last executing test programs: 1m16.61937556s ago: executing program 1 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8995, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00f8ee", @ANYRES16=r4, @ANYRESHEX=r4], 0x6c}}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000003060101000000000000000059ffa524dd4c012a0f010000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 1m15.628081198s ago: executing program 0 (id=1528): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r1, r1, 0xc, 0x4, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) 1m1.518079273s ago: executing program 1 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8995, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00f8ee", @ANYRES16=r4, @ANYRESHEX=r4], 0x6c}}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000003060101000000000000000059ffa524dd4c012a0f010000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 1m0.416541433s ago: executing program 0 (id=1528): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r1, r1, 0xc, 0x4, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) 47.517893466s ago: executing program 1 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8995, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00f8ee", @ANYRES16=r4, @ANYRESHEX=r4], 0x6c}}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000003060101000000000000000059ffa524dd4c012a0f010000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 46.619501885s ago: executing program 0 (id=1528): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r1, r1, 0xc, 0x4, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) 34.889610038s ago: executing program 1 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8995, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00f8ee", @ANYRES16=r4, @ANYRESHEX=r4], 0x6c}}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000003060101000000000000000059ffa524dd4c012a0f010000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 33.947280415s ago: executing program 0 (id=1528): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r1, r1, 0xc, 0x4, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) 19.420683801s ago: executing program 0 (id=1528): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r1, r1, 0xc, 0x4, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) 18.654038093s ago: executing program 1 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8995, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00f8ee", @ANYRES16=r4, @ANYRESHEX=r4], 0x6c}}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000003060101000000000000000059ffa524dd4c012a0f010000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 5.429575024s ago: executing program 0 (id=1528): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x0, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r1, r1, 0xc, 0x4, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) 5.406493691s ago: executing program 2 (id=2711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r2, r1, 0x4}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000280)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x148, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x3c}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x1, 0x2]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xc8}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x3e, 0xac, "c5e1ce0b1be41c5a7b2d837461a35e993d538dea3b7f5d7f264ce3784a460c4e7fbfbd1055db5d69dbe3b9301732c0a1260147ebf72ea32bce0c"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x25, 0xac, "d53daf36755722dfac15aa580c10866b2fc49e784752d4825bff5b710e2070bfe7"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x86, 0xbe, "203356bf210d9bb832614ae910e06211ef11eda69e9fb8c474a4740b3172e7b24e343acd6417795095b05db009adeb256f3c237722565a7521a0464d1fdf73b8e467545d91174af6b5c15083f7f6d0e1eb3281f314a45600c1be0b36dedf0ceb02babad9efc01ce7ea662ad37e4785e703c040534d0be6a9c2520dd9bb53214edffb"}]}, 0x148}}, 0x40) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x8, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYBLOB="08001f0004"], 0x44}, 0x1, 0x0, 0x0, 0x64004004}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0x8}}, @NHA_OIF={0x8, 0x5, r8}]}, 0x34}}, 0x40094) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x10c44, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x5ceb0000) 4.694128386s ago: executing program 1 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8995, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00f8ee", @ANYRES16=r4, @ANYRESHEX=r4], 0x6c}}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000003060101000000000000000059ffa524dd4c012a0f010000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 3.780701773s ago: executing program 2 (id=2712): r0 = socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000040)={0x2, 0xc3c, 0x7, 0x3, 0x8, 0xf0ca, 0x6, 0x2}, &(0x7f0000000080)={0x1, 0x7ba61798, 0x2, 0xfffffffffffffffa, 0x1, 0x1000, 0x10001, 0x5}, &(0x7f00000000c0)={0x8, 0x0, 0x7, 0x6a89, 0x401, 0x7275, 0x0, 0xb}, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000420000"], 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x20008000) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000e40)=ANY=[@ANYBLOB="300000000008050000000000000000000300000706100240880900000900010073797a3000000000050003fe84000000"], 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x40084) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) syz_genetlink_get_family_id$ethtool(0x0, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) shutdown(0xffffffffffffffff, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r5, 0x0, 0x44004) 3.469027603s ago: executing program 2 (id=2715): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x1}}], 0x2, 0x10001, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r3, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000180)=r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb5, '\x00', r5, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r6, &(0x7f0000000300)="3070cf5b8b6b44f9d82e767845e4209f4cbf2f", &(0x7f0000000340)=""/223}, 0x20) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb27f}, @TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x80}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r12, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) 3.433377987s ago: executing program 4 (id=2717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) connect$pppoe(r4, &(0x7f0000000200)={0x18, 0x0, {0x0, @remote, 'macvlan0\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r4) (async) connect$pppoe(r4, &(0x7f0000000200)={0x18, 0x0, {0x0, @remote, 'macvlan0\x00'}}, 0x1e) (async) 2.948144649s ago: executing program 4 (id=2719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x2, @empty, 0x0, 0x2}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000800)=ANY=[], 0x6a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x57c3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 2.497142174s ago: executing program 2 (id=2720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="223dbc814fa13b8f0d11a8906706afee8909a0f0a3d1b25fb2118171dc1b61c196bda026946b6322527688d11f475d7c02b685f7688d2dff0fb92d6ad9fabe72313c9d206daa79c34b8e05f803074422a3a69c4bc8b1b039c6ed8b362ea08d297014f45fc0073cccb19d45413df81511c799f2e74661961a446c80e9a3b1412747e8b38ac82a78bda5"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x800) 2.345277219s ago: executing program 2 (id=2721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xe}}, 0x6, 0xa}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x100, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x6, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2b, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @generic={0x6b, 0x3, 0x1, 0x3ff, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0xc, 0x0, 0x4, 0x7, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000400)=""/218, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000200), &(0x7f0000000640)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000080)="fdfc29b7805b7063b403f3207d454411f3cb1a3f87f976d57fa63df89d84557f4e7b6a965805f861904cef143160b7767ee8942e5c6a77daba5d8f53d5e406a26be7a355bbfac056c36f36140fb08490c9a9cce66d69128bde31bb82f2d5bfccfd0197a29b8e65fd9fc1add29522b883de6471ebedbb84a1cec0ed0c2e6e95cf6e36ac37934b9150100160fc49799bdb61c8698331e0af29ce0b350e91b97c02", &(0x7f0000000140)=""/115}, 0x20) 2.302180011s ago: executing program 2 (id=2722): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61104e00000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) r8 = openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r8, &(0x7f00000001c0), 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000004000128008000100687372003400028008000200", @ANYRES32=r5, @ANYBLOB="050006000000000008000100", @ANYRES32=r9, @ANYBLOB="05000700010000000500030000000000050007"], 0x60}}, 0x0) 1.680680474s ago: executing program 4 (id=2724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000002380)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040085) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000003700)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000036c0)={&(0x7f0000002400)={0x12b4, 0x1, 0x5, 0x801, 0x0, 0x0, {0x9572e5f365564b66, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0xdb3}, 0x2, 0x5, 0x468, 0xd0c, 0x1e, 'syz0\x00', "cc05e1d76469961063d23d804a4bec118526204c30b845ebc9425362e334fcd9", "455c2228abb9b7cf7a51f9291f9b7fbc9e266bfe224ceeb3050d4971f9b382a0", [{0x1, 0x2, {0x1, 0xc70e}}, {0x1, 0x3, {0x3}}, {0x4, 0x7}, {0x2, 0x40, {0x2, 0xfffffffe}}, {0x7, 0x5, {0x0, 0x3}}, {0x7ff, 0xfff, {0x0, 0x7}}, {0x6, 0x7, {0x2, 0xb872}}, {0x3e56, 0x7, {0x3, 0xc}}, {0x4, 0x4c, {0x3}}, {0x0, 0xa, {0x1, 0xb6}}, {0x9, 0x1, {0x2, 0xc3}}, {0x8001, 0x6, {0x2, 0xbe3e}}, {0x0, 0x7, {0x3, 0x41f}}, {0x5, 0xa37, {0x1, 0xe9}}, {0x1, 0x5, {0x1, 0x3ff}}, {0x1000, 0x1000, {0x2, 0x8}}, {0x1, 0x5, {0x1, 0xf8ba}}, {0x4, 0xd, {0x2, 0x6}}, {0x3, 0x8, {0x2, 0x6}}, {0x5, 0x7a4, {0x1, 0xffff7fff}}, {0x9, 0xd, {0x2, 0x1}}, {0x101, 0x2, {0x2, 0xca5}}, {0x4, 0xfff3, {0x0, 0x8}}, {0xaf, 0x0, {0x2, 0x57c}}, {0x0, 0x7, {0x1, 0xad8}}, {0x10, 0x5e, {0x0, 0x9}}, {0x6, 0x8, {0x0, 0x3}}, {0x8, 0x8, {0x3, 0x8}}, {0x4, 0x2, {0x1, 0x6}}, {0x6, 0x101, {0x0, 0x9}}, {0x7, 0xf, {0x0, 0x80000001}}, {0x6, 0x3, {0x2}}, {0x4, 0x7, {0x1, 0x5}}, {0x7, 0x6, {0x2, 0x81}}, {0x6, 0xa2, {0x0, 0x1}}, {0xf95, 0x4, {0x3, 0x3}}, {0x3, 0x9, {0x1, 0x3}}, {0x5, 0x0, {0x0, 0x1}}, {0x3, 0x8, {0x3, 0x1}}, {0x8, 0x3b6b, {0x0, 0xf}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0xe, 0x0, 0xfffe, 0x5, 0x19, 'syz1\x00', "7fd7396d375a2c8069783dbc1e3dee5983c0239ec27d00f8d86fffb30181ec59", "69578193d1af2268c79dadfa0223b4d82e8ab76f4280ea1c7445170d6a8afbc9", [{0xb6, 0xb000, {0x1}}, {0x3ae, 0x7, {0x1, 0x1}}, {0xc, 0x1000, {0x1, 0xfe77}}, {0x1, 0x1, {0x1, 0x2}}, {0x0, 0x0, {0x0, 0x9}}, {0x3, 0xb1d, {0x0, 0x40}}, {0x1000, 0x5, {0x3, 0x80000000}}, {0x9, 0x6b, {0x0, 0xf643}}, {0xff, 0x9, {0x3, 0x2}}, {0x3, 0x1, {0x0, 0x9}}, {0x47e, 0x4, {0x1, 0x1}}, {0x824, 0x9, {0x1, 0x10a1}}, {0x0, 0x5, {0x2, 0xfffff801}}, {0x9, 0x8, {0x3, 0xb4da}}, {0x3, 0x1, {0x2}}, {0x3, 0x6, {0x2, 0x4}}, {0xc0, 0x2, {0x2, 0xef33a4b}}, {0x4, 0x42, {0x1, 0x4}}, {0x7, 0x2, {0x2, 0xffff7fff}}, {0x8, 0x0, {0x1, 0x120000}}, {0x1, 0x2, {0x3, 0xf}}, {0x4, 0xddd4, {0x1, 0x7}}, {0x5, 0x200, {0x2, 0x2}}, {0x4fe6, 0x800, {0x3, 0xf31}}, {0x6, 0x4, {0x1, 0x2a21}}, {0xf, 0x4, {0x1, 0x6}}, {0x80, 0x2, {0x1, 0x1}}, {0x3, 0x7, {0x2, 0x6}}, {0x76, 0x4, {0x3, 0x98e}}, {0x2, 0x4, {0x2, 0x7}}, {0x3, 0xfff, {0x2}}, {0x8, 0x0, {0x1, 0x4}}, {0x3, 0xe9b, {0x0, 0x8}}, {0x101, 0x9, {0x0, 0x9}}, {0x0, 0x7, {0x3, 0x5}}, {0x8, 0x3, {0x2, 0x800}}, {0x2, 0x0, {0x3, 0x6}}, {0x5, 0x32c3, {0x3, 0x8000}}, {0xda, 0xfc01, {0x2, 0x2}}, {0x8, 0x0, {0x1, 0x78bb}}]}}}, {{0x254, 0x1, {{0x2, 0x7ac4}, 0x8, 0x5, 0x6, 0x7ab6, 0x0, 'syz1\x00', "cfaeb527b26740054dcfe6eb860eb9fa169701e71a2592c58173b386f9f62511", "42e52b0b98cbab7387e66698a9d98e756562a906c101a6e6055110e85b499411", [{0x644, 0x3}, {0x7ff, 0x7fff, {0x3, 0x6}}, {0x6, 0x7, {0x3, 0x1}}, {0xa9, 0x44, {0x1, 0x8}}, {0xcd7, 0xfff, {0x0, 0x9}}, {0x4, 0x7f, {0x1, 0x5}}, {0x3, 0x5, {0x3}}, {0x9, 0x3, {0x1, 0x9}}, {0x1, 0x7ff, {0x2, 0x2}}, {0x8, 0x3, {0x3, 0x4}}, {0xfc00, 0x0, {0x2, 0xe4b8}}, {0x1, 0x7, {0x5, 0x4}}, {0x6ffc, 0x6, {0x0, 0x7ff}}, {0x6, 0x1000, {0x0, 0x7}}, {0x0, 0xa31, {0x2, 0x3}}, {0x4, 0x235, {0x0, 0x8}}, {0x175b, 0xffef, {0x1, 0x3}}, {0x5, 0x6, {0x0, 0x6}}, {0x4, 0xff, {0x2, 0x18c}}, {0xa25, 0x7, {0x3, 0x7}}, {0x10, 0x8, {0x3, 0xf48}}, {0x9, 0x5, {0x3, 0x5}}, {0x7, 0x7, {0x0, 0x2}}, {0x1, 0x7fff, {0x3, 0x1}}, {0x2, 0x1, {0x3, 0x1}}, {0x7, 0x10, {0x1}}, {0x8, 0xfffa, {0x3, 0x401}}, {0x3, 0x1, {0x1, 0x200}}, {0x2, 0x5, {0x7, 0x513c}}, {0xaf61, 0x4, {0x2}}, {0x1, 0x7, {0x0, 0x8000}}, {0x2, 0xfffa, {0x1, 0x6}}, {0x6, 0xffc8, {0x2, 0x4}}, {0x0, 0x0, {0x0, 0x7}}, {0xb45, 0x7fa6, {0x2, 0x8}}, {0x8001, 0xc, {0x0, 0x2}}, {0xcd, 0x5, {0x1, 0xfffffff9}}, {0x5, 0x8, {0x2, 0x1}}, {0x2, 0x7, {0x0, 0x8}}, {0x3, 0xfffc, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x3ff}, 0x4, 0x3, 0x6, 0x9, 0x7, 'syz1\x00', "ea4f9c3cb4d0f5badf869a81dc97f87812710aa4ef34f3f1b870aa9f9e0a982b", "3a5a61f3393ebf495f79e7aae760054d60a81b20d77ee14fb9dd85d12b57f528", [{0x6, 0x7, {0x1, 0x6}}, {0x7, 0x0, {0x3, 0x9}}, {0x9, 0x2, {0x0, 0x1}}, {0x0, 0x9, {0x1, 0x4}}, {0x33, 0x1243, {0x3, 0xc}}, {0x4, 0xe, {0x1, 0x1}}, {0x0, 0x8000, {0x0, 0x75}}, {0x6, 0x6, {0x1, 0x8c}}, {0x0, 0xe, {0x3, 0x6}}, {0x976, 0x4, {0x1, 0x9}}, {0x8000, 0x5, {0x3, 0x2}}, {0x853, 0x1361, {0x2, 0x6}}, {0x2, 0x4, {0x2, 0x3}}, {0x7fff, 0x7156, {0x2, 0x1000}}, {0x9, 0x8}, {0x9, 0xffff, {0x1, 0x10}}, {0x1, 0x4, {0x0, 0x2}}, {0x5, 0x100, {0x1, 0x5}}, {0x100, 0x5, {0x0, 0x2}}, {0x6, 0x0, {0x0, 0x80000000}}, {0x7fff, 0x4, {0x0, 0x5}}, {0x5, 0x7, {0x2, 0x8001}}, {0x9, 0x7f, {0x1, 0x4}}, {0x4, 0x7781, {0x0, 0x5}}, {0x1, 0xa, {0x0, 0x9}}, {0xbf54, 0x1, {0x1, 0x1}}, {0x81, 0x8, {0x1, 0xf}}, {0x100, 0xfeff, {0x3, 0x1}}, {0x7, 0x4, {0x2, 0x9}}, {0x0, 0x9, {0x1, 0x1000}}, {0x5, 0x9, {0x1, 0x2}}, {0x8, 0x0, {0x2, 0x3}}, {0x5, 0x0, {0x1, 0x4}}, {0x9, 0x7ff, {0x3, 0xfffffffa}}, {0x280, 0xa, {0x0, 0xffff}}, {0xfffe, 0x6, {0x2, 0x9}}, {0x80, 0x800, {0x3, 0x6}}, {0x7, 0x1, {0x0, 0x2}}, {0x2, 0x4, {0x1, 0x80}}, {0xfffa, 0x7f, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0xdb}, 0x7f, 0x4, 0x9890, 0x6d, 0x16, 'syz1\x00', "f0c15a8a5f0f22d82f43df29d1de78963c51259953b38a8a0dcd58787cadb8c0", "62ee0382b9bef8586fa89f27260e73d1169940b7c15094de9de39f1f231e0f55", [{0x4, 0x2080, {0x1, 0xffff}}, {0x17, 0x3, {0x0, 0x5}}, {0x7, 0x5, {0x3, 0x213}}, {0x2, 0x4, {0x0, 0xc}}, {0x4d1, 0x2, {0x3, 0x2}}, {0xfff8, 0xd, {0x3, 0x7}}, {0x1, 0xf4, {0x2, 0xe0000000}}, {0xdc83, 0x2, {0x1, 0x3ff}}, {0x56, 0x0, {0x2, 0x8}}, {0x3, 0x3, {0x0, 0x80}}, {0x9, 0xf, {0x1, 0x3}}, {0xf037, 0xfff9, {0x0, 0x6}}, {0x8000, 0xd3, {0x0, 0x8}}, {0x7, 0x80, {0x2, 0x33026edf}}, {0x401, 0x400, {0x1, 0x2}}, {0xff9b, 0xb, {0x2, 0x5b06}}, {0x5, 0x5, {0x0, 0x5}}, {0xc, 0x44, {0x1}}, {0x69ef, 0x4b0, {0x2, 0x8001}}, {0xde, 0x8, {0x2, 0x2}}, {0x0, 0xff, {0x2, 0xd61}}, {0x80, 0x5, {0x0, 0x2}}, {0x2, 0x6, {0x2, 0x8}}, {0x6, 0x733c, {0x2, 0x63}}, {0x7, 0x5, {0x0, 0x8}}, {0x8000, 0x8, {0x1, 0x92}}, {0x8, 0x6, {0x3, 0x1}}, {0x0, 0x4, {0x3, 0x2}}, {0xfc, 0x7ff, {0x1, 0x5}}, {0x967, 0x5, {0x0, 0x6}}, {0xefea, 0x7, {0x1}}, {0xfff9, 0x1241, {0x3, 0xaa0b}}, {0x80, 0x5, {0x1, 0x5}}, {0x4, 0x3, {0x1}}, {0x7fff, 0x6e42, {0x1, 0x1baf}}, {0x2, 0x9}, {0x2, 0xa, {0x1, 0x7fff}}, {0x6, 0x8, {0x3, 0x2}}, {0x4, 0x4, {0x1, 0x355a6ad8}}, {0x0, 0x9, {0x0, 0xf540}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x57, 0x6, 0x1, 0x5f46, 0x8, 'syz0\x00', "14ffb6fb51dbfc670fe111985ec241e19abb7b1de52305ef955412661aa06657", "bc55e0bc3ab56e45791c4893fa6af667222e337643a7821a4c0789a6a3dd168d", [{0x7fff, 0x5, {0x2, 0x192}}, {0xff, 0x8, {0x1, 0x53c8ca0e}}, {0x0, 0x8, {0x3, 0x4}}, {0x1, 0x6, {0x3, 0x8001}}, {0x80, 0x3c5, {0x1, 0xc}}, {0x1, 0x40, {0x3, 0x5}}, {0x1, 0x6, {0x1, 0xffffffff}}, {0x0, 0x2390, {0x3, 0xfffffffa}}, {0x1, 0x2, {0x2, 0x48}}, {0x401, 0x101, {0x3, 0xf5}}, {0x2, 0x101, {0x0, 0x81b}}, {0xb, 0x8, {0x3, 0x9}}, {0x7, 0x8, {0x0, 0x9}}, {0x2, 0x5, {0x2, 0x2}}, {0x9, 0x8, {0x0, 0xc}}, {0xffff, 0x2, {0x0, 0xfffffffe}}, {0x8, 0x1200, {0x3}}, {0x1, 0x8, {0x1, 0x81}}, {0x4, 0xd935, {0x0, 0x4}}, {0x40, 0x2, {0x1, 0xfff}}, {0x6, 0xe4f9, {0x3}}, {0x7fff, 0x0, {0x0, 0xfffffff5}}, {0x1, 0x9, {0x0, 0x8}}, {0x6, 0x0, {0x1, 0x7}}, {0x6, 0xfffd, {0x3, 0xfffffffa}}, {0x400, 0xfff8, {0x2, 0xc}}, {0x1, 0x1, {0x0, 0x7fffffff}}, {0x3ff, 0x1, {0x3, 0xe9fd}}, {0x8, 0x5, {0x3, 0xfda}}, {0x0, 0x7, {0x2, 0x5}}, {0x2, 0xc931, {0x0, 0x3}}, {0xfff8, 0x1, {0x0, 0x9}}, {0x5, 0x3ff, {0x1, 0x9d4}}, {0x0, 0x8, {0x0, 0x8}}, {0x0, 0x6, {0x0, 0xfffff800}}, {0x7fff, 0x995, {0x0, 0x8001}}, {0xdb65, 0x6, {0x2, 0x7}}, {0x3, 0x5, {0x3, 0x800}}, {0x9, 0x400, {0x3, 0x10}}, {0x3, 0xb3eb, {0x1, 0xb3}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0xc, 0x55, 0x4, 0x2, 0x0, 'syz0\x00', "f30490e45fc01dc37e5b2ffb9c75f087bfc1071d271e3abbae9a88e6560b9ae6", "4cf37853363868349446b6bf5df50a9f665687765c148245b4be81b2b3038502", [{0x3, 0xa, {0x3, 0xd}}, {0x1, 0x8, {0x1, 0x101}}, {0x8, 0x800, {0x1, 0x9}}, {0x0, 0x8, {0xc4423c1666a4412, 0xa}}, {0xf0c3, 0xe6a5, {0x3, 0x6c2a}}, {0xe3, 0x6, {0x3, 0x4}}, {0x5, 0xa585, {0x0, 0x80000001}}, {0xff, 0x7, {0x2, 0x8000}}, {0x0, 0x10, {0x1, 0x7}}, {0x9f2c, 0x6, {0x2, 0x9}}, {0x8, 0x5d, {0x2, 0x10001}}, {0x6b, 0x2, {0x0, 0x7}}, {0x3ff, 0x2, {0x3, 0xffffffff}}, {0x6, 0x6e5c, {0x0, 0x40}}, {0x6, 0x7, {0x0, 0x9}}, {0x1, 0x5, {0x3, 0x1000}}, {0xbf, 0x9, {0x3, 0x474c8a47}}, {0x404, 0x6, {0x0, 0x7fff}}, {0xffff, 0x4, {0x0, 0x200000}}, {0x1, 0x6, {0x3, 0x4}}, {0x7ff, 0xa6, {0x1, 0x2}}, {0xfffb, 0x3, {0x0, 0x1}}, {0x6, 0x80, {0x3, 0x2ea}}, {0x101, 0x9, {0x0, 0x4}}, {0x9, 0x9, {0x1, 0x400}}, {0x4d49, 0x0, {0x2, 0x3ff}}, {0xff, 0x9, {0x2, 0x5}}, {0x8, 0x5, {0x1, 0x80000001}}, {0x8, 0x9, {0x2, 0x7}}, {0x9, 0x3, {0x2}}, {0x4, 0x8000, {0x0, 0x10}}, {0x3, 0x3, {0x1, 0x3}}, {0x0, 0x2, {0x1, 0x54f}}, {0x6, 0xa000, {0x2, 0x358}}, {0x4000, 0x1000, {0x3, 0x9}}, {0x7ff, 0x7, {0x1, 0x7}}, {0x2, 0x80, {0x3, 0x38a4}}, {0x101, 0x100, {0x3, 0x4}}, {0x7, 0x5, {0x3, 0x10000}}, {0x10, 0x8, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x44, 0x6, 0x3, 0x40, 0x1d, 'syz1\x00', "d7dbcb037e8afe644087763d003b51f531d20fc9cfa106c81ecfb9fb9b0acc57", "d06cedd674114ebd51cf32a7ec8dc265442f3809dc6869b389f5b43da2003610", [{0xff80, 0x35a, {0x0, 0x4}}, {0x100, 0x8, {0x2, 0x4}}, {0x39, 0x48d1, {0x0, 