 callbacks suppressed [ 185.144968][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 185.222939][ T9689] netlink: 2 bytes leftover after parsing attributes in process `syz.1.964'. [ 185.447098][ T9704] netlink: 64 bytes leftover after parsing attributes in process `syz.0.965'. [ 185.684700][ T1100] hsr_slave_0: left promiscuous mode [ 185.710836][ T1100] hsr_slave_1: left promiscuous mode [ 185.727783][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.747194][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.850954][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.870835][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.011456][ T1100] veth1_macvtap: left promiscuous mode [ 186.036233][ T1100] veth0_macvtap: left promiscuous mode [ 186.052774][ T1100] veth1_vlan: left promiscuous mode [ 186.072321][ T1100] veth0_vlan: left promiscuous mode [ 186.566461][ T5846] Bluetooth: hci3: command tx timeout [ 187.393174][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 187.455161][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 187.988264][ T9779] netlink: 'syz.3.975': attribute type 3 has an invalid length. [ 188.200126][ T9665] chnl_net:caif_netlink_parms(): no params data found [ 188.286548][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.979'. [ 188.290883][ T9785] syzkaller1: entered promiscuous mode [ 188.319723][ T9785] syzkaller1: entered allmulticast mode [ 188.504513][ T9793] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 188.646310][ T5846] Bluetooth: hci3: command tx timeout [ 188.748138][ T9804] netlink: 'syz.3.984': attribute type 39 has an invalid length. [ 188.865748][ T9804] veth0_macvtap: left promiscuous mode [ 188.871710][ T9810] netlink: 'syz.0.985': attribute type 4 has an invalid length. [ 188.928875][ T9812] netlink: 'syz.0.985': attribute type 4 has an invalid length. [ 188.971757][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.981703][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.992133][ T9665] bridge_slave_0: entered allmulticast mode [ 189.004295][ T9665] bridge_slave_0: entered promiscuous mode [ 189.057512][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.070779][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.084146][ T9665] bridge_slave_1: entered allmulticast mode [ 189.124764][ T9665] bridge_slave_1: entered promiscuous mode [ 189.261382][ T9823] netlink: 'syz.4.988': attribute type 1 has an invalid length. [ 189.315956][ T9823] bond5: entered promiscuous mode [ 189.321515][ T9823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.332324][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.345774][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.641114][ T9665] team0: Port device team_slave_0 added [ 189.672428][ T9665] team0: Port device team_slave_1 added [ 189.880499][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.888396][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.915560][ T9665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.963800][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.978214][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.035866][ T9665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.392327][ T9665] hsr_slave_0: entered promiscuous mode [ 190.450876][ T9872] ip6t_srh: unknown srh invflags 4449 [ 190.450991][ T9665] hsr_slave_1: entered promiscuous mode [ 190.726638][ T5846] Bluetooth: hci3: command tx timeout [ 191.511113][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 191.566293][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 191.666825][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 192.222210][ T9945] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 192.344149][ T9953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1023'. [ 192.710541][ T9665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.795642][ T9665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.807400][ T5846] Bluetooth: hci3: command tx timeout [ 192.912772][ T9665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.999723][ T9665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.024931][ T9991] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1031'. [ 193.056930][ T9982] xt_TCPMSS: Only works on TCP SYN packets [ 