last executing test programs: 2.498664472s ago: executing program 3 (id=453): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'vlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 2.243176314s ago: executing program 0 (id=459): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001200977b00"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000000008000000000018000100000800825f30d237ee"], 0x64}}, 0x0) 2.201830353s ago: executing program 3 (id=460): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8901, &(0x7f0000000440)={r2}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0xf, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x8}, {&(0x7f0000000140)=""/9, 0x10062}, {&(0x7f0000000300)=""/225, 0x5b}, {&(0x7f0000000400)=""/28, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000000)=""/35, 0xffffffffffffffe0}}], 0x2, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000c00000018000180140002006d6163767461703000000000000000000c000380040003"], 0x38}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9f66}) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, 0x0, 0x0, 0x4}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x12) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f00000002c0)={'wg1\x00', {0x2, 0x0, @broadcast}}) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="c575c4bb4c4985e3daf82db4e8c5838ff3e2f0cf368a43e17ec862e4739814e69a17457a4f24995fdb3c316aa475b20159b330bca641c34b73bff352b864822fd45103e40eccef6222d3a9afd07dce4964afd2720ef071af4647c6987d27853a5166e322db429fd7dfed1217bb272c62a10922f37245cafe2f844601bb267948ca481d4327", @ANYRES16=r12, @ANYBLOB="020025bd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x20c0}, 0x1000) setsockopt$IP_VS_SO_SET_DEL(r11, 0x0, 0x48f, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'ovf\x00'}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r4, 0x0) 2.041714721s ago: executing program 0 (id=463): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000440)={0x2, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x18}}], 0x1, 0x0) 1.762437335s ago: executing program 0 (id=465): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1d3a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000400)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x60, &(0x7f0000000640)={&(0x7f0000000100)={0x34, 0x0, 0x809, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) 1.581400986s ago: executing program 1 (id=468): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x0, @link_local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) 1.446550345s ago: executing program 2 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 1.403634219s ago: executing program 1 (id=471): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.246551576s ago: executing program 2 (id=473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@local, {0x2, 0x0, 0x0, 0x1}, {}, {}, 0x70bd26, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 1.246298768s ago: executing program 1 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0001003f000b000044851ea6000000030000000c00020005000000000000000c00d579e81b93734c210292ab42a6c3dca6fae249af18d00861c830258b8795565d26c82d6c0bdeb2110bcb26712dc988f7f6fd310a6c31fc16c696e3f30191f0f96b3a7692fd53467151ec3a80cbeddb9a6bcb2736a44256d7cafa2001304105a88fdf8b4a30101a7a279eab51fd0b54b05193f0355aa6b82a634ca6bcf7a4467f238cc73b7723fe4da50a410f33103627aa63d68aba5e5a03cea5b41d54023e441497b0eb17419126c0c25378cf33e3"], 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000b000000080000000600000f020000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0200000017600000000000000000612e00"/135], &(0x7f0000000600)=""/4, 0x87, 0x4, 0x1}, 0x20) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_l2cap(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x20, 0x0, 0x0, 0x1, 0xa, 0x0, 0xa0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0xfffffffffffffff8}, 0x4}, {{@in=@multicast2, 0x4d5, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x62, 0x0, 0x0, 0xacb7}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="1780c2000000aaaaaaaaaaaa8100000086dd60b3388300103a0020010000000000000000000000000002fe8000000000000000000000000000aa"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff01a959f1d3af8aab4a457b869a1f1c69b70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="b40800000000000073112000000000008510000002000000b7000000000000009500c200000000009500001200000000e753b7e711d398f1d5dbdece896b2c35f697e24f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r4 = epoll_create(0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r6, 0x0, 0x7}, 0x38) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r7, @ANYBLOB="000828bd7000ffdbdf250c0000003400028006000f0008000000080005000500000006000e004e230000080008000000000005000d000000000006000b000200000008000500000400003800018008000b007369700014000300fc0000000000000000000000000000010800050003000000060001000200000008210800400000003c0001800800050002000000060004004e2400000c00070018000000be87de7c14000300e0000002000000000000000000000000060001000a000000"], 0xc4}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24008010) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x90) 1.08405789s ago: executing program 2 (id=476): pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, ','}], 