0xbbff}}, {0x5, 0x80, {0x2, 0x3ff}}, {0x3, 0xe, {0x3, 0x7fffffff}}, {0xc, 0x4, {0x1, 0x5}}, {0x3, 0x0, {0x1, 0x2}}, {0x4, 0xb, {0x0, 0xff}}, {0x3f, 0x8, {0x3, 0x2}}, {0x7, 0xff, {0x0, 0x1}}, {0x9, 0x5, {0x2, 0x2}}, {0x9, 0x2, {0x2, 0x9}}, {0xfff8, 0x0, {0x0, 0x7}}, {0x1, 0x4, {0x1, 0x2}}, {0x2, 0x1, {0x0, 0x6f3ee6e8}}, {0x2, 0x5, {0x3}}, {0x1, 0x4, {0x1}}, {0x4, 0x800, {0x2, 0x5}}, {0x5, 0x81, {0x1, 0x4}}, {0x9, 0x8, {0x0, 0x40000000}}, {0x100, 0x7, {0x0, 0x6}}, {0x5, 0xfc, {0x1, 0x1}}, {0x101, 0x4, {0x1, 0x832}}, {0x9f, 0x2, {0x3, 0x8}}, {0xf, 0x6, {0xcc78c057c45e01a8, 0x8e5}}, {0x5, 0x6f, {0x3, 0x76}}, {0x0, 0x9, {0x0, 0x3ff}}, {0x1, 0x5, {0x0, 0x10}}, {0x5, 0x7, {0x1, 0x1ff}}, {0x8000, 0x8000, {0x3, 0xfffffffa}}, {0x7, 0x9, {0x3, 0x5}}, {0x3, 0x0, {0x2, 0x80}}, {0x1, 0x0, {0x0, 0xfffffffc}}, {0x8, 0x9, {0x0, 0x8}}, {0x6, 0x18f, {0x2, 0x2}}, {0x6, 0x0, {0x2, 0x8}}, {0x7, 0xc9, {0x2, 0x40}}, {0x4, 0x40, {0x1, 0xc}}, {0x6, 0x7, {0x1}}, {0xe907, 0x7, {0x2, 0x4}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x48800}, 0x4000004) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x1042}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002180)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)=""/249, 0xf9}, {&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000400)=""/141, 0x8d}, {&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000640)=""/165, 0x98}, {&(0x7f00000022c0)=""/144, 0xfffffee0}], 0x8, &(0x7f0000000780)=""/18, 0x12}, 0x1}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/50, 0x32}, {&(0x7f0000000880)=""/199, 0x9d}, {&(0x7f0000000980)=""/10, 0xa}, {&(0x7f00000009c0)=""/213, 0xd5}], 0x4, &(0x7f0000000b00)=""/34, 0x22}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/129, 0x81}], 0x1, &(0x7f0000000c40)=""/71, 0x47}, 0x7}, {{&(0x7f0000000cc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f0000000e40)=""/195, 0xc3}], 0x2, &(0x7f0000000f80)=""/225, 0xe1}}, {{&(0x7f0000001080)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001100)=""/48, 0x30}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x2}, 0x7}], 0x5, 0x20, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) 1.630102752s ago: executing program 3 (id=2725): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) writev(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)="4f82de35e0d42fab2fca4a9265ae5a3d906cd24897c63e9fc5b32e19ebc39744c8620a3eb6f4c2cd2f4825c841df35f4f4f01e13e45e6b8fd1cf87b548d2ad00db21f94dac9e50b23ac286eda403dd25eefc732b2c827036e43f7be3a67d6a9e2a994c03d71fd8d5be95eab9fcce027945f70efb625c0d8d4ee51f8af072f665a76ef8b3adb9ea5dcfcf64a58e142a24b2ad7be2d0843ad64a871928307ffdc57ecc6a7b02169922e82cc620e57d749abba0075f63bfdcb2de278fb21ae8e5f8c93c5c21", 0xc4}, {&(0x7f0000000540)="d58c6471fe623ab03bc457a15f3cc30c41177189c6365aafbfadc41c06fc6db92f535bda72e72afd8ba236b4c84b0672263441b204730e45f4d9d045f4e12df7fc895e4155fcfd6fe4c34546424ca3c6f3473386cb5bcce42a9d8aea17790d83e57455da13424d42f02ad02faed9d3401a66fc3ea74dedd6430c3074e153ab4dbdef90cb3832ec91e41fcf06ceb3f581db90931c9cbdbd9a06c2f4befbe532eca5fbc2aafa8dd9e42db96d74044e851661c7d992c7c0a37eec976169611ab0bacc9a85ce532a73e7cac5593d356dbe416aadcb5ba177f2d5409e7b86fcb05b0416417085a70a", 0xe6}, {&(0x7f0000000140)="a0c413f54311ca964ef82c9184d55f97c5ccd8789c559731809b9fb1e1f1c0f2", 0x20}, {&(0x7f0000000640)="c5bd6ca9df03a250ce52241e54ea06a8d193f946b959c87dda6c260634e60dafef963bb51b392375d174ddf8a169730754a959f22122eb287ff8b30c72757e15292b2a7acd3d8338e9cf2acb7c98eda4f857ba33e3a17c7ab230c8144a05af06226c328c32656a235c370a594a2f697807db9846dbce00cec8ef52362f5b8011735d89f037a89d3757e89cb1e066fe05e6a2e3a1b1a5da26824a17fa2b72953d55c223d1b2592adb95bd251dac90c3ac2af9115346aaeda2d3a7f59772ddb674", 0xc0}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=@newtclass={0x7c, 0x28, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {0xa, 0x9}, {0xd, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4c, 0x2}}, @tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x12, 0x1, 0x6c12, 0x7, 0xf, 0x2ff}, {0x8, 0x2, 0x4, 0x1, 0x1, 0x6}, 0x3, 0x0, 0x1, 0x12, 0x74}}]}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40082) r7 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x43, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.543211312s ago: executing program 4 (id=2726): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xa4}, 0x1, 0x0, 0x0, 0x4040004}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9e9c6482de834993, r2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000420000"], 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x2, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x20008000) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="0c00e3671e", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$inet6(0xa, 0x3, 0x8000000003c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r10, @ANYBLOB="10060000000000001c0012800b00010067036e657665000011000280060005004e230000"], 0x3c}, 0x1, 0x2}, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000280)={r9, r9, 0xc, 0x0, 0x0, 0x9, 0x1, 0x458, 0x9, 0x9, 0x7ffffffe, 0x1, 'syz1\x00'}) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) syz_genetlink_get_family_id$ethtool(0x0, r8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.297353779s ago: executing program 3 (id=2727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000230001000000000000000000010100800c0001000200000000000000140003002001000000000000000000000000898450bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES8], 0x38}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000013000100"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001400140076657468305f746f5f627269646765001400030067726530"], 0x5c}}, 0x0) 1.169086175s ago: executing program 4 (id=2728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000), 0xdd5dea3f417ff274}, 0x40000041) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000000)="60e613f08e96586a", 0x8}, {&(0x7f0000000180)="fc685efea36ab04fcacbecd997f76eb556f4f7aae1eb275625cc244e86b90cee455cf3cf7a895d2babc27bc5f29d700c94b1c6a8867a444a5587b9ac1ee28fb2fbc95d3c2a7c26e3a45e1abb289729c671dfee7857723ea1d354e56165606f5df92c60bc152532e7496ba8f0903ba7d4b4ff82b990d136d7d907ee4eb2fa54b9b9387fe646d920f0de91e7", 0x8b}, {&(0x7f0000000300)="1abf56761f893df67f251f9cda3d644606902706ab34610ca15e2bfa4fdb69eff446ffda1b83a854f2feae8e8c3ff57c6298b55efd6a4a594c068c37c03dabfc9b2609be1cd2a9948c7d6476d99b974e47f8244782654e3a2cc1b0e7756c706f98b2b1de61fbc3a45934426361db4acc080e91eef3d2c3039ac9f0587d34174acd81fca9c25abd1e1a77cc28107c9b219e1285931bc8f6d91019f053c6f7", 0x9e}, {&(0x7f00000003c0)="38b189ab24a80b66992d79b0b7c59e6210c9fe7596fa2a919ed5669d7c73fc411b2be44383eaebff9680e69476182a19d855e4071c3c055e28eda8b086afcb7462b4b3f0cc02359bad8e93a73beb9e43b5c2afa7b3cbfd707f659669c07b6fc5aafdc0176fb6bc0a62d6ea0c9610584934803a063b099d2cf3f4cb34daff921f06669ca6dbd53b1c17fef6129ede19d235b4c09da01de7f1c91068e86c6ddf1b0e225bc54fcb9f8c0a5d3ddd58e8b99ee8f47d427d9c1579333c3bd23d94d7930948efb1eed05eb57d23197f61d009e40cd44ccc202a9e9ec070b5e97a6a1b6805fe", 0xe2}, {&(0x7f0000000240)="4b686846c81fd160be7c5706c826786a3022c056c9c5cd1302f6ce560e586fd72aedb2715f952c970fd5495b4416b93ce46bbb2a80ac431aed108a499500407ef7e13e822d6bbf087525873d848ae3e7ed9a3bca626dbf2c6e86df70cd4d8ee80863", 0x62}, {&(0x7f00000004c0)="12f7373fbcb9babfa8836b556061466f0a599ad95caad76788572d2d0f47c5061f4287a20a22c1735afd41ecdc9faec1f0a5352e3a1fbb146eb35ead473eff47d92c993b6eef1833c659bb0007226683a7e6a3d986ee8734377a2d7153bfcad0feb69b66c299d447a2410c29ec8f6b9c4458f5f70278f45e140780731b3b99d0177836849b68bb0ff42312fb71bde07772f4e950c550e4e7efd075741c9c4c4ffdf4def6cdb31e63fb3a63bc986ef47d885d7d5c5aa360c4e5f921ffbca024cda36065624aeff39d91bebe1156af6359d4029c06a887fa3aa6127ce13d9ffe8ee2888ee6f61e1c3888d3038192aa2edaaba0d652", 0xf4}, {&(0x7f0000000740)="e747e4a105071207f272e95b4d0c996503e91685c2187d4bd7bb0a9cfd22f56b436acd2b76bbf98fc020c11e383b6d74d6dd1f5158beae1d2ba49cb684e3264da5b7dde72deb721f945567be5f4713759f1b8aef630c6f2ca8f860dc64b0d1a4cb24925bf19bb5b1f92be2d2421c3bb036dcea452be1d324613abf320b2c6c96945f12f7", 0x84}, {&(0x7f00000005c0)="6555a8db694e4037f82f654f111da00f2f6405f178c8a3a2ce57b5cff94e1789bcd68a10d30223fa05a48490ed5d65e6adb5376962be11dcd679294b060248a2cc325ae14536fb4398dd0762953779", 0x4f}, {&(0x7f0000000680)="9fe1f53df65338e24f808e1cc7d4d37cd836d2a5ebb55c4707c73d1a7ffe0fb4775cf3a94ffb1cec51eb1f6ce9d8734dac0c5f52a9496faa5fb214c3c65edcccc086ec511c62a8be73c040737489dce103531a71477e3a81fda7b19732e67a3c", 0x60}, {&(0x7f0000000800)="2fc3850275175b16339640dc88eaac12dc0c20abd8899eca8268b6d58c5482d5453fb8e1c32e049253be90643ea02f9f991e6a904d4f8fe8bb53e225bc53c5bc2fedf4a3398e0a185573a7d943a4c2613d2dede0f091a1fed468e11056fbde09a36dfb4c67e3c3fd585ca05609919f2de7b8bbd595b071cf01717d0c63bd2dea59f0aa2e3c1fb201411c30b6ab6cd3d02557e52379bb3674f291b43e118b4fd847aeefa1ace587d6b17212c0f4d9d6", 0xaf}], 0xa, &(0x7f0000000980)=[{0xd8, 0xff, 0x7, "8697f6cf9c4b177c3c5ab7cc4d0ca85652c05d6d5f1827b4a7b8dade55fcaa2969baf5090e54a381b1d163ea2b7f2d26e936400fff397c31d29722d7e2b1e3a059c2f942b8e0937a88ef3631745cc49122a64ddfbd8b491bdda8dec41b8729c0fe55839007f2bc2ba4d29570a84876afd0e1dea4bbcad9b3c6abd00a6720493c2dc28e89aefb1a7a05a4b5e3a2457e72fef89c61cb8159df62d70490d27de05a4645637b9397cd79cee947887566bdb93d51b7e39b67f1d32609c888494e696e04"}, {0x88, 0x1, 0x3, "37468f700695a1e10a2664dde3144092f16b9edefc92ed7a838bb3ffa742f709e7ecf49d197fa71f07fcf6a476c0a176c5e5519e0932740917fb00b09289957fd65644c3a992fb7421dc04d9a240648285760b14649d34e788642db7f05ba610b0ddf05f64fd8de715b739b92ac1414aca602363df8978"}, {0xc8, 0x10d, 0x1, "4544775589bfa7d19508ed46e5ecb8b83b71a16acc0f766987c6815112c7938813a79ef33b67a5d1ee6a30713c69ce6201ec4386622e8b19273b34adec6b7363ae7440c80baca2cc12388a2f1fa6802da1c17d9ed6e2dc7013f817e019bd2af23652660f531d3698fc379f1c15cae992fe7c0998a6c96c8426e59a2dc7e97e0907224849a9d68910c8b64edbdfcafc02be5dfb39da6f143fb9508aee8436b3cddb0bea72de0c2489876789524d05c5f6980b15cb0f02"}, {0x28, 0x104, 0x6, "3856c40809b988cb01221095f93c04419eb454"}, {0x68, 0x10b, 0x9, "46306b49c1ada2bed82049a599b79bffb6380e539f3acc9c8dea2b3d813523a0c6b40990eba5f8b0350b2741b73bc57c6d4e3b1414a1a03ce32b4dd53b538e420b7899df0082f3c31e2161a4d64dbcf0fd4209b0ad48dfe9"}, {0xa8, 0x116, 0x0, "42fb43c0df605db14912175ed00bcd25a7b7f9a99f262bbc4869ff8be437a2d3efa13b2920fdba19f1bc3368427e2847bae36e020f48da6a91a748648b7ab973dd21c5637f7d322ff7ef014e1026accb95acf644c4518fb47d9af0215d3cfafa5bbec6ba344f7716bde05d6b6491fa123f877e09ac85f373cef0ffb90abe03484fefb03300d5f00318886065147668f0f1b34c0232c6eb36"}, {0xe0, 0x10f, 0x81, "5ef7b0c15a3765e87c8c3743c259c4443955bd806240ae81a48f9dcfb7b673a636c34004aacdb3471b753fcfe67e9903a0f961c795bdc08d92094017e03688357da516856bb157c0c99a566f15cdc689e6217a0f7c08b5862aad50613f9798c2ff18a2816393a026518df29622bbed927aeaaef61c3f67d2468651129dfc40b95170bc33aa8f4feb449d731475596d4aa08984809a42cffafccb91cfe6ad1ed5a7e137459a02e4b133ee7ba5b76484f4ee99a46d63a5db6dc273d4210c5eb7a2e79063c73eadba96a28bde"}], 0x440}, 0x95) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/64, 0x40}], 0x100000000000003d) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 1.083668746s ago: executing program 3 (id=2729): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "a71e2a26c2d174b4380271c119"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r3, 0x121, 0x70bd2c, 0x100000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x24}}, 0x4000040) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001080000000000000000050003000800000008000500", @ANYRES32=r2], 0x50}}, 0x0) 937.414337ms ago: executing program 3 (id=2730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x3}, 0x2) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getaddr={0x6c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8, 0x8, 0x282}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x6c}}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000019000100000000000000000082200000001100050000000008000200ac1e0001"], 0x24}}, 0x0) 267.445087ms ago: executing program 4 (id=2731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04000000000000ec000067e51d9200000008000e00f5b95c7f", @ANYRES32=0x0, @ANYBLOB="0c0099000000000036000000"], 0x28}}, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r6, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x5, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendto$packet(r11, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="cf0404000000000000001300000008000300", @ANYRES32=r14, @ANYBLOB="040013000a000600080211000001000006001000800500000f001200000000000c00810005000200c4000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0118020003910000300012800e00010069703665727370616e0000001c000280080005000400000008000100", @ANYRES32=r7, @ANYBLOB="0600108b4e220000"], 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x8000) socket$netlink(0x10, 0x3, 0x0) 60.94259ms ago: executing program 3 (id=2732): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket(0x2a, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 0s ago: executing program 3 (id=2733): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x8, 0x3, 0x2, @mcast2, @empty, 0x7, 0x7800, 0xffffffff, 0x8}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async, rerun: 32) listen(r2, 0x0) (async, rerun: 32) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c00040001000001000280"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fbffffff000000fe9a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0006"], 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) kernel console output (not intermixed with test programs): ility 0, space 0, times 0 [ 282.454707][T13300] CPU: 1 UID: 0 PID: 13300 Comm: syz.2.2184 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 282.454733][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 282.454743][T13300] Call Trace: [ 282.454751][T13300] [ 282.454758][T13300] dump_stack_lvl+0x189/0x250 [ 282.454787][T13300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.454808][T13300] ? __pfx__printk+0x10/0x10 [ 282.454827][T13300] ? __pfx___might_resched+0x10/0x10 [ 282.454842][T13300] ? fs_reclaim_acquire+0x7d/0x100 [ 282.454868][T13300] should_fail_ex+0x414/0x560 [ 282.454889][T13300] should_failslab+0xa8/0x100 [ 282.454912][T13300] __kmalloc_cache_noprof+0x70/0x3d0 [ 282.454931][T13300] ? alloc_pipe_info+0xe9/0x4d0 [ 282.454954][T13300] alloc_pipe_info+0xe9/0x4d0 [ 282.454981][T13300] splice_direct_to_actor+0xa5d/0xcc0 [ 282.455006][T13300] ? aa_file_perm+0x11f/0xed0 [ 282.455024][T13300] ? aa_file_perm+0x3e7/0xed0 [ 282.455053][T13300] ? __lock_acquire+0xaac/0xd20 [ 282.455071][T13300] ? __pfx_direct_splice_actor+0x10/0x10 [ 282.455089][T13300] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 282.455108][T13300] ? __pfx_aa_file_perm+0x10/0x10 [ 282.455133][T13300] do_splice_direct+0x181/0x270 [ 282.455154][T13300] ? __pfx_do_splice_direct+0x10/0x10 [ 282.455173][T13300] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 282.455193][T13300] ? bpf_lsm_file_permission+0x9/0x20 [ 282.455212][T13300] ? security_file_permission+0x75/0x290 [ 282.455236][T13300] ? rw_verify_area+0x258/0x650 [ 282.455257][T13300] do_sendfile+0x4da/0x7d0 [ 282.455277][T13300] ? __pfx_vfs_write+0x10/0x10 [ 282.455300][T13300] ? __pfx_do_sendfile+0x10/0x10 [ 282.455321][T13300] ? __fget_files+0x3a0/0x420 [ 282.455350][T13300] __se_sys_sendfile64+0x13e/0x190 [ 282.455369][T13300] ? rcu_is_watching+0x15/0xb0 [ 282.455392][T13300] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 282.455416][T13300] ? do_syscall_64+0xba/0x210 [ 282.455439][T13300] do_syscall_64+0xf6/0x210 [ 282.455465][T13300] ? clear_bhb_loop+0x45/0xa0 [ 282.455485][T13300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.455500][T13300] RIP: 0033:0x7fdfda58e969 [ 282.455516][T13300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.455530][T13300] RSP: 002b:00007fdfdb313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 282.455548][T13300] RAX: ffffffffffffffda RBX: 00007fdfda7b5fa0 RCX: 00007fdfda58e969 [ 282.455560][T13300] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 282.455570][T13300] RBP: 00007fdfdb313090 R08: 0000000000000000 R09: 0000000000000000 [ 282.455580][T13300] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 282.455589][T13300] R13: 0000000000000000 R14: 00007fdfda7b5fa0 R15: 00007ffc2d497c88 [ 282.455616][T13300] [ 282.802095][T13305] __nla_validate_parse: 6 callbacks suppressed [ 282.802111][T13305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2187'. [ 283.181826][T13313] x_tables: duplicate underflow at hook 4 [ 283.316292][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 283.332850][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2189'. [ 283.425245][T13322] IPVS: Unknown mcast interface: virt_wifi0 [ 283.440346][T13294] chnl_net:caif_netlink_parms(): no params data found [ 283.604519][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.613560][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.626458][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.641545][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.652502][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.870740][ T9597] hsr_slave_0: left promiscuous mode [ 283.883588][ T9597] hsr_slave_1: left promiscuous mode [ 283.889674][ T9597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.906562][ T9597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.917684][ T9597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.931395][ T9597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.975102][ T9597] veth1_macvtap: left promiscuous mode [ 283.980706][ T9597] veth0_macvtap: left promiscuous mode [ 283.986969][ T9597] veth1_vlan: left promiscuous mode [ 283.992591][ T9597] veth0_vlan: left promiscuous mode [ 284.112088][ T5833] Bluetooth: hci0: command tx timeout [ 284.112226][T13355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2198'. [ 284.201970][T13357] FAULT_INJECTION: forcing a failure. [ 284.201970][T13357] name failslab, interval 1, probability 0, space 0, times 0 [ 284.217276][T13357] CPU: 0 UID: 0 PID: 13357 Comm: syz.2.2197 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 284.217299][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 284.217308][T13357] Call Trace: [ 284.217314][T13357] [ 284.217329][T13357] dump_stack_lvl+0x189/0x250 [ 284.217355][T13357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.217376][T13357] ? __pfx__printk+0x10/0x10 [ 284.217394][T13357] ? __pfx___might_resched+0x10/0x10 [ 