193.784083][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.885264][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.938322][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.945562][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.016824][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.024000][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.172450][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.850003][T10057] xt_hashlimit: overflow, rate too high: 0 [ 194.878238][ T9665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.075532][ T9665] veth0_vlan: entered promiscuous mode [ 195.134767][ T9665] veth1_vlan: entered promiscuous mode [ 195.294673][T10072] netlink: 'syz.0.1050': attribute type 23 has an invalid length. [ 195.319161][ T9665] veth0_macvtap: entered promiscuous mode [ 195.340519][ T9665] veth1_macvtap: entered promiscuous mode [ 195.408440][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.463008][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.501233][ T9665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.526788][ T9665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.535551][ T9665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.580804][T10082] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1054'. [ 195.586289][ T9665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.856897][ C1] ------------[ cut here ]------------ [ 195.862634][ C1] WARNING: CPU: 1 PID: 10045 at net/wireless/scan.c:1655 __cfg80211_bss_update+0x1caa/0x2120 [ 195.872861][ C1] Modules linked in: [ 195.876958][ C1] CPU: 1 UID: 0 PID: 10045 Comm: syz.3.1044 Not tainted 6.15.0-rc6-syzkaller-00157-gef935650e044 #0 PREEMPT(full) [ 195.889142][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.899237][ C1] RIP: 0010:__cfg80211_bss_update+0x1caa/0x2120 [ 195.905484][ C1] Code: fe 75 0a e8 28 ef 14 f7 e9 40 ec ff ff 80 3d 8d 08 be 04 01 0f 85 50 02 00 00 e8 11 ef 14 f7 e9 29 ec ff ff e8 07 ef 14 f7 90 <0f> 0b 90 4c 8b 2c 24 e9 26 f2 ff ff e8 f5 ee 14 f7 90 0f 0b 90 e9 [ 195.925122][ C1] RSP: 0018:ffffc90000a080f0 EFLAGS: 00010246 [ 195.931205][ C1] RAX: ffffffff8aab02e9 RBX: ffff88802928c400 RCX: ffff88802a641e00 [ 195.939207][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.947207][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000002 [ 195.955180][ C1] R10: 0000000000000002 R11: 0000000000000100 R12: ffff88802928c468 [ 195.963188][ C1] R13: ffff88807c4aac20 R14: ffff8880279c81a0 R15: 0000000000000000 [ 195.971181][ C1] FS: 0000000000000000(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 195.980129][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.986743][ C1] CR2: 000000110c26815a CR3: 0000000031b90000 CR4: 00000000003526f0 [ 195.994721][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.002712][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.010698][ C1] Call Trace: [ 196.014000][ C1] [ 196.016881][ C1] ? trace_kmalloc+0x1f/0xd0 [ 196.021484][ C1] ? cfg80211_inform_single_bss_data+0xb90/0x1ac0 [ 196.027943][ C1] cfg80211_inform_single_bss_data+0xba9/0x1ac0 [ 196.034197][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 196.040918][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.046169][ C1] ? queue_work_on+0x1ed/0x270 [ 196.050942][ C1] ? cfg80211_inform_bss_data+0x1e8/0x3b20 [ 196.056787][ C1] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 196.062429][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.067655][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 196.073033][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 196.078775][ C1] ? ieee80211_rx_handlers+0xbc67/0xbce0 [ 196.084449][ C1] ? ieee80211_rx_handlers+0xbc67/0xbce0 [ 196.090107][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 196.096223][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 196.102036][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 196.108304][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 196.114931][ C1] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 196.120767][ C1] cfg80211_inform_bss_frame_data+0x362/0x700 [ 196.126881][ C1] ieee80211_bss_info_update+0x746/0x9e0 [ 196.132526][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 196.138717][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 196.144536][ C1] ieee80211_scan_rx+0x527/0x9b0 [ 196.149545][ C1] ieee80211_rx_list+0x22fc/0x2d80 [ 196.154670][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 196.160194][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 196.165225][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 196.170273][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 196.175319][ C1] ieee80211_rx_napi+0x1a8/0x3d0 [ 196.180274][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 196.185823][ C1] ? skb_dequeue+0x10e/0x150 [ 196.190520][ C1] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 196.196528][ C1] tasklet_action_common+0x369/0x580 [ 196.201816][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 196.207732][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 196.213555][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 196.219465][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 196.225801][ C1] ? clockevents_program_event+0x24d/0x360 [ 196.231628][ C1] ? workqueue_softirq_action+0xd4/0x150 [ 196.237288][ C1] handle_softirqs+0x283/0x870 [ 196.242060][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 196.246849][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 196.252158][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 196.257417][ C1] __irq_exit_rcu+0xca/0x1f0 [ 196.262019][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 196.267253][ C1] irq_exit_rcu+0x9/0x30 [ 196.271505][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 196.277169][ C1] [ 196.280106][ C1] [ 196.283052][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.289055][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 196.294869][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 2a 75 45 f6 48 89 df e8 52 0c 46 f6 e8 5d 94 6e f6 fb bf 01 00 00 00 62 16 38 f6 65 8b 05 cb b4 1c 07 85 c0 74 07 5b c3 cc cc cc cc [ 196.314668][ C1] RSP: 0018:ffffc90004737498 EFLAGS: 00000282 [ 196.320754][ C1] RAX: be06a33e90443800 RBX: ffff8880579a65a0 RCX: be06a33e90443800 [ 196.328749][ C1] RDX: 0000000000000006 RSI: ffffffff8d74c6f8 RDI: 0000000000000001 [ 196.336742][ C1] RBP: ffffc900047378b0 R08: ffffffff8f7efe77 R09: 1ffffffff1efdfce [ 196.344717][ C1] R10: dffffc0000000000 R11: fffffbfff1efdfcf R12: dffffc0000000000 [ 196.352709][ C1] R13: 1ffff1100af34cb3 R14: ffff8880579a6598 R15: ffff8880579a65a0 [ 196.360718][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.365916][ C1] filemap_remove_folio+0xee/0x1f0 [ 196.371053][ C1] truncate_inode_folio+0x5d/0x70 [ 196.376076][ C1] shmem_undo_range+0x3a9/0x14b0 [ 196.381056][ C1] ? __lock_acquire+0xaac/0xd20 [ 196.386010][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 196.391414][ C1] ? __lock_acquire+0xaac/0xd20 [ 196.396341][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 196.401982][ C1] shmem_evict_inode+0x272/0xa70 [ 196.406975][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 196.412624][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 196.418111][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 196.424202][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 196.429424][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 196.434883][ C1] evict+0x501/0x9c0 [ 196.438797][ C1] ? __pfx_evict+0x10/0x10 [ 196.443209][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 196.448558][ C1] ? _raw_spin_unlock+0x28/0x50 [ 196.453446][ C1] ? iput+0x6d8/0x9d0 [ 196.457471][ C1] __dentry_kill+0x209/0x660 [ 196.462074][ C1] ? dput+0x37/0x2b0 [ 196.465968][ C1] dput+0x19f/0x2b0 [ 196.469799][ C1] __fput+0x68e/0xa70 [ 196.473787][ C1] task_work_run+0x1d4/0x260 [ 196.478433][ C1] ? __pfx_task_work_run+0x10/0x10 [ 196.483573][ C1] do_exit+0x8d6/0x2550 [ 196.487765][ C1] ? preempt_schedule_common+0x83/0xd0 [ 196.493233][ C1] ? preempt_schedule+0xae/0xc0 [ 196.498117][ C1] ? __pfx_do_exit+0x10/0x10 [ 196.502720][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 196.508125][ C1] do_group_exit+0x21c/0x2d0 [ 196.512730][ C1] __x64_sys_exit_group+0x3f/0x40 [ 196.517782][ C1] x64_sys_call+0x21ba/0x21c0 [ 196.522465][ C1] do_syscall_64+0xf6/0x210 [ 196.527003][ C1] ? clear_bhb_loop+0x60/0xb0 [ 196.531690][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.537636][ C1] RIP: 0033:0x7ff263d8e969 [ 196.542065][ C1] Code: Unable to access opcode bytes at 0x7ff263d8e93f. [ 196.549088][ C1] RSP: 