284.217409][T13357] ? fs_reclaim_acquire+0x7d/0x100 [ 284.217434][T13357] should_fail_ex+0x414/0x560 [ 284.217455][T13357] should_failslab+0xa8/0x100 [ 284.217477][T13357] __kmalloc_noprof+0xcb/0x4f0 [ 284.217495][T13357] ? alloc_pipe_info+0x1fd/0x4d0 [ 284.217517][T13357] alloc_pipe_info+0x1fd/0x4d0 [ 284.217538][T13357] splice_direct_to_actor+0xa5d/0xcc0 [ 284.217560][T13357] ? aa_file_perm+0x11f/0xed0 [ 284.217577][T13357] ? aa_file_perm+0x3e7/0xed0 [ 284.217606][T13357] ? __lock_acquire+0xaac/0xd20 [ 284.217624][T13357] ? __pfx_direct_splice_actor+0x10/0x10 [ 284.217642][T13357] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 284.217662][T13357] ? __pfx_aa_file_perm+0x10/0x10 [ 284.217687][T13357] do_splice_direct+0x181/0x270 [ 284.217707][T13357] ? __pfx_do_splice_direct+0x10/0x10 [ 284.217726][T13357] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 284.217746][T13357] ? bpf_lsm_file_permission+0x9/0x20 [ 284.217763][T13357] ? security_file_permission+0x75/0x290 [ 284.217786][T13357] ? rw_verify_area+0x258/0x650 [ 284.217807][T13357] do_sendfile+0x4da/0x7d0 [ 284.217827][T13357] ? __pfx_vfs_write+0x10/0x10 [ 284.217850][T13357] ? __pfx_do_sendfile+0x10/0x10 [ 284.217870][T13357] ? __fget_files+0x3a0/0x420 [ 284.217899][T13357] __se_sys_sendfile64+0x13e/0x190 [ 284.217919][T13357] ? rcu_is_watching+0x15/0xb0 [ 284.217941][T13357] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 284.217965][T13357] ? do_syscall_64+0xba/0x210 [ 284.217987][T13357] do_syscall_64+0xf6/0x210 [ 284.218004][T13357] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.218020][T13357] ? clear_bhb_loop+0x45/0xa0 [ 284.218039][T13357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.218054][T13357] RIP: 0033:0x7fdfda58e969 [ 284.218069][T13357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.218081][T13357] RSP: 002b:00007fdfdb313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 284.218099][T13357] RAX: ffffffffffffffda RBX: 00007fdfda7b5fa0 RCX: 00007fdfda58e969 [ 284.218110][T13357] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 284.218120][T13357] RBP: 00007fdfdb313090 R08: 0000000000000000 R09: 0000000000000000 [ 284.218130][T13357] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 284.218140][T13357] R13: 0000000000000000 R14: 00007fdfda7b5fa0 R15: 00007ffc2d497c88 [ 284.218167][T13357] [ 284.868473][ T9597] team0 (unregistering): Port device team_slave_1 removed [ 284.912765][ T9597] team0 (unregistering): Port device team_slave_0 removed [ 285.351566][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.371524][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.389477][T13294] bridge_slave_0: entered allmulticast mode [ 285.420718][T13294] bridge_slave_0: entered promiscuous mode [ 285.458087][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.483957][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.501470][T13294] bridge_slave_1: entered allmulticast mode [ 285.509476][T13294] bridge_slave_1: entered promiscuous mode [ 285.509476][T13366] netlink: 'syz.4.2200': attribute type 64 has an invalid length. [ 285.509499][T13366] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2200'. [ 285.643252][T13294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.687474][T13294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.714621][ T5833] Bluetooth: hci3: command tx timeout [ 285.894688][T13294] team0: Port device team_slave_0 added [ 285.920731][T13294] team0: Port device team_slave_1 added [ 286.012600][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2206'. [ 286.070002][T13294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.091429][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.135322][T13294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.168496][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.181449][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.207964][ T5833] Bluetooth: hci0: command tx timeout [ 286.213670][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.309213][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2208'. [ 286.326571][T13396] FAULT_INJECTION: forcing a failure. [ 286.326571][T13396] name failslab, interval 1, probability 0, space 0, times 0 [ 286.339472][T13396] CPU: 0 UID: 0 PID: 13396 Comm: syz.2.2209 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 286.339494][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 286.339504][T13396] Call Trace: [ 286.339511][T13396] [ 286.339518][T13396] dump_stack_lvl+0x189/0x250 [ 286.339547][T13396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.339568][T13396] ? __pfx__printk+0x10/0x10 [ 286.339590][T13396] ? __pfx___might_resched+0x10/0x10 [ 286.339605][T13396] ? fs_reclaim_acquire+0x7d/0x100 [ 286.339632][T13396] should_fail_ex+0x414/0x560 [ 286.339653][T13396] should_failslab+0xa8/0x100 [ 286.339675][T13396] __kmalloc_noprof+0xcb/0x4f0 [ 286.339693][T13396] ? copy_splice_read+0x143/0x9b0 [ 286.339717][T13396] copy_splice_read+0x143/0x9b0 [ 286.339747][T13396] ? __pfx_copy_splice_read+0x10/0x10 [ 286.339762][T13396] ? look_up_lock_class+0x74/0x170 [ 286.339783][T13396] ? register_lock_class+0x51/0x320 [ 286.339807][T13396] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 286.339832][T13396] ? alloc_pipe_info+0x374/0x4d0 [ 286.339850][T13396] ? __pfx_copy_splice_read+0x10/0x10 [ 286.339867][T13396] splice_direct_to_actor+0x4a6/0xcc0 [ 286.339904][T13396] ? __pfx_direct_splice_actor+0x10/0x10 [ 286.339922][T13396] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 286.339941][T13396] ? __pfx_aa_file_perm+0x10/0x10 [ 286.339967][T13396] do_splice_direct+0x181/0x270 [ 286.339988][T13396] ? __pfx_do_splice_direct+0x10/0x10 [ 286.340007][T13396] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 286.340028][T13396] ? bpf_lsm_file_permission+0x9/0x20 [ 286.340045][T13396] ? security_file_permission+0x75/0x290 [ 286.340068][T13396] ? rw_verify_area+0x258/0x650 [ 286.340086][T13396] do_sendfile+0x4da/0x7d0 [ 286.340105][T13396] ? __pfx_vfs_write+0x10/0x10 [ 286.340125][T13396] ? __pfx_do_sendfile+0x10/0x10 [ 286.340144][T13396] ? __fget_files+0x3a0/0x420 [ 286.340170][T13396] __se_sys_sendfile64+0x13e/0x190 [ 286.340188][T13396] ? rcu_is_watching+0x15/0xb0 [ 286.340210][T13396] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 286.340234][T13396] ? do_syscall_64+0xba/0x210 [ 286.340256][T13396] do_syscall_64+0xf6/0x210 [ 286.340276][T13396] ? clear_bhb_loop+0x45/0xa0 [ 286.340303][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.340318][T13396] RIP: 0033:0x7fdfda58e969 [ 286.340334][T13396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.340349][T13396] RSP: 002b:00007fdfdb313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 286.340367][T13396] RAX: ffffffffffffffda RBX: 00007fdfda7b5fa0 RCX: 00007fdfda58e969 [ 286.340379][T13396] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 286.340388][T13396] RBP: 00007fdfdb313090 R08: 0000000000000000 R09: 0000000000000000 [ 286.340398][T13396] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 286.340408][T13396] R13: 0000000000000000 R14: 00007fdfda7b5fa0 R15: 00007ffc2d497c88 [ 286.340436][T13396] [ 286.763992][ T9597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.861633][T13398] veth1_macvtap: left promiscuous mode [ 286.867202][T13398] macsec0: entered promiscuous mode [ 286.891124][T13401] veth1_macvtap: entered promiscuous mode [ 286.907236][T13401] macsec0: left promiscuous mode [ 286.941059][T13294] hsr_slave_0: entered promiscuous mode [ 286.948765][T13294] hsr_slave_1: entered promiscuous mode [ 287.018199][ T9597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.204079][ T9597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.250815][T13419] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2217'. [ 287.279626][T13421] veth1_macvtap: left promiscuous mode [ 287.285440][T13421] macsec0: entered allmulticast mode [ 287.306344][T13422] veth1_macvtap: entered promiscuous mode [ 287.313335][T13422] veth1_macvtap: entered allmulticast mode [ 287.319234][T13422] macsec0: left allmulticast mode [ 287.327030][T13422] veth1_macvtap: left allmulticast mode [ 287.433616][ T9597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.488994][T13434] FAULT_INJECTION: forcing a failure. [ 287.488994][T13434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.494310][T13330] chnl_net:caif_netlink_parms(): no params data found [ 287.547615][T13434] CPU: 0 UID: 0 PID: 13434 Comm: syz.2.2220 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 287.547641][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 287.547651][T13434] Call Trace: [ 287.547657][T13434] [ 287.547665][T13434] dump_stack_lvl+0x189/0x250 [ 287.547695][T13434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.547717][T13434] ? __pfx__printk+0x10/0x10 [ 287.547735][T13434] ? fs_reclaim_acquire+0x7d/0x100 [ 287.547765][T13434] should_fail_ex+0x414/0x560 [ 287.547787][T13434] prepare_alloc_pages+0x213/0x610 [ 287.547815][T13434] __alloc_frozen_pages_noprof+0x123/0x370 [ 287.547842][T13434] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.547881][T13434] alloc_pages_bulk_noprof+0x560/0x710 [ 287.547904][T13434] ? rcu_is_watching+0x15/0xb0 [ 287.547927][T13434] ? trace_kmalloc+0x1f/0xd0 [ 287.547941][T13434] ? __kmalloc_noprof+0x29b/0x4f0 [ 287.547957][T13434] ? copy_splice_read+0x143/0x9b0 [ 287.547979][T13434] copy_splice_read+0x173/0x9b0 [ 287.548005][T13434] ? __pfx_copy_splice_read+0x10/0x10 [ 287.548021][T13434] ? look_up_lock_class+0x74/0x170 [ 287.548042][T13434] ? register_lock_class+0x51/0x320 [ 287.548066][T13434] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 287.548090][T13434] ? alloc_pipe_info+0x374/0x4d0 [ 287.548109][T13434] ? __pfx_copy_splice_read+0x10/0x10 [ 287.548126][T13434] splice_direct_to_actor+0x4a6/0xcc0 [ 287.548163][T13434] ? __pfx_direct_splice_actor+0x10/0x10 [ 287.548182][T13434] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 287.548201][T13434] ? __pfx_aa_file_perm+0x10/0x10 [ 287.548224][T13434] do_splice_direct+0x181/0x270 [ 287.548245][T13434] ? __pfx_do_splice_direct+0x10/0x10 [ 287.548260][T13434] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 287.548286][T13434] ? bpf_lsm_file_permission+0x9/0x20 [ 287.548304][T13434] ? security_file_permission+0x75/0x290 [ 287.548325][T13434] ? rw_verify_area+0x258/0x650 [ 287.548345][T13434] do_sendfile+0x4da/0x7d0 [ 287.548365][T13434] ? __pfx_vfs_write+0x10/0x10 [ 287.548387][T13434] ? __pfx_do_sendfile+0x10/0x10 [ 287.548407][T13434] ? __fget_files+0x3a0/0x420 [ 287.548437][T13434] __se_sys_sendfile64+0x13e/0x190 [ 287.548459][T13434] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 287.548482][T13434] ? do_syscall_64+0xba/0x210 [ 287.548503][T13434] do_syscall_64+0xf6/0x210 [ 287.548521][T13434] ? clear_bhb_loop+0x45/0xa0 [ 287.548540][T13434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.548556][T13434] RIP: 0033:0x7fdfda58e969 [ 287.548571][T13434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.548585][T13434] RSP: 002b:00007fdfdb313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 287.548603][T13434] RAX: ffffffffffffffda RBX: 00007fdfda7b5fa0 RCX: 00007fdfda58e969 [ 287.548615][T13434] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 287.548625][T13434] RBP: 00007fdfdb313090 R08: 0000000000000000 R09: 0000000000000000 [ 287.548635][T13434] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 287.548645][T13434] R13: 0000000000000000 R14: 00007fdfda7b5fa0 R15: 00007ffc2d497c88 [ 287.548672][T13434] [ 287.870767][ T5833] Bluetooth: hci3: command tx timeout [ 288.007503][T13445] netlink: 'syz.3.2222': attribute type 8 has an invalid length. [ 288.271545][ T5833] Bluetooth: hci0: command tx timeout [ 288.400549][T13330] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.408188][T13330] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.428401][T13330] bridge_slave_0: entered allmulticast mode [ 288.465117][T13330] bridge_slave_0: entered promiscuous mode [ 288.525460][T13330] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.535434][T13330] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.548793][T13330] bridge_slave_1: entered allmulticast mode [ 288.557296][T13330] bridge_slave_1: entered promiscuous mode [ 288.653677][T13471] FAULT_INJECTION: forcing a failure. [ 288.653677][T13471] name failslab, interval 1, probability 0, space 0, times 0 [ 288.684455][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2234'. [ 288.693017][T13330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.710322][T13471] CPU: 1 UID: 0 PID: 13471 Comm: syz.4.2235 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 288.710346][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 288.710355][T13471] Call Trace: [ 288.710362][T13471] [ 288.710370][T13471] dump_stack_lvl+0x189/0x250 [ 288.710398][T13471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.710416][T13471] ? __pfx__printk+0x10/0x10 [ 288.710435][T13471] ? __pfx___might_resched+0x10/0x10 [ 288.710454][T13471] should_fail_ex+0x414/0x560 [ 288.710473][T13471] ? seq_read_iter+0x1fd/0xe10 [ 288.710486][T13471] should_failslab+0xa8/0x100 [ 288.710506][T13471] __kvmalloc_node_noprof+0x168/0x5e0 [ 288.710525][T13471] ? seq_read_iter+0x1fd/0xe10 [ 288.710544][T13471] seq_read_iter+0x1fd/0xe10 [ 288.710559][T13471] ? set_page_refcounted+0x76/0x160 [ 288.710585][T13471] ? kernfs_fop_read_iter+0x13f/0x640 [ 288.710598][T13471] ? __asan_memset+0x22/0x50 [ 288.710617][T13471] copy_splice_read+0x54f/0x9b0 [ 288.710648][T13471] ? __pfx_copy_splice_read+0x10/0x10 [ 288.710663][T13471] ? look_up_lock_class+0x74/0x170 [ 288.710683][T13471] ? register_lock_class+0x51/0x320 [ 288.710715][T13471] ? alloc_pipe_info+0x374/0x4d0 [ 288.710734][T13471] ? __pfx_copy_splice_read+0x10/0x10 [ 288.710750][T13471] splice_direct_to_actor+0x4a6/0xcc0 [ 288.710784][T13471] ? __pfx_direct_splice_actor+0x10/0x10 [ 288.710800][T13471] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 288.710836][T13471] ? __pfx_aa_file_perm+0x10/0x10 [ 288.710859][T13471] do_splice_direct+0x181/0x270 [ 288.710876][T13471] ? __pfx_do_splice_direct+0x10/0x10 [ 288.710892][T13471] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 288.710912][T13471] ? bpf_lsm_file_permission+0x9/0x20 [ 288.710929][T13471] ? security_file_permission+0x75/0x290 [ 288.710949][T13471] ? rw_verify_area+0x258/0x650 [ 288.710965][T13471] do_sendfile+0x4da/0x7d0 [ 288.710984][T13471] ? __pfx_vfs_write+0x10/0x10 [ 288.711003][T13471] ? __pfx_do_sendfile+0x10/0x10 [ 288.711021][T13471] ? __fget_files+0x3a0/0x420 [ 288.711051][T13471] __se_sys_sendfile64+0x13e/0x190 [ 288.711076][T13471] ? rcu_is_watching+0x15/0xb0 [ 288.711098][T13471] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 288.711118][T13471] ? do_syscall_64+0xba/0x210 [ 288.711140][T13471] do_syscall_64+0xf6/0x210 [ 288.711156][T13471] ? clear_bhb_loop+0x45/0xa0 [ 288.711175][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.711193][T13471] RIP: 0033:0x7f5fc638e969 [ 288.711206][T13471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.711220][T13471] RSP: 002b:00007f5fc72c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 288.711237][T13471] RAX: ffffffffffffffda RBX: 00007f5fc65b5fa0 RCX: 00007f5fc638e969 [ 288.711249][T13471] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 288.711258][T13471] RBP: 00007f5fc72c5090 R08: 0000000000000000 R09: 0000000000000000 [ 288.711269][T13471] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 288.711277][T13471] R13: 0000000000000000 R14: 00007f5fc65b5fa0 R15: 00007ffd3ac371f8 [ 288.711300][T13471] [ 288.754828][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2236'. [ 288.772512][T13330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.022575][T13481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2237'. [ 289.070391][ T9597] bridge_slave_1: left allmulticast mode [ 289.128165][ T9597] bridge_slave_1: left promiscuous mode [ 289.143289][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2237'. [ 289.153958][ T9597] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.175286][ T9597] bridge_slave_0: left allmulticast mode [ 289.195760][ T9597] bridge_slave_0: left promiscuous mode [ 289.201748][ T9597] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.583172][ T9597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.595413][ T9597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.606043][ T9597] bond0 (unregistering): Released all slaves [ 289.644257][T13330] team0: Port device team_slave_0 added [ 289.704491][T13330] team0: Port device team_slave_1 added [ 289.913030][T13330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.921083][T13330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.949706][T13330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.960610][ T5833] Bluetooth: hci3: command tx timeout [ 290.013537][T13508] FAULT_INJECTION: forcing a failure. [ 290.013537][T13508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.030678][T13508] CPU: 1 UID: 0 PID: 13508 Comm: syz.2.2247 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 290.030717][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 290.030726][T13508] Call Trace: [ 290.030733][T13508] [ 290.030741][T13508] dump_stack_lvl+0x189/0x250 [ 290.030769][T13508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.030787][T13508] ? __pfx__printk+0x10/0x10 [ 290.030814][T13508] should_fail_ex+0x414/0x560 [ 290.030834][T13508] _copy_to_user+0x31/0xb0 [ 290.030854][T13508] simple_read_from_buffer+0xe1/0x170 [ 290.030876][T13508] proc_fail_nth_read+0x1df/0x250 [ 290.030898][T13508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.030919][T13508] ? rw_verify_area+0x258/0x650 [ 290.030934][T13508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.030953][T13508] vfs_read+0x1fd/0x980 [ 290.030974][T13508] ? __pfx___mutex_lock+0x10/0x10 [ 290.030992][T13508] ? __pfx_vfs_read+0x10/0x10 [ 290.031009][T13508] ? __fget_files+0x2a/0x420 [ 290.031037][T13508] ? __fget_files+0x3a0/0x420 [ 290.031053][T13508] ? __fget_files+0x2a/0x420 [ 290.031077][T13508] ksys_read+0x145/0x250 [ 290.031091][T13508] ? rcu_is_watching+0x15/0xb0 [ 290.031113][T13508] ? __pfx_ksys_read+0x10/0x10 [ 290.031132][T13508] ? do_syscall_64+0xba/0x210 [ 290.031153][T13508] do_syscall_64+0xf6/0x210 [ 290.031170][T13508] ? clear_bhb_loop+0x45/0xa0 [ 290.031193][T13508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.031207][T13508] RIP: 0033:0x7fdfda58d37c [ 290.031220][T13508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.031233][T13508] RSP: 002b:00007fdfdb313030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.031250][T13508] RAX: ffffffffffffffda RBX: 00007fdfda7b5fa0 RCX: 00007fdfda58d37c [ 290.031260][T13508] RDX: 000000000000000f RSI: 00007fdfdb3130a0 RDI: 0000000000000006 [ 290.031269][T13508] RBP: 00007fdfdb313090 R08: 0000000000000000 R09: 0000000000000000 [ 290.031278][T13508] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 290.031287][T13508] R13: 0000000000000000 R14: 00007fdfda7b5fa0 R15: 00007ffc2d497c88 [ 290.031313][T13508] [ 290.353871][ T5833] Bluetooth: hci0: command tx timeout [ 290.382891][T13330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.389963][T13330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.435985][T13330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.761374][T13528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2254'. [ 290.783480][T13330] hsr_slave_0: entered promiscuous mode [ 290.790204][T13330] hsr_slave_1: entered promiscuous mode [ 290.825564][T13330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.851376][T13330] Cannot create hsr debugfs directory [ 291.047925][T13294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.152499][ T9597] hsr_slave_0: left promiscuous mode [ 291.162477][ T9597] hsr_slave_1: left promiscuous mode [ 291.162480][T13542] netlink: 'syz.3.2258': attribute type 13 has an invalid length. [ 291.163113][ T9597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.189206][ T9597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.197194][ T9597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.205144][ T9597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.226813][ T9597] veth1_macvtap: left promiscuous mode [ 291.232782][ T9597] veth0_macvtap: left promiscuous mode [ 291.238393][ T9597] veth1_vlan: left promiscuous mode [ 291.244137][ T9597] veth0_vlan: left promiscuous mode [ 291.657395][ T9597] team0 (unregistering): Port device team_slave_1 removed [ 291.699028][ T9597] team0 (unregistering): Port device team_slave_0 removed [ 292.037235][ T5833] Bluetooth: hci3: command tx timeout [ 292.176533][T13294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.195027][T13542] macvtap0: entered allmulticast mode [ 292.210405][T13542] macvtap0: refused to change device tx_queue_len [ 292.241761][T13294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.275315][T13294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.419302][T13558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.693178][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'. [ 292.765430][T13577] IPv6: Can't replace route, no match found [ 292.916685][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.959538][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.989680][ T9597] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.996908][ T9597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.043312][T13583] netlink: 'syz.2.2270': attribute type 10 has an invalid length. [ 293.048293][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.058339][ T9597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.117542][T13583] .: (slave ÿ): Enslaving as an active interface with an up link [ 293.292063][T13330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.313613][T13330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.336065][T13330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.388865][T13330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.444677][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 293.502975][T13595] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 293.520628][T13595] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 293.654570][T13330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.724801][T13330] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.777854][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.785089][ T9600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.801319][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.808557][ T9600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.828122][T13610] tipc: Enabling of bearer rejected, media not registered [ 293.877955][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.039364][T13294] veth0_vlan: entered promiscuous mode [ 294.080547][T13294] veth1_vlan: entered promiscuous mode [ 294.206480][T13294] veth0_macvtap: entered promiscuous mode [ 294.230855][T13294] veth1_macvtap: entered promiscuous mode [ 294.303209][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.321941][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.353824][T13294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.390830][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.424645][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.453949][T13294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.529308][T13294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.548198][T13642] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2288'. [ 294.551797][T13294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.576948][T13294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.586871][T13294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.684355][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2289'. [ 294.698239][T13330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.876275][ T9606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.887897][T13330] veth0_vlan: entered promiscuous mode [ 294.914941][ T9606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.964191][T13657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2292'. [ 295.016604][T13330] veth1_vlan: entered promiscuous mode [ 295.069942][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.090942][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.147289][T13330] veth0_macvtap: entered promiscuous mode [ 295.209449][T13330] veth1_macvtap: entered promiscuous mode [ 295.268392][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.315277][T13674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2298'. [ 295.318467][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.338944][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.350271][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.377348][T13330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.444921][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.479109][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.479948][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'. [ 295.492662][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.542380][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.560511][T13330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.595332][T13330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.608473][T13330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.644330][T13330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.662980][T13330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.688198][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'. [ 295.724157][T13680] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 295.914522][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.010622][ T9600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.028243][ T9600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.092456][ T9606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.104409][ T9606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.232087][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.492983][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.590088][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.868484][T13694] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2306'. [ 296.883306][ T13] bridge_slave_1: left allmulticast mode [ 296.889025][ T13] bridge_slave_1: left promiscuous mode [ 296.931420][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.992243][ T13] bridge_slave_0: left allmulticast mode [ 296.997944][ T13] bridge_slave_0: left promiscuous mode [ 297.023416][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.338739][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.350179][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.359307][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.367671][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.378666][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.696196][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.707066][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.717806][ T13] bond0 (unregistering): Released all slaves [ 298.319216][T13719] sctp: [Deprecated]: syz.4.2310 (pid 13719) Use of int in max_burst socket option. [ 298.319216][T13719] Use struct sctp_assoc_value instead [ 298.388004][T13719] sctp: [Deprecated]: syz.4.2310 (pid 13719) Use of int in max_burst socket option. [ 298.388004][T13719] Use struct sctp_assoc_value instead [ 298.404895][T13719] sctp: [Deprecated]: syz.4.2310 (pid 13719) Use of int in max_burst socket option. [ 298.404895][T13719] Use struct sctp_assoc_value instead [ 298.519422][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 298.615248][T13728] bridge_slave_0: mtu less than device minimum [ 298.694876][ T13] hsr_slave_0: left promiscuous mode [ 298.716113][ T13] hsr_slave_1: left promiscuous mode [ 298.732241][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.740071][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.763628][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.781700][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.811072][ T13] veth1_macvtap: left promiscuous mode [ 298.832160][ T13] veth0_macvtap: left promiscuous mode [ 298.841956][ T13] veth1_vlan: left promiscuous mode [ 298.858080][ T13] veth0_vlan: left promiscuous mode [ 298.890478][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.903563][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.914030][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.925427][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.933514][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.329713][ T13] team0 (unregistering): Port device team_slave_1 removed [ 299.368856][ T13] team0 (unregistering): Port device team_slave_0 removed [ 299.487549][ T5833] Bluetooth: hci0: command tx timeout [ 299.764490][T13705] chnl_net:caif_netlink_parms(): no params data found [ 299.931015][T13747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2316'. [ 300.102984][T13705] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.113917][T13705] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.142647][T13705] bridge_slave_0: entered allmulticast mode [ 300.161545][T13705] bridge_slave_0: entered promiscuous mode [ 300.207033][T13705] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.236250][T13705] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.244337][T13705] bridge_slave_1: entered allmulticast mode [ 300.254123][T13705] bridge_slave_1: entered promiscuous mode [ 300.290013][T13760] netlink: 'syz.3.2321': attribute type 4 has an invalid length. [ 300.426197][T13771] netlink: 'syz.4.2323': attribute type 29 has an invalid length. [ 300.450837][T13705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.473617][T13772] netlink: 'syz.4.2323': attribute type 29 has an invalid length. [ 300.493113][T13773] netlink: 'syz.4.2323': attribute type 29 has an invalid length. [ 300.538260][T13705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.670104][T13705] team0: Port device team_slave_0 added [ 300.689261][T13705] team0: Port device team_slave_1 added [ 300.821414][T13787] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2327'. [ 300.861753][T13705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.868752][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.946818][T13705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.999648][ T5833] Bluetooth: hci3: command tx timeout [ 301.190511][T13787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.211497][T13787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.229500][T13787] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 301.246330][T13787] bond0 (unregistering): Released all slaves [ 301.296040][T13705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.313000][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.342608][T13705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.353869][T13797] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 301.510205][T13705] hsr_slave_0: entered promiscuous mode [ 301.517458][T13705] hsr_slave_1: entered promiscuous mode [ 301.561394][ T5833] Bluetooth: hci0: command tx timeout [ 301.596647][T13809] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2330'. [ 301.607845][ T9597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.711878][T13817] netlink: 'syz.3.2333': attribute type 11 has an invalid length. [ 301.719761][T13817] netlink: 'syz.3.2333': attribute type 11 has an invalid length. [ 301.749438][T13817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2333'. [ 301.807638][ T9597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.930674][T13741] chnl_net:caif_netlink_parms(): no params data found [ 301.999723][ T9597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.210466][ T9597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.613214][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.620953][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.628786][T13741] bridge_slave_0: entered allmulticast mode [ 302.637037][T13741] bridge_slave_0: entered promiscuous mode [ 302.708695][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.723022][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.735764][T13741] bridge_slave_1: entered allmulticast mode [ 302.750315][T13741] bridge_slave_1: entered promiscuous mode [ 303.027421][T13859] veth1_macvtap: mtu less than device minimum [ 303.076080][ T5833] Bluetooth: hci3: command tx timeout [ 303.085592][T13741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.196111][T13741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.278307][ T9597] bridge_slave_1: left allmulticast mode [ 303.291430][ T9597] bridge_slave_1: left promiscuous mode [ 303.297232][ T9597] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.315112][ T9597] bridge_slave_0: left allmulticast mode [ 303.327713][ T9597] bridge_slave_0: left promiscuous mode [ 303.334497][ T9597] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.635193][ T5833] Bluetooth: hci0: command tx timeout [ 303.681022][T13879] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2350'. [ 303.810540][ T9597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.821433][ T9597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.833449][ T9597] bond0 (unregistering): Released all slaves [ 303.888191][T13741] team0: Port device team_slave_0 added [ 303.939140][T13741] team0: Port device team_slave_1 added [ 304.090529][T13741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.107868][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.147909][T13741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.219831][T13741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.227746][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.260135][T13893] Unsupported ieee802154 address type: 0 [ 304.266003][T13741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.537606][T13741] hsr_slave_0: entered promiscuous mode [ 304.552485][T13741] hsr_slave_1: entered promiscuous mode [ 304.558991][T13741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.591263][T13741] Cannot create hsr debugfs directory [ 304.599518][T13705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.758159][T13705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.868877][T13705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.926010][T13705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.154491][ T5833] Bluetooth: hci3: command tx timeout [ 305.305826][T13930] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 305.323451][ T9597] hsr_slave_0: left promiscuous mode [ 305.332289][ T9597] hsr_slave_1: left promiscuous mode [ 305.338111][ T9597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.355335][ T9597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.364602][ T9597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.372994][ T9597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.400927][ T9597] veth1_macvtap: left promiscuous mode [ 305.408851][ T9597] veth0_macvtap: left promiscuous mode [ 305.417208][ T9597] veth1_vlan: left promiscuous mode [ 305.423301][ T9597] veth0_vlan: left promiscuous mode [ 305.439105][T13936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2367'. [ 305.531386][T13938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2367'. [ 305.540383][T13938] nbd: nbd64 already in use [ 305.667871][ T9114] udevd[9114]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 305.713943][ T5833] Bluetooth: hci0: command tx timeout [ 305.966758][ T9597] team0 (unregistering): Port device team_slave_1 removed [ 306.010077][ T9597] team0 (unregistering): Port device team_slave_0 removed [ 306.120804][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 306.935249][T13705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.978324][T13705] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.009761][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.017022][ T9600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.040969][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.048408][ T9600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.241526][ T5833] Bluetooth: hci3: command tx timeout [ 307.271730][T13741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.289655][T13741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.319763][T13741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.373171][T13741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.597551][T13741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.671312][T13741] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.714373][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.721596][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.751789][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.759065][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.844412][T13705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.988820][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2385'. [ 308.144581][T13705] veth0_vlan: entered promiscuous mode [ 308.198510][T13705] veth1_vlan: entered promiscuous mode [ 308.308750][T13705] veth0_macvtap: entered promiscuous mode [ 308.345470][T13705] veth1_macvtap: entered promiscuous mode [ 308.392767][T14009] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2387'. [ 308.416044][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.437556][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.472749][T13705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.496823][T13741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.527329][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.545957][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.563828][T13705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.590178][T13705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.610694][T13705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.627263][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'. [ 308.638841][T13705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.648082][T13705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.006399][T13741] veth0_vlan: entered promiscuous mode [ 309.079038][T13741] veth1_vlan: entered promiscuous mode [ 309.088208][ T9598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.113240][ T9598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.165349][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.181045][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.199053][T13741] veth0_macvtap: entered promiscuous mode [ 309.241262][T13741] veth1_macvtap: entered promiscuous mode [ 309.306181][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.326752][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'. [ 309.328499][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.346644][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.357871][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.373833][T13741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.385280][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.396249][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.409127][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.420511][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.455397][T13741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.527713][T13741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.541339][T13741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.559041][T13741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.565550][T14041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2398'. [ 309.568274][T13741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.779862][ T9598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.793766][ T9598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.857153][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.946284][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.969438][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.077332][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.140584][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.338057][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.489550][ T67] bridge_slave_1: left allmulticast mode [ 310.497147][ T67] bridge_slave_1: left promiscuous mode [ 310.503742][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.514703][ T67] bridge_slave_0: left allmulticast mode [ 310.520411][ T67] bridge_slave_0: left promiscuous mode [ 310.526614][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.833867][T14059] netlink: 'syz.4.2404': attribute type 1 has an invalid length. [ 310.857912][T14059] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2404'. [ 310.883374][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 310.899576][T14059] netlink: 'syz.4.2404': attribute type 1 has an invalid length. [ 310.931462][T14059] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2404'. [ 311.194280][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.210426][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.220444][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.228677][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.229374][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.238730][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.253445][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.254848][ T67] bond0 (unregistering): Released all slaves [ 311.830960][ T67] hsr_slave_0: left promiscuous mode [ 311.837039][ T67] hsr_slave_1: left promiscuous mode [ 311.852671][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.860120][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.870382][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.881849][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.903228][ T67] veth1_macvtap: left promiscuous mode [ 311.908774][ T67] veth0_macvtap: left promiscuous mode [ 311.914608][ T67] veth1_vlan: left promiscuous mode [ 311.920268][ T67] veth0_vlan: left promiscuous mode [ 312.070807][T14070] xt_connbytes: Forcing CT accounting to be enabled [ 312.078247][T14070] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 312.123202][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2405'. [ 312.211913][T14080] openvswitch: netlink: Duplicate or invalid key (type 0). [ 312.214657][T14081] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 312.219181][T14080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.412261][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 312.456465][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 312.581710][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.601798][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.617516][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.637632][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.645690][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.729722][ T67] team0 (unregistering): Port device team_slave_1 removed [ 312.776262][ T67] team0 (unregistering): Port device team_slave_0 removed [ 313.311521][ T55] Bluetooth: hci0: command tx timeout [ 313.364427][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'. [ 313.382489][T14098] netlink: 'syz.2.2413': attribute type 11 has an invalid length. [ 313.423089][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2412'. [ 313.430900][T14098] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2413'. [ 313.466780][T14063] chnl_net:caif_netlink_parms(): no params data found [ 313.624550][T14107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.856653][T14063] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.868478][T14063] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.888478][T14063] bridge_slave_0: entered allmulticast mode [ 313.897511][T14063] bridge_slave_0: entered promiscuous mode [ 313.968783][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.991960][T14063] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.004448][T14063] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.018504][T14063] bridge_slave_1: entered allmulticast mode [ 314.041027][T14063] bridge_slave_1: entered promiscuous mode [ 314.127877][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.158802][T14129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2419'. [ 314.171050][T14063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.200790][T14063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.224996][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.329618][T14063] team0: Port device team_slave_0 added [ 314.345188][T14105] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 314.390950][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.423106][T14063] team0: Port device team_slave_1 added [ 314.428448][T14138] IPVS: length: 157 != 24 [ 314.568657][T14063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.583453][T14063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.611080][T14063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.658173][T14150] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 314.686365][T14063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.716475][T14063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.763829][ T5833] Bluetooth: hci3: command tx timeout [ 314.763829][T14063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.976861][T14088] chnl_net:caif_netlink_parms(): no params data found [ 315.067473][T14063] hsr_slave_0: entered promiscuous mode [ 315.093047][T14063] hsr_slave_1: entered promiscuous mode [ 315.290913][ T67] bridge_slave_1: left allmulticast mode [ 315.297426][ T67] bridge_slave_1: left promiscuous mode [ 315.304321][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.322510][ T67] bridge_slave_0: left allmulticast mode [ 315.328271][ T67] bridge_slave_0: left promiscuous mode [ 315.334495][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.392261][ T5833] Bluetooth: hci0: command tx timeout [ 315.551514][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 315.742126][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.753346][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.763959][ T67] bond0 (unregistering): Released all slaves [ 316.076521][T14088] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.100665][T14088] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.108382][T14088] bridge_slave_0: entered allmulticast mode [ 316.138669][T14088] bridge_slave_0: entered promiscuous mode [ 316.159550][T14217] __nla_validate_parse: 4 callbacks suppressed [ 316.159566][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 316.181590][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2441'. [ 316.193684][T14217] netlink: 'syz.2.2441': attribute type 20 has an invalid length. [ 316.224525][T14088] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.231859][T14088] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.239203][T14088] bridge_slave_1: entered allmulticast mode [ 316.247746][T14088] bridge_slave_1: entered promiscuous mode [ 316.368355][T14088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.477592][T14088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.748987][T14243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.803780][T14247] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2448'. [ 316.837297][ T5833] Bluetooth: hci3: command tx timeout [ 316.855379][T14088] team0: Port device team_slave_0 added [ 316.888096][T14088] team0: Port device team_slave_1 added [ 316.925760][T14247] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2448'. [ 316.986232][ T67] hsr_slave_0: left promiscuous mode [ 316.996958][ T67] hsr_slave_1: left promiscuous mode [ 317.012088][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.019545][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.046267][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.055551][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.085784][ T67] veth1_macvtap: left promiscuous mode [ 317.091775][ T67] veth0_macvtap: left promiscuous mode [ 317.100603][ T67] veth1_vlan: left promiscuous mode [ 317.106221][ T67] veth0_vlan: left promiscuous mode [ 317.483832][ T55] Bluetooth: hci0: command tx timeout [ 317.549321][ T67] team0 (unregistering): Port device team_slave_1 removed [ 317.597662][ T67] team0 (unregistering): Port device team_slave_0 removed [ 318.022802][T14251] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 318.122642][T14088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.141425][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.177436][T14088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.257916][T14088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.268936][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.303403][T14088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.430347][T14280] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2456'. [ 318.431245][T14273] netlink: 'syz.4.2456': attribute type 29 has an invalid length. [ 318.500366][T14088] hsr_slave_0: entered promiscuous mode [ 318.519156][T14088] hsr_slave_1: entered promiscuous mode [ 318.526823][T14088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.535177][T14088] Cannot create hsr debugfs directory [ 318.566925][T14278] netlink: 'syz.4.2456': attribute type 29 has an invalid length. [ 318.911789][ T55] Bluetooth: hci3: command tx timeout [ 319.031666][T14063] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.061481][T14063] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.133049][T14063] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.186367][T14063] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.503378][T14063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.551408][ T55] Bluetooth: hci0: command tx timeout [ 319.733459][T14063] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.751977][T14088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.810780][T14088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.836403][T14088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.865028][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.872245][ T9600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.897201][T14337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2475'. [ 319.908326][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.915524][ T9600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.929602][T14088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.134199][T14342] veth1_to_team: entered promiscuous mode [ 320.160428][T14342] veth0: entered promiscuous mode [ 320.207700][T14088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.218265][T14342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2477'. [ 320.271590][T14088] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.304293][T14341] veth0: left promiscuous mode [ 320.309317][T14341] veth1_to_team: left promiscuous mode [ 320.340988][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.348203][ T9598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.401968][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.409145][ T9600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.479530][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2478'. [ 320.500490][T14351] netlink: 'syz.4.2478': attribute type 10 has an invalid length. [ 320.515358][T14063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.529285][T14351] vlan0: entered allmulticast mode [ 320.541524][T14351] veth0_vlan: entered allmulticast mode [ 320.588150][T14351] team0: Port device vlan0 added [ 320.611146][T14351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2478'. [ 320.631501][T14351] netlink: 'syz.4.2478': attribute type 1 has an invalid length. [ 320.751061][T14063] veth0_vlan: entered promiscuous mode [ 320.788984][T14063] veth1_vlan: entered promiscuous mode [ 320.872122][T14063] veth0_macvtap: entered promiscuous mode [ 320.905589][T14063] veth1_macvtap: entered promiscuous mode [ 320.973758][T14063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.995752][ T55] Bluetooth: hci3: command 0x0419 tx timeout [ 321.011374][T14063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.042721][T14063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.075191][T14063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.106946][T14063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.128537][T14063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.186383][T14063] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.211479][T14063] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.226225][T14063] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.236218][T14063] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.310776][T14088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.349455][T14369] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2482'. [ 321.360082][T14369] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2482'. [ 321.383255][T14369] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 321.580679][ T9600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.610595][ T9600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.689943][T14088] veth0_vlan: entered promiscuous mode [ 321.708598][T14378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.747724][ T9586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.752104][T14088] veth1_vlan: entered promiscuous mode [ 321.770200][ T9586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.853502][T14088] veth0_macvtap: entered promiscuous mode [ 321.900497][T14088] veth1_macvtap: entered promiscuous mode [ 321.990276][T14380] tipc: Enabling of bearer rejected, failed to enable media [ 322.010451][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.026461][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.038723][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.049697][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.062224][T14088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.076742][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.087447][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.098429][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.109259][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.120945][T14088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.138897][T14382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2487'. [ 322.151527][T14088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.165026][T14088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.174216][T14088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.183459][T14088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.329655][ T9586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.361334][ T9586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.442396][ T9598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.450254][ T9598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.535317][ T9586] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.565790][T14396] tipc: Enabled bearer , priority 0 [ 322.786279][T14392] syzkaller0: entered promiscuous mode [ 322.810785][T14392] syzkaller0: entered allmulticast mode [ 322.817764][T14392] tipc: Resetting bearer [ 322.845535][ T9586] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.879279][T14391] tipc: Resetting bearer [ 323.734167][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.750596][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.763863][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.773462][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.781528][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.400187][T14412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2494'. [ 