002b:00007ffd0e12c7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 196.557525][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff263d8e969 [ 196.565513][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.573506][ C1] RBP: 00007ffd0e12c85c R08: 0000001d0e12c8ef R09: 00000000000927c0 [ 196.581497][ C1] R10: 0000000000000224 R11: 0000000000000246 R12: 00000000000000f2 [ 196.589525][ C1] R13: 00000000000927c0 R14: 000000000002f703 R15: 00007ffd0e12c8b0 [ 196.597622][ C1] [ 196.600646][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.607924][ C1] CPU: 1 UID: 0 PID: 10045 Comm: syz.3.1044 Not tainted 6.15.0-rc6-syzkaller-00157-gef935650e044 #0 PREEMPT(full) [ 196.620014][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.630060][ C1] Call Trace: [ 196.633337][ C1] [ 196.636194][ C1] dump_stack_lvl+0x99/0x250 [ 196.640797][ C1] ? __asan_memcpy+0x40/0x70 [ 196.645393][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.650595][ C1] ? __pfx__printk+0x10/0x10 [ 196.655280][ C1] panic+0x2db/0x790 [ 196.659185][ C1] ? __pfx_panic+0x10/0x10 [ 196.663619][ C1] __warn+0x31b/0x4b0 [ 196.667607][ C1] ? __cfg80211_bss_update+0x1caa/0x2120 [ 196.673264][ C1] ? __cfg80211_bss_update+0x1caa/0x2120 [ 196.678894][ C1] report_bug+0x2be/0x4f0 [ 196.683223][ C1] ? __cfg80211_bss_update+0x1caa/0x2120 [ 196.688855][ C1] ? __cfg80211_bss_update+0x1caa/0x2120 [ 196.694482][ C1] ? __cfg80211_bss_update+0x1cac/0x2120 [ 196.700127][ C1] handle_bug+0x84/0x160 [ 196.704374][ C1] exc_invalid_op+0x1a/0x50 [ 196.708880][ C1] asm_exc_invalid_op+0x1a/0x20 [ 196.713724][ C1] RIP: 0010:__cfg80211_bss_update+0x1caa/0x2120 [ 196.719960][ C1] Code: fe 75 0a e8 28 ef 14 f7 e9 40 ec ff ff 80 3d 8d 08 be 04 01 0f 85 50 02 00 00 e8 11 ef 14 f7 e9 29 ec ff ff e8 07 ef 14 f7 90 <0f> 0b 90 4c 8b 2c 24 e9 26 f2 ff ff e8 f5 ee 14 f7 90 0f 0b 90 e9 [ 196.739559][ C1] RSP: 0018:ffffc90000a080f0 EFLAGS: 00010246 [ 196.745621][ C1] RAX: ffffffff8aab02e9 RBX: ffff88802928c400 RCX: ffff88802a641e00 [ 196.753587][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.761578][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000002 [ 196.769630][ C1] R10: 0000000000000002 R11: 0000000000000100 R12: ffff88802928c468 [ 196.777601][ C1] R13: ffff88807c4aac20 R14: ffff8880279c81a0 R15: 0000000000000000 [ 196.785580][ C1] ? __cfg80211_bss_update+0x1ca9/0x2120 [ 196.792659][ C1] ? trace_kmalloc+0x1f/0xd0 [ 196.797630][ C1] ? cfg80211_inform_single_bss_data+0xb90/0x1ac0 [ 196.805020][ C1] cfg80211_inform_single_bss_data+0xba9/0x1ac0 [ 196.811307][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 196.818018][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.823246][ C1] ? queue_work_on+0x1ed/0x270 [ 196.828062][ C1] ? cfg80211_inform_bss_data+0x1e8/0x3b20 [ 196.833892][ C1] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 196.839622][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.844850][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 196.850245][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 196.856164][ C1] ? ieee80211_rx_handlers+0xbc67/0xbce0 [ 196.861825][ C1] ? ieee80211_rx_handlers+0xbc67/0xbce0 [ 196.867486][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 196.873589][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 196.879470][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 196.885717][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 196.892325][ C1] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 196.898140][ C1] cfg80211_inform_bss_frame_data+0x362/0x700 [ 196.904337][ C1] ieee80211_bss_info_update+0x746/0x9e0 [ 196.909978][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 196.916154][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 196.921965][ C1] ieee80211_scan_rx+0x527/0x9b0 [ 196.927000][ C1] ieee80211_rx_list+0x22fc/0x2d80 [ 196.932134][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 196.937620][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 196.942655][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 196.947694][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 196.952725][ C1] ieee80211_rx_napi+0x1a8/0x3d0 [ 196.957680][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 196.963155][ C1] ? skb_dequeue+0x10e/0x150 [ 196.967753][ C1] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 196.973745][ C1] tasklet_action_common+0x369/0x580 [ 196.979028][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 196.984919][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 196.990723][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 196.996619][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.002949][ C1] ? clockevents_program_event+0x24d/0x360 [ 197.008760][ C1] ? workqueue_softirq_action+0xd4/0x150 [ 197.014398][ C1] handle_softirqs+0x283/0x870 [ 197.019167][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 197.023931][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 197.029217][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 197.034420][ C1] __irq_exit_rcu+0xca/0x1f0 [ 197.039009][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 197.044210][ C1] irq_exit_rcu+0x9/0x30 [ 197.048456][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 197.054088][ C1] [ 197.057016][ C1] [ 197.059948][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 197.065922][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 197.071725][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 2a 75 45 f6 48 89 df e8 52 0c 46 f6 e8 5d 94 6e f6 fb bf 01 00 00 00 62 16 38 f6 65 8b 05 cb b4 1c 07 85 c0 74 07 5b c3 cc cc cc cc [ 197.091337][ C1] RSP: 0018:ffffc90004737498 EFLAGS: 00000282 [ 197.097498][ C1] RAX: be06a33e90443800 RBX: ffff8880579a65a0 RCX: be06a33e90443800 [ 197.105488][ C1] RDX: 0000000000000006 RSI: ffffffff8d74c6f8 RDI: 0000000000000001 [ 197.113455][ C1] RBP: ffffc900047378b0 R08: ffffffff8f7efe77 R09: 1ffffffff1efdfce [ 197.121448][ C1] R10: dffffc0000000000 R11: fffffbfff1efdfcf R12: dffffc0000000000 [ 197.129421][ C1] R13: 1ffff1100af34cb3 R14: ffff8880579a6598 R15: ffff8880579a65a0 [ 197.137421][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.142626][ C1] filemap_remove_folio+0xee/0x1f0 [ 197.147765][ C1] truncate_inode_folio+0x5d/0x70 [ 197.152794][ C1] shmem_undo_range+0x3a9/0x14b0 [ 197.157753][ C1] ? __lock_acquire+0xaac/0xd20 [ 197.162616][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 197.168014][ C1] ? __lock_acquire+0xaac/0xd20 [ 197.172916][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 197.178567][ C1] shmem_evict_inode+0x272/0xa70 [ 197.183515][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 197.189150][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 197.194614][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 197.200713][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 197.205911][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 197.211401][ C1] evict+0x501/0x9c0 [ 197.215309][ C1] ? __pfx_evict+0x10/0x10 [ 197.219734][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 197.225100][ C1] ? _raw_spin_unlock+0x28/0x50 [ 197.229972][ C1] ? iput+0x6d8/0x9d0 [ 197.233960][ C1] __dentry_kill+0x209/0x660 [ 197.238555][ C1] ? dput+0x37/0x2b0 [ 197.242449][ C1] dput+0x19f/0x2b0 [ 197.246344][ C1] __fput+0x68e/0xa70 [ 197.250346][ C1] task_work_run+0x1d4/0x260 [ 197.254940][ C1] ? __pfx_task_work_run+0x10/0x10 [ 197.260074][ C1] do_exit+0x8d6/0x2550 [ 197.264240][ C1] ? preempt_schedule_common+0x83/0xd0 [ 197.269702][ C1] ? preempt_schedule+0xae/0xc0 [ 197.274554][ C1] ? __pfx_do_exit+0x10/0x10 [ 197.279158][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 197.284569][ C1] do_group_exit+0x21c/0x2d0 [ 197.289187][ C1] __x64_sys_exit_group+0x3f/0x40 [ 197.294228][ C1] x64_sys_call+0x21ba/0x21c0 [ 197.298900][ C1] do_syscall_64+0xf6/0x210 [ 197.303402][ C1] ? clear_bhb_loop+0x60/0xb0 [ 197.308078][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.313973][ C1] RIP: 0033:0x7ff263d8e969 [ 197.318388][ C1] Code: Unable to access opcode bytes at 0x7ff263d8e93f. [ 197.325402][ C1] RSP: 002b:00007ffd0e12c7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 197.333808][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff263d8e969 [ 197.341777][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.349740][ C1] RBP: 00007ffd0e12c85c R08: 0000001d0e12c8ef R09: 00000000000927c0 [ 197.357709][ C1] R10: 0000000000000224 R11: 0000000000000246 R12: 00000000000000f2 [ 197.365679][ C1] R13: 00000000000927c0 R14: 000000000002f703 R15: 00007ffd0e12c8b0 [ 197.373658][ C1] [ 197.376933][ C1] Kernel Offset: disabled [ 197.381277][ C1] Rebooting in 86400 seconds..