324.609965][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.633467][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.647973][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.656271][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.677431][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.687001][T14391] tipc: Disabling bearer [ 324.730363][ T9586] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.858566][ T9586] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.082008][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2499'. [ 325.119574][T14431] vlan4: entered promiscuous mode [ 325.141922][T14431] bridge0: entered promiscuous mode [ 325.322433][T14440] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 325.374483][T14439] bridge0: port 4(gretap0) entered blocking state [ 325.381037][T14439] bridge0: port 4(gretap0) entered disabled state [ 325.401575][T14439] gretap0: entered allmulticast mode [ 325.409922][T14439] gretap0: entered promiscuous mode [ 325.415924][T14439] bridge0: port 4(gretap0) entered blocking state [ 325.416883][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 325.422508][T14439] bridge0: port 4(gretap0) entered forwarding state [ 325.853221][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 325.876233][ T5833] Bluetooth: hci0: command tx timeout [ 325.900998][T14462] netlink: 'syz.2.2508': attribute type 11 has an invalid length. [ 325.905977][ T9586] bridge_slave_1: left allmulticast mode [ 325.915263][ T9586] bridge_slave_1: left promiscuous mode [ 325.921042][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.930289][T14462] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2508'. [ 325.937155][T14468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2509'. [ 325.962441][ T9586] bridge_slave_0: left allmulticast mode [ 325.968141][ T9586] bridge_slave_0: left promiscuous mode [ 325.991592][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.338419][ T9586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.349427][ T9586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.363351][ T9586] bond0 (unregistering): Released all slaves [ 326.405766][T14474] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2511'. [ 326.441957][T14472] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2511'. [ 326.634921][T14486] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2514'. [ 326.698498][T14416] chnl_net:caif_netlink_parms(): no params data found [ 326.753841][ T5833] Bluetooth: hci3: command tx timeout [ 326.794121][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2516'. [ 327.127208][T14514] netlink: 'syz.2.2521': attribute type 12 has an invalid length. [ 327.401300][ T9586] hsr_slave_0: left promiscuous mode [ 327.419483][ T9586] hsr_slave_1: left promiscuous mode [ 327.431497][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.438956][ T9586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.461952][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.469429][ T9586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.529150][ T9586] veth1_macvtap: left promiscuous mode [ 327.534982][ T9586] veth0_macvtap: left promiscuous mode [ 327.540878][ T9586] veth1_vlan: left promiscuous mode [ 327.548707][ T9586] veth0_vlan: left promiscuous mode [ 327.959608][ T5833] Bluetooth: hci0: command tx timeout [ 328.243679][ T9586] team0 (unregistering): Port device team_slave_1 removed [ 328.291423][ T9586] team0 (unregistering): Port device team_slave_0 removed [ 328.706228][T14416] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.721735][T14416] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.729006][T14416] bridge_slave_0: entered allmulticast mode [ 328.737787][T14416] bridge_slave_0: entered promiscuous mode [ 328.746533][T14416] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.755157][T14416] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.769579][T14416] bridge_slave_1: entered allmulticast mode [ 328.777754][T14416] bridge_slave_1: entered promiscuous mode [ 328.832107][ T5833] Bluetooth: hci3: command tx timeout [ 328.896505][T14416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.940897][T14416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.977576][T14403] chnl_net:caif_netlink_parms(): no params data found [ 329.083811][T14555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2532'. [ 329.150317][T14557] vlan0: entered promiscuous mode [ 329.156495][T14557] bridge0: entered promiscuous mode [ 329.178648][T14416] team0: Port device team_slave_0 added [ 329.193771][T14560] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2534'. [ 329.204426][T14560] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2534'. [ 329.227773][T14416] team0: Port device team_slave_1 added [ 329.299501][T14416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.309717][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.336687][T14416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.369756][T14416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.376913][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.404034][T14416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.459700][T14569] pim6reg: entered allmulticast mode [ 329.483906][T14403] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.491805][T14403] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.499133][T14403] bridge_slave_0: entered allmulticast mode [ 329.507675][T14403] bridge_slave_0: entered promiscuous mode [ 329.527056][T14416] hsr_slave_0: entered promiscuous mode [ 329.534508][T14416] hsr_slave_1: entered promiscuous mode [ 329.541358][T14403] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.548611][T14403] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.556424][T14403] bridge_slave_1: entered allmulticast mode [ 329.573262][T14403] bridge_slave_1: entered promiscuous mode [ 329.660263][T14403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.691152][T14572] netlink: 'syz.4.2537': attribute type 1 has an invalid length. [ 329.698032][T14403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.771078][ T9586] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.936103][ T9586] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.958382][T14403] team0: Port device team_slave_0 added [ 330.033605][T14403] team0: Port device team_slave_1 added [ 330.036734][ T5833] Bluetooth: hci0: command tx timeout [ 330.187526][ T9586] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.292000][T14403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.300020][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.335762][T14403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.354642][T14593] tunl0: entered promiscuous mode [ 330.376578][T14593] netlink: 'syz.2.2543': attribute type 3 has an invalid length. [ 330.397345][T14593] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2543'. [ 330.475921][ T9586] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.499534][T14403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.523371][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.569300][T14403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.735771][T14403] hsr_slave_0: entered promiscuous mode [ 330.749922][T14403] hsr_slave_1: entered promiscuous mode [ 330.776122][T14403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.792120][T14403] Cannot create hsr debugfs directory [ 330.849513][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'. [ 330.911430][ T5833] Bluetooth: hci3: command tx timeout [ 331.086144][ T9586] bridge_slave_1: left allmulticast mode [ 331.103967][ T9586] bridge_slave_1: left promiscuous mode [ 331.109742][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.129025][ T9586] bridge_slave_0: left allmulticast mode [ 331.147421][ T9586] bridge_slave_0: left promiscuous mode [ 331.154377][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.304919][T14642] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2558'. [ 331.576702][ T9586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.588621][ T9586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.604729][ T9586] bond0 (unregistering): Released all slaves [ 331.814970][T14655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2562'. [ 332.059793][T14662] netlink: 810 bytes leftover after parsing attributes in process `syz.2.2564'. [ 332.083358][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2565'. [ 332.122404][ T5833] Bluetooth: hci0: command tx timeout [ 332.212222][T14669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2567'. [ 332.229905][T14669] openvswitch: netlink: Flow key attr not present in new flow. [ 332.378180][ T9586] hsr_slave_0: left promiscuous mode [ 332.389071][ T9586] hsr_slave_1: left promiscuous mode [ 332.398112][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.406936][ T9586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.407002][T14681] netlink: 'syz.4.2570': attribute type 8 has an invalid length. [ 332.422886][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 332.440094][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.447882][ T9586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.464354][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 332.498571][ T9586] veth1_macvtap: left promiscuous mode [ 332.505398][ T9586] veth0_macvtap: left promiscuous mode [ 332.511034][ T9586] veth1_vlan: left promiscuous mode [ 332.518589][ T9586] veth0_vlan: left promiscuous mode [ 332.945155][ T9586] team0 (unregistering): Port device team_slave_1 removed [ 332.987503][ T9586] team0 (unregistering): Port device team_slave_0 removed [ 332.994757][ T5833] Bluetooth: hci3: command tx timeout [ 333.399823][T14681] bridge0: entered allmulticast mode [ 333.954769][T14716] netlink: 'syz.4.2578': attribute type 178 has an invalid length. [ 333.993086][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2579'. [ 334.013545][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 334.019561][T14416] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.034313][T14719] netlink: 'syz.3.2580': attribute type 4 has an invalid length. [ 334.043365][T14719] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2580'. [ 334.044990][T14720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2579'. [ 334.061304][T14416] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.099986][T14416] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.168663][T14719] gretap0: left allmulticast mode [ 334.173924][T14719] gretap0: left promiscuous mode [ 334.179006][T14719] bridge0: port 1(gretap0) entered disabled state [ 334.195924][T14728] ip6t_srh: unknown srh match flags 536B [ 334.198245][T14719] C: left promiscuous mode [ 334.223829][T14719] team0: Port device C removed [ 334.229773][T14719] team_slave_1: left promiscuous mode [ 334.258923][T14719] team0: Port device team_slave_1 removed [ 334.265810][T14719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.281790][T14719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.289444][T14719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.305891][T14719] bond1: (slave ip6erspan0): Releasing active interface [ 334.334618][T14719] bond4: (slave veth9): Releasing backup interface [ 334.358449][T14416] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.496407][T14403] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.536639][T14403] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.578469][T14403] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.592464][T14745] ip6t_srh: unknown srh match flags 536B [ 334.606481][T14739] syzkaller0: entered promiscuous mode [ 334.612389][T14739] syzkaller0: entered allmulticast mode [ 334.618515][T14403] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.619124][T14739] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 334.685608][T14737] xt_hashlimit: invalid interval [ 334.924888][T14416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.996583][T14416] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.015492][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.022671][ T9600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.038116][ T5833] block nbd2: Receive control failed (result -32) [ 335.102145][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.109327][ T9600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.161010][T14403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.273749][T14403] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.308349][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.315551][ T9586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.361886][ T9598] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.369043][ T9598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.760907][T14796] sock: sock_set_timeout: `syz.3.2601' (pid 14796) tries to set negative timeout [ 335.781952][T14801] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 581 [ 335.783601][T14416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.933838][T14403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.945101][T14416] veth0_vlan: entered promiscuous mode [ 335.983425][T14416] veth1_vlan: entered promiscuous mode [ 336.084120][T14416] veth0_macvtap: entered promiscuous mode [ 336.107987][T14403] veth0_vlan: entered promiscuous mode [ 336.126508][T14416] veth1_macvtap: entered promiscuous mode [ 336.162936][T14403] veth1_vlan: entered promiscuous mode [ 336.173533][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.192711][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.213743][T14416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.249286][T14416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.298347][T14416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.317674][T14416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.341422][T14416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.355279][T14416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.382372][T14403] veth0_macvtap: entered promiscuous mode [ 336.417644][T14403] veth1_macvtap: entered promiscuous mode [ 336.530256][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.544850][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.555701][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.567445][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.579454][T14403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.647380][T14403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.672954][T14403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.693329][T14403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.802150][T14403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.819313][T14403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.828228][T14403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.837809][T14403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.929112][ T9606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.974901][ T9606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.987653][T14821] netlink: 'syz.3.2607': attribute type 10 has an invalid length. [ 337.083331][T14821] team0: Device veth1_macvtap failed to register rx_handler [ 337.255601][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.286978][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.352432][T14830] veth1_to_team: entered promiscuous mode [ 337.376251][T14829] __nla_validate_parse: 13 callbacks suppressed [ 337.376269][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'. [ 337.419922][T14829] netlink: 'syz.2.2611': attribute type 8 has an invalid length. [ 337.446004][T14833] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 337.508101][T14830] veth1_to_team (unregistering): left promiscuous mode [ 337.515096][T14835] xt_hashlimit: size too large, truncated to 1048576 [ 337.576772][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2613'. [ 337.625330][ T9598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.655590][ T9598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.656069][T14841] netlink: 'syz.4.2613': attribute type 32 has an invalid length. [ 337.826511][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.861338][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.891012][T14844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2615'. [ 338.046801][ T9600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.155169][ T9600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.253494][T14833] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 338.375325][ T9600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.554788][ T9600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.712576][ T9600] bridge_slave_1: left allmulticast mode [ 338.718459][ T9600] bridge_slave_1: left promiscuous mode [ 338.726955][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.738639][ T9600] bridge_slave_0: left allmulticast mode [ 338.748453][ T9600] bridge_slave_0: left promiscuous mode [ 338.758877][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.000365][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.020908][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.029508][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.044112][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.061112][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.177871][ T9600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.188265][ T9600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.198337][ T9600] bond0 (unregistering): Released all slaves [ 339.586085][T14854] FAULT_INJECTION: forcing a failure. [ 339.586085][T14854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.639251][T14854] CPU: 1 UID: 0 PID: 14854 Comm: syz.4.2618 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 339.639276][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 339.639286][T14854] Call Trace: [ 339.639292][T14854] [ 339.639300][T14854] dump_stack_lvl+0x189/0x250 [ 339.639324][T14854] ? __lock_acquire+0xaac/0xd20 [ 339.639347][T14854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.639368][T14854] ? __pfx__printk+0x10/0x10 [ 339.639384][T14854] ? __might_fault+0xb0/0x130 [ 339.639412][T14854] should_fail_ex+0x414/0x560 [ 339.639433][T14854] _copy_from_user+0x2d/0xb0 [ 339.639454][T14854] ___sys_sendmsg+0x158/0x2a0 [ 339.639477][T14854] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.639529][T14854] ? __fget_files+0x2a/0x420 [ 339.639548][T14854] ? __fget_files+0x3a0/0x420 [ 339.639576][T14854] __x64_sys_sendmsg+0x19b/0x260 [ 339.639598][T14854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.639634][T14854] ? do_syscall_64+0xba/0x210 [ 339.639666][T14854] do_syscall_64+0xf6/0x210 [ 339.639686][T14854] ? clear_bhb_loop+0x45/0xa0 [ 339.639705][T14854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.639721][T14854] RIP: 0033:0x7f5fc638e969 [ 339.639736][T14854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.639750][T14854] RSP: 002b:00007f5fc72c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.639768][T14854] RAX: ffffffffffffffda RBX: 00007f5fc65b5fa0 RCX: 00007f5fc638e969 [ 339.639780][T14854] RDX: 0000000020008000 RSI: 0000200000002d00 RDI: 0000000000000005 [ 339.639791][T14854] RBP: 00007f5fc72c5090 R08: 0000000000000000 R09: 0000000000000000 [ 339.639801][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.639811][T14854] R13: 0000000000000000 R14: 00007f5fc65b5fa0 R15: 00007ffd3ac371f8 [ 339.639839][T14854] [ 339.849961][T14863] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2617'. [ 339.925876][T14868] ipt_REJECT: ECHOREPLY no longer supported. [ 340.061650][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2620'. [ 340.078418][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2621'. [ 340.110035][T14849] chnl_net:caif_netlink_parms(): no params data found [ 340.219898][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2620'. [ 340.237312][ T9600] hsr_slave_0: left promiscuous mode [ 340.237890][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.244993][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2620'. [ 340.255449][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.267959][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.277469][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.286186][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.294722][ T9600] hsr_slave_1: left promiscuous mode [ 340.318626][ T9600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.326536][ T9600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.335800][ T9600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.343543][ T9600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.366839][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 340.372578][ T9600] veth1_macvtap: left promiscuous mode [ 340.381568][ T9600] veth0_macvtap: left promiscuous mode [ 340.387724][ T9600] veth1_vlan: left promiscuous mode [ 340.393489][ T9600] veth0_vlan: left promiscuous mode [ 340.836990][ T9600] team0 (unregistering): Port device team_slave_1 removed [ 340.885245][ T9600] team0 (unregistering): Port device team_slave_0 removed [ 341.152689][ T55] Bluetooth: hci0: command tx timeout [ 341.407107][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2625'. [ 341.584929][T14894] x_tables: duplicate underflow at hook 1 [ 341.595307][T14849] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.654931][T14849] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.677029][T14849] bridge_slave_0: entered allmulticast mode [ 341.708429][T14849] bridge_slave_0: entered promiscuous mode [ 341.742813][T14849] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.751592][T14849] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.758800][T14849] bridge_slave_1: entered allmulticast mode [ 341.797073][T14849] bridge_slave_1: entered promiscuous mode [ 341.908329][T14849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.943188][T14849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.997325][T14911] FAULT_INJECTION: forcing a failure. [ 341.997325][T14911] name failslab, interval 1, probability 0, space 0, times 0 [ 342.010968][T14911] CPU: 0 UID: 0 PID: 14911 Comm: syz.2.2630 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 342.010991][T14911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 342.011001][T14911] Call Trace: [ 342.011007][T14911] [ 342.011015][T14911] dump_stack_lvl+0x189/0x250 [ 342.011043][T14911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.011063][T14911] ? __pfx__printk+0x10/0x10 [ 342.011085][T14911] ? __pfx___might_resched+0x10/0x10 [ 342.011104][T14911] should_fail_ex+0x414/0x560 [ 342.011122][T14911] should_failslab+0xa8/0x100 [ 342.011140][T14911] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 342.011162][T14911] ? __alloc_skb+0x112/0x2d0 [ 342.011181][T14911] __alloc_skb+0x112/0x2d0 [ 342.011202][T14911] netlink_sendmsg+0x5c6/0xb30 [ 342.011237][T14911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.011258][T14911] ? aa_sock_msg_perm+0x94/0x160 [ 342.011277][T14911] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.011295][T14911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.011312][T14911] __sock_sendmsg+0x219/0x270 [ 342.011331][T14911] ____sys_sendmsg+0x505/0x830 [ 342.011351][T14911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.011372][T14911] ? import_iovec+0x74/0xa0 [ 342.011394][T14911] ___sys_sendmsg+0x21f/0x2a0 [ 342.011416][T14911] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.011466][T14911] ? __fget_files+0x2a/0x420 [ 342.011484][T14911] ? __fget_files+0x3a0/0x420 [ 342.011510][T14911] __x64_sys_sendmsg+0x19b/0x260 [ 342.011533][T14911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.011566][T14911] ? do_syscall_64+0xba/0x210 [ 342.011588][T14911] do_syscall_64+0xf6/0x210 [ 342.011606][T14911] ? clear_bhb_loop+0x45/0xa0 [ 342.011625][T14911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.011639][T14911] RIP: 0033:0x7fdfda58e969 [ 342.011654][T14911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.011666][T14911] RSP: 002b:00007fdfdb313038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.011682][T14911] RAX: ffffffffffffffda RBX: 00007fdfda7b5fa0 RCX: 00007fdfda58e969 [ 342.011693][T14911] RDX: 0000000020008000 RSI: 0000200000002d00 RDI: 0000000000000005 [ 342.011702][T14911] RBP: 00007fdfdb313090 R08: 0000000000000000 R09: 0000000000000000 [ 342.011712][T14911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.011721][T14911] R13: 0000000000000000 R14: 00007fdfda7b5fa0 R15: 00007ffc2d497c88 [ 342.011748][T14911] [ 342.289314][T14849] team0: Port device team_slave_0 added [ 342.333879][T14849] team0: Port device team_slave_1 added [ 342.351722][ T55] Bluetooth: hci3: command tx timeout [ 342.554767][ T9596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.618072][T14849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.641405][T14849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.690177][T14938] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 342.717392][T14849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.778244][T14849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.786025][T14849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.818993][T14849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.864661][ T9596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.865029][T14947] __nla_validate_parse: 1 callbacks suppressed [ 342.865043][T14947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2641'. [ 343.082207][ T9596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.096826][T14953] netlink: 'syz.3.2645': attribute type 4 has an invalid length. [ 343.116221][T14849] hsr_slave_0: entered promiscuous mode [ 343.129589][T14849] hsr_slave_1: entered promiscuous mode [ 343.231841][ T55] Bluetooth: hci0: command tx timeout [ 343.268475][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2648'. [ 343.332451][ T9596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.431546][T14961] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 344.000282][T14879] chnl_net:caif_netlink_parms(): no params data found [ 344.160919][T14978] netlink: 'syz.2.2650': attribute type 20 has an invalid length. [ 344.246251][T14987] Bluetooth: MGMT ver 1.23 [ 344.314474][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2653'. [ 344.328693][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2653'. [ 344.431568][ T55] Bluetooth: hci3: command tx timeout [ 344.461672][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 344.489247][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 344.518381][ T9596] bridge_slave_1: left allmulticast mode [ 344.528171][ T9596] bridge_slave_1: left promiscuous mode [ 344.538572][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.553407][ T9596] bridge_slave_0: left allmulticast mode [ 344.559269][ T9596] bridge_slave_0: left promiscuous mode [ 344.565738][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.588218][T15001] netlink: 648 bytes leftover after parsing attributes in process `syz.3.2656'. [ 344.602185][T15001] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2656'. [ 344.624767][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'. [ 344.633798][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2657'. [ 345.055515][ T9596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.076857][ T9596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.090281][ T9596] bond0 (unregistering): Released all slaves [ 345.134072][T14879] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.159514][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.179847][T14879] bridge_slave_0: entered allmulticast mode [ 345.188996][T14879] bridge_slave_0: entered promiscuous mode [ 345.207178][T14879] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.219233][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.251760][T14879] bridge_slave_1: entered allmulticast mode [ 345.281469][T14879] bridge_slave_1: entered promiscuous mode [ 345.311496][ T55] Bluetooth: hci0: command tx timeout [ 345.447392][T15022] netlink: 'syz.2.2663': attribute type 11 has an invalid length. [ 345.506632][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.551137][T15022] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 345.569058][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.604619][T15026] team0: Port device vlan0 removed [ 345.617843][T15026] bond2: (slave ip6erspan0): Releasing active interface [ 345.638016][T15026] bond9: (slave gretap2): Releasing active interface [ 345.902281][T15029] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 346.094019][T14879] team0: Port device team_slave_0 added [ 346.109584][T14879] team0: Port device team_slave_1 added [ 346.159421][ T9596] hsr_slave_0: left promiscuous mode [ 346.171845][ T9596] hsr_slave_1: left promiscuous mode [ 346.182916][ T9596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.203548][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.219003][ T9596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.226829][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.249200][ T9596] veth1_macvtap: left promiscuous mode [ 346.255234][ T9596] veth0_macvtap: left promiscuous mode [ 346.265779][ T9596] veth1_vlan: left promiscuous mode [ 346.271144][ T9596] veth0_vlan: left promiscuous mode [ 346.512579][ T55] Bluetooth: hci3: command tx timeout [ 346.708395][ T9596] team0 (unregistering): Port device team_slave_1 removed [ 346.755535][ T9596] team0 (unregistering): Port device team_slave_0 removed [ 347.221252][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.228240][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.260516][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.281798][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.288783][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.322296][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.381393][T15053] FAULT_INJECTION: forcing a failure. [ 347.381393][T15053] name failslab, interval 1, probability 0, space 0, times 0 [ 347.402044][ T55] Bluetooth: hci0: command tx timeout [ 347.417756][T15053] CPU: 0 UID: 0 PID: 15053 Comm: syz.2.2671 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 347.417781][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 347.417791][T15053] Call Trace: [ 347.417798][T15053] [ 347.417807][T15053] dump_stack_lvl+0x189/0x250 [ 347.417836][T15053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.417856][T15053] ? __pfx__printk+0x10/0x10 [ 347.417876][T15053] ? __pfx___might_resched+0x10/0x10 [ 347.417891][T15053] ? fs_reclaim_acquire+0x7d/0x100 [ 347.417917][T15053] should_fail_ex+0x414/0x560 [ 347.417937][T15053] should_failslab+0xa8/0x100 [ 347.417957][T15053] __kmalloc_noprof+0xcb/0x4f0 [ 347.417973][T15053] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.417988][T15053] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 347.418011][T15053] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 347.418038][T15053] genl_family_rcv_msg_doit+0xb8/0x300 [ 347.418064][T15053] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 347.418085][T15053] ? rcu_is_watching+0x15/0xb0 [ 347.418108][T15053] ? apparmor_capable+0x137/0x1b0 [ 347.418128][T15053] ? bpf_lsm_capable+0x9/0x20 [ 347.418147][T15053] ? security_capable+0x7e/0x2e0 [ 347.418169][T15053] genl_rcv_msg+0x60e/0x790 [ 347.418194][T15053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.418213][T15053] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 347.418230][T15053] ? __pfx_nl80211_register_unexpected_frame+0x10/0x10 [ 347.418252][T15053] ? __pfx_nl80211_post_doit+0x10/0x10 [ 347.418270][T15053] ? ref_tracker_free+0x63a/0x7d0 [ 347.418287][T15053] ? __copy_skb_header+0xa7/0x550 [ 347.418314][T15053] netlink_rcv_skb+0x219/0x490 [ 347.418328][T15053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.418347][T15053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.418383][T15053] ? down_read+0x1ad/0x2e0 [ 347.418405][T15053] genl_rcv+0x28/0x40 [ 347.418423][T15053] netlink_unicast+0x758/0x8d0 [ 347.418450][T15053] netlink_sendmsg+0x805/0xb30 [ 347.418478][T15053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.418498][T15053] ? aa_sock_msg_perm+0x94/0x160 [ 347.418517][T15053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.418534][T15053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.418552][T15053] __sock_sendmsg+0x219/0x270 [ 347.418570][T15053] ____sys_sendmsg+0x505/0x830 [ 347.418597][T15053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.418626][T15053] ? import_iovec+0x74/0xa0 [ 347.418651][T15053] ___sys_sendmsg+0x21f/0x2a0 [ 347.418673][T15053] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.418736][T15053] ? __fget_files+0x2a/0x420 [ 347.418755][T15053] ? __fget_files+0x3a0/0x420 [ 347.418781][T15053] __x64_sys_sendmsg+0x19b/0x260 [ 347.418802][T15053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.418833][T15053] ? do_syscall_64+0xba/0x210 [ 347.418856][T15053] do_syscall_64+0xf6/0x210 [ 347.418874][T15053] ? clear_bhb_loop+0x45/0xa0 [ 347.418895][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.418910][T15053] RIP: 0033:0x7fdfda58e969 [ 347.418925][T15053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.418938][T15053] RSP: 002b:00007fdfdb313038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.418956][T15053] RAX: ffffffffffffffda RBX: 00007fdfda7b5fa0 RCX: 00007fdfda58e969 [ 347.418967][T15053] RDX: 0000000020008000 RSI: 0000200000002d00 RDI: 0000000000000005 [ 347.418978][T15053] RBP: 00007fdfdb313090 R08: 0000000000000000 R09: 0000000000000000 [ 347.418988][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.418998][T15053] R13: 0000000000000000 R14: 00007fdfda7b5fa0 R15: 00007ffc2d497c88 [ 347.419026][T15053] [ 347.829389][T14879] hsr_slave_0: entered promiscuous mode [ 347.836153][T14879] hsr_slave_1: entered promiscuous mode [ 347.842500][T14879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.850062][T14879] Cannot create hsr debugfs directory [ 348.058806][T15067] netlink: 'syz.4.2675': attribute type 1 has an invalid length. [ 348.072674][T15067] __nla_validate_parse: 5 callbacks suppressed [ 348.072692][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 348.481742][T14849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.591345][ T55] Bluetooth: hci3: command tx timeout [ 348.623668][T14849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.638490][T14849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.675937][T14849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.959895][T14849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.025647][T14849] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.040160][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.047333][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.074163][T15102] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 349.091700][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.098894][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.288924][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'. [ 349.335252][T14849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.392810][T15113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.435251][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 349.448258][T14879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.499371][T14879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.566368][T14879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.588493][T14879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.670900][T15127] x_tables: duplicate underflow at hook 3 [ 349.809190][T14849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.870793][T14879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.919757][T14879] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.950470][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.957700][ T9600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.989749][ T9586] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.996977][ T9586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.088276][T14849] veth0_vlan: entered promiscuous mode [ 350.138781][T14849] veth1_vlan: entered promiscuous mode [ 350.249617][T14849] veth0_macvtap: entered promiscuous mode [ 350.269221][T15140] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2695'. [ 350.292977][T14849] veth1_macvtap: entered promiscuous mode [ 350.425866][T14849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.449891][T14849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.483087][T14849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.520538][T14849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.568084][T14849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.586017][T14849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.598738][T14849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.608583][T14849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.698103][T14879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.725987][T15158] sit2: entered promiscuous mode [ 350.731066][T15158] sit2: entered allmulticast mode [ 350.747002][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2699'. [ 350.784888][T15158] netlink: 'syz.2.2699': attribute type 2 has an invalid length. [ 350.812970][T15158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2699'. [ 350.852692][ T9600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.861130][ T9600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.956899][T14879] veth0_vlan: entered promiscuous mode [ 350.983441][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.014621][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.024591][T14879] veth1_vlan: entered promiscuous mode [ 351.033127][T15138] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 351.130516][T14879] veth0_macvtap: entered promiscuous mode [ 351.183890][T14879] veth1_macvtap: entered promiscuous mode [ 351.343549][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.363011][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.381092][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.407455][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.419665][T14879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.455251][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.469189][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.492151][T14879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.507411][T15187] netlink: 'syz.3.2707': attribute type 11 has an invalid length. [ 351.512181][T14879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.524319][T14879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.530941][T15187] netlink: 'syz.3.2707': attribute type 11 has an invalid length. [ 351.543273][T15187] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2707'. [ 351.556362][T14879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.571561][T14879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.720993][ T9596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.736099][ T9596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.792484][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.821261][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.035672][T15200] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 352.076063][T15200] netlink: 'syz.2.2711': attribute type 7 has an invalid length. [ 352.144526][ T9606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.279081][ T9606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.617524][ T9606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.703163][ T9606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.882008][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.890729][ T9606] bridge_slave_1: left allmulticast mode [ 352.895205][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.901499][ T9606] bridge_slave_1: left promiscuous mode [ 352.908014][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.909044][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.926410][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.935964][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.936145][ T9606] bridge_slave_0: left allmulticast mode [ 352.959105][ T9606] bridge_slave_0: left promiscuous mode [ 352.965667][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.277455][ T9606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.289460][ T9606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.299733][ T9606] bond0 (unregistering): Released all slaves [ 353.707672][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2712'. [ 353.976294][T15220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2716'. [ 354.034616][T15223] 8021q: adding VLAN 0 to HW filter on device bond12 [ 354.148230][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.172665][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.189011][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.217303][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.239505][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.267941][T15223] bond12 (unregistering): Released all slaves [ 354.401139][ T9606] hsr_slave_0: left promiscuous mode [ 354.409799][ T9606] hsr_slave_1: left promiscuous mode [ 354.424954][ T9606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.433967][ T9606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.442180][ T9606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.449634][ T9606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.475809][ T9606] veth1_macvtap: left promiscuous mode [ 354.482337][ T9606] veth0_macvtap: left promiscuous mode [ 354.488176][ T9606] veth1_vlan: left promiscuous mode [ 354.493922][ T9606] veth0_vlan: left promiscuous mode [ 354.981144][ T9606] team0 (unregistering): Port device team_slave_1 removed [ 354.992700][ T55] Bluetooth: hci0: command tx timeout [ 355.062402][ T9606] team0 (unregistering): Port device team_slave_0 removed [ 355.590124][T15202] chnl_net:caif_netlink_parms(): no params data found [ 355.902880][T15264] netlink: 'syz.4.2726': attribute type 58 has an invalid length. [ 355.912291][T15264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2726'. [ 355.930420][T15202] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.951864][T15202] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.959172][T15202] bridge_slave_0: entered allmulticast mode [ 355.963631][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2726'. [ 355.987063][T15202] bridge_slave_0: entered promiscuous mode [ 356.053735][T15202] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.074252][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 356.083517][T15267] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2727'. [ 356.092953][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 356.097886][T15202] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.113680][T15202] bridge_slave_1: entered allmulticast mode [ 356.122072][T15202] bridge_slave_1: entered promiscuous mode [ 356.129997][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 356.159790][T15267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2727'. [ 356.196434][T15202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.227727][T15202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.272296][ T55] Bluetooth: hci3: command tx timeout [ 356.305480][T15202] team0: Port device team_slave_0 added [ 356.355665][ T9606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.397659][T15202] team0: Port device team_slave_1 added [ 356.449511][T15202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.456585][T15202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.485562][T15202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.514565][ T9606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.528859][T15202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.540022][T15202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.570338][T15202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.610685][ T9606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.697384][ T9606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.721396][T15202] hsr_slave_0: entered promiscuous mode [ 356.728477][T15202] hsr_slave_1: entered promiscuous mode [ 356.879648][T15230] chnl_net:caif_netlink_parms(): no params data found [ 357.002796][ T9606] bridge_slave_1: left allmulticast mode [ 357.011290][ T9606] bridge_slave_1: left promiscuous mode [ 357.017174][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.032650][ T9606] bridge_slave_0: left allmulticast mode [ 357.041986][ T9606] bridge_slave_0: left promiscuous mode [ 357.047805][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.069224][T15282] netlink: 'syz.4.2731': attribute type 18 has an invalid length. [ 357.078578][ T55] Bluetooth: hci0: command tx timeout [ 357.084591][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'. [ 357.462965][ T9606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.474201][ T9606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.484427][ T9606] bond0 (unregistering): Released all slaves [ 357.527328][T15282] ------------[ cut here ]------------ [ 357.534161][T15282] WARNING: CPU: 1 PID: 15282 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 357.545265][T15282] Modules linked in: [ 357.549551][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.4.2731 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 357.563048][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 357.573920][T15282] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 357.580118][T15282] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 8f f2 f6 90 0f 0b 90 eb e1 e8 17 8f f2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 357.601242][T15282] RSP: 0018:ffffc90003cfefc8 EFLAGS: 00010287 [ 357.607355][T15282] RAX: ffffffff8acd4139 RBX: ffff888043198000 RCX: 0000000000080000 [ 357.616183][T15282] RDX: ffffc9000c78a000 RSI: 0000000000007127 RDI: 0000000000007128 [ 357.624644][T15282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.632982][T15282] R10: 0000000000000000 R11: ffffffff8acd3c53 R12: 1ffff1100863300a [ 357.640986][T15282] R13: ffff88805afe8e40 R14: 0000000000000001 R15: ffffffff8acd3c53 [ 357.649276][T15282] FS: 00007f5fc72c56c0(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 357.659084][T15282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.666245][T15282] CR2: 0000000000000000 CR3: 0000000033296000 CR4: 00000000003526f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 357.674791][T15282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.683590][T15282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.692366][T15282] Call Trace: [ 357.695694][T15282] [ 357.698652][T15282] rate_control_rate_init_all_links+0x109/0x1a0 [ 357.705225][T15282] sta_apply_auth_flags+0x1c2/0x400 [ 357.710473][T15282] sta_apply_parameters+0xde1/0x14e0 [ 357.717220][T15282] ieee80211_add_station+0x424/0x6a0 [ 357.723320][T15282] rdev_add_station+0x105/0x290 [ 357.728220][T15282] nl80211_new_station+0x16b6/0x1ab0 [ 357.734353][T15282] ? __pfx_nl80211_new_station+0x10/0x10 [ 357.740104][T15282] ? netdev_run_todo+0xe1d/0xea0 [ 357.745892][T15282] ? nl80211_pre_doit+0x4f1/0x930 [ 357.750953][T15282] genl_family_rcv_msg_doit+0x212/0x300 [ 357.757168][T15282] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 357.763814][T15282] ? bpf_lsm_capable+0x9/0x20 [ 357.768530][T15282] ? security_capable+0x7e/0x2e0 [ 357.774282][T15282] genl_rcv_msg+0x60e/0x790 [ 357.778829][T15282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.784439][T15282] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 357.789852][T15282] ? __pfx_nl80211_new_station+0x10/0x10 [ 357.796309][T15282] ? __pfx_nl80211_post_doit+0x10/0x10 [ 357.802724][T15282] ? ref_tracker_free+0x63a/0x7d0 [ 357.807793][T15282] ? __copy_skb_header+0xa7/0x550 [ 357.813394][T15282] netlink_rcv_skb+0x219/0x490 [ 357.818179][T15282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.823747][T15282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.829098][T15282] ? down_read+0x1ad/0x2e0 [ 357.834360][T15282] genl_rcv+0x28/0x40 [ 357.838374][T15282] netlink_unicast+0x758/0x8d0 [ 357.843760][T15282] netlink_sendmsg+0x805/0xb30 [ 357.848566][T15282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.854423][T15282] ? aa_sock_msg_perm+0x94/0x160 [ 357.859394][T15282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.865470][T15282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.870806][T15282] __sock_sendmsg+0x219/0x270 [ 357.876637][T15282] ____sys_sendmsg+0x505/0x830 [ 357.881883][T15282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.887200][T15282] ? import_iovec+0x74/0xa0 [ 357.892044][T15282] ___sys_sendmsg+0x21f/0x2a0 [ 357.896981][T15282] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.902536][T15282] ? __fget_files+0x2a/0x420 [ 357.907151][T15282] ? __fget_files+0x3a0/0x420 [ 357.912385][T15282] __x64_sys_sendmsg+0x19b/0x260 [ 357.917355][T15282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.923658][T15282] ? do_syscall_64+0xba/0x210 [ 357.928365][T15282] do_syscall_64+0xf6/0x210 [ 357.933475][T15282] ? clear_bhb_loop+0x45/0xa0 [ 357.938180][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.944917][T15282] RIP: 0033:0x7f5fc638e969 [ 357.949366][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.969797][T15282] RSP: 002b:00007f5fc72c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.978810][T15282] RAX: ffffffffffffffda RBX: 00007f5fc65b5fa0 RCX: 00007f5fc638e969 [ 357.987357][T15282] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000c [ 357.996175][T15282] RBP: 00007f5fc6410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 358.004974][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.013743][T15282] R13: 0000000000000000 R14: 00007f5fc65b5fa0 R15: 00007ffd3ac371f8 [ 358.022560][T15282] [ 358.025641][T15282] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.032947][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.4.2731 Not tainted 6.15.0-rc5-syzkaller-00126-gea9a83d7f371 #0 PREEMPT(full) [ 358.045020][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 358.055090][T15282] Call Trace: [ 358.058383][T15282] [ 358.061322][T15282] dump_stack_lvl+0x99/0x250 [ 358.065936][T15282] ? __asan_memcpy+0x40/0x70 [ 358.070542][T15282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.075756][T15282] ? __pfx__printk+0x10/0x10 [ 358.080377][T15282] panic+0x2db/0x790 [ 358.084297][T15282] ? __pfx_panic+0x10/0x10 [ 358.088722][T15282] ? show_trace_log_lvl+0x4fb/0x550 [ 358.093956][T15282] __warn+0x31b/0x4b0 [ 358.097954][T15282] ? rate_control_rate_init+0x64a/0x6e0 [ 358.103521][T15282] ? rate_control_rate_init+0x64a/0x6e0 [ 358.109097][T15282] report_bug+0x2be/0x4f0 [ 358.113437][T15282] ? rate_control_rate_init+0x64a/0x6e0 [ 358.119000][T15282] ? rate_control_rate_init+0x64a/0x6e0 [ 358.124532][T15282] ? rate_control_rate_init+0x64c/0x6e0 [ 358.130062][T15282] handle_bug+0x84/0x160 [ 358.134304][T15282] exc_invalid_op+0x1a/0x50 [ 358.138811][T15282] asm_exc_invalid_op+0x1a/0x20 [ 358.143660][T15282] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 358.149905][T15282] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 8f f2 f6 90 0f 0b 90 eb e1 e8 17 8f f2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 358.169699][T15282] RSP: 0018:ffffc90003cfefc8 EFLAGS: 00010287 [ 358.175875][T15282] RAX: ffffffff8acd4139 RBX: ffff888043198000 RCX: 0000000000080000 [ 358.183869][T15282] RDX: ffffc9000c78a000 RSI: 0000000000007127 RDI: 0000000000007128 [ 358.191926][T15282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.199977][T15282] R10: 0000000000000000 R11: ffffffff8acd3c53 R12: 1ffff1100863300a [ 358.207944][T15282] R13: ffff88805afe8e40 R14: 0000000000000001 R15: ffffffff8acd3c53 [ 358.215921][T15282] ? rate_control_rate_init+0x163/0x6e0 [ 358.221473][T15282] ? rate_control_rate_init+0x163/0x6e0 [ 358.227019][T15282] ? rate_control_rate_init+0x649/0x6e0 [ 358.232570][T15282] ? rate_control_rate_init+0x649/0x6e0 [ 358.238117][T15282] rate_control_rate_init_all_links+0x109/0x1a0 [ 358.244395][T15282] sta_apply_auth_flags+0x1c2/0x400 [ 358.249592][T15282] sta_apply_parameters+0xde1/0x14e0 [ 358.254901][T15282] ieee80211_add_station+0x424/0x6a0 [ 358.260189][T15282] rdev_add_station+0x105/0x290 [ 358.265043][T15282] nl80211_new_station+0x16b6/0x1ab0 [ 358.270339][T15282] ? __pfx_nl80211_new_station+0x10/0x10 [ 358.276052][T15282] ? netdev_run_todo+0xe1d/0xea0 [ 358.281009][T15282] ? nl80211_pre_doit+0x4f1/0x930 [ 358.286053][T15282] genl_family_rcv_msg_doit+0x212/0x300 [ 358.291624][T15282] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 358.297708][T15282] ? bpf_lsm_capable+0x9/0x20 [ 358.302398][T15282] ? security_capable+0x7e/0x2e0 [ 358.307349][T15282] genl_rcv_msg+0x60e/0x790 [ 358.311855][T15282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.316874][T15282] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 358.322240][T15282] ? __pfx_nl80211_new_station+0x10/0x10 [ 358.327866][T15282] ? __pfx_nl80211_post_doit+0x10/0x10 [ 358.333324][T15282] ? ref_tracker_free+0x63a/0x7d0 [ 358.338343][T15282] ? __copy_skb_header+0xa7/0x550 [ 358.343376][T15282] netlink_rcv_skb+0x219/0x490 [ 358.348171][T15282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.353193][T15282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.358501][T15282] ? down_read+0x1ad/0x2e0 [ 358.362924][T15282] genl_rcv+0x28/0x40 [ 358.366911][T15282] netlink_unicast+0x758/0x8d0 [ 358.371678][T15282] netlink_sendmsg+0x805/0xb30 [ 358.376443][T15282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.381725][T15282] ? aa_sock_msg_perm+0x94/0x160 [ 358.386664][T15282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.391947][T15282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.397319][T15282] __sock_sendmsg+0x219/0x270 [ 358.402079][T15282] ____sys_sendmsg+0x505/0x830 [ 358.406845][T15282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.412396][T15282] ? import_iovec+0x74/0xa0 [ 358.416924][T15282] ___sys_sendmsg+0x21f/0x2a0 [ 358.421603][T15282] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.426829][T15282] ? __fget_files+0x2a/0x420 [ 358.431425][T15282] ? __fget_files+0x3a0/0x420 [ 358.436111][T15282] __x64_sys_sendmsg+0x19b/0x260 [ 358.441050][T15282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.446518][T15282] ? do_syscall_64+0xba/0x210 [ 358.451280][T15282] do_syscall_64+0xf6/0x210 [ 358.455788][T15282] ? clear_bhb_loop+0x45/0xa0 [ 358.460463][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.466353][T15282] RIP: 0033:0x7f5fc638e969 [ 358.470779][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.490485][T15282] RSP: 002b:00007f5fc72c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.498902][T15282] RAX: ffffffffffffffda RBX: 00007f5fc65b5fa0 RCX: 00007f5fc638e969 [ 358.506869][T15282] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000c [ 358.514840][T15282] RBP: 00007f5fc6410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 358.522893][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.530862][T15282] R13: 0000000000000000 R14: 00007f5fc65b5fa0 R15: 00007ffd3ac371f8 [ 358.538867][T15282] [ 358.542404][T15282] Kernel Offset: disabled [ 358.546852][T15282] Rebooting in 86400 seconds..