0xa, "c6f9fef54a7294e5a46d8c4592321733d119ab00db5fbf7d6b71c7fce0a7f99b44923ab09aef2c174de2fd5fcbe995b56f78693323f7463a168568bdc07babf6f6f628c654e561e32e84a4cf7f1c7c390fd32f109ae2f55161fa42cc6a08b33ae1d0e372ff6b41642a5ad84608b9b6d09417cc2bdbb3185d85e3810a113777f32d93a09b4886a16c9c1fee5dbaf9"}, 0x9b) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800, 0x0) 1.082128381s ago: executing program 3 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000380)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x8, @local, 0x80000000}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xfffffffd}]}, &(0x7f0000000400)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800"/15], &(0x7f0000000440)='GPL\x00'}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000600)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000180)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 976.656499ms ago: executing program 4 (id=478): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101}, [@snprintf={{}, {}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x0}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x90) 909.39714ms ago: executing program 1 (id=479): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000006240)={0x14, r3, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x58, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x49}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x61b6}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) 908.693832ms ago: executing program 2 (id=480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0) 842.034082ms ago: executing program 4 (id=481): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 766.823601ms ago: executing program 0 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x7, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 710.593887ms ago: executing program 2 (id=483): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}}, 0x0) 659.009245ms ago: executing program 4 (id=484): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 536.658889ms ago: executing program 4 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000004000140000000000900010073797a30"], 0xdc}}, 0x0) 522.124875ms ago: executing program 2 (id=486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={r3, 0x0, 0x0}, &(0x7f0000000400)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000600)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000180)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 457.671619ms ago: executing program 0 (id=487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 417.916288ms ago: executing program 3 (id=488): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_ACT={0x4}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 351.441289ms ago: executing program 4 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0001003f000b000044851ea6000000030000000c00020005000000000000000c00d579e81b93734c210292ab42a6c3dca6fae249af18d00861c830258b8795565d26c82d6c0bdeb2110bcb26712dc988f7f6fd310a6c31fc16c696e3f30191f0f96b3a7692fd53467151ec3a80cbeddb9a6bcb2736a44256d7cafa2001304105a88fdf8b4a30101a7a279eab51fd0b54b05193f0355aa6b82a634ca6bcf7a4467f238cc73b7723fe4da50a410f33103627aa63d68aba5e5a03cea5b41d54023e441497b0eb17419126c0c25378cf33e3"], 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000b000000080000000600000f020000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0200000017600000000000000000612e00"/135], &(0x7f0000000600)=""/4, 0x87, 0x4, 0x1}, 0x20) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_l2cap(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x20, 0x0, 0x0, 0x1, 0xa, 0x0, 0xa0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0xfffffffffffffff8}, 0x4}, {{@in=@multicast2, 0x4d5, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x62, 0x0, 0x0, 0xacb7}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="1780c2000000aaaaaaaaaaaa8100000086dd60b3388300103a0020010000000000000000000000000002fe8000000000000000000000000000aa"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff01a959f1d3af8aab4a457b869a1f1c69b70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="b40800000000000073112000000000008510000002000000b7000000000000009500c200000000009500001200000000e753b7e711d398f1d5dbdece896b2c35f697e24f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r3 = epoll_create(0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r5, 0x0, 0x7}, 0x38) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="000828bd7000ffdbdf250c0000003400028006000f0008000000080005000500000006000e004e230000080008000000000005000d000000000006000b000200000008000500000400003800018008000b007369700014000300fc0000000000000000000000000000010800050003000000060001000200000008210800400000003c0001800800050002000000060004004e2400000c00070018000000be87de7c14000300e0000002000000000000000000000000060001000a000000"], 0xc4}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24008010) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x90) 267.79942ms ago: executing program 1 (id=490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="6000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002c0012800c0001006d6163766c616e001c000280080009000000000008000109020000000800030000000000140035006d6163766c616e3000"], 0x60}}, 0x0) 218.638328ms ago: executing program 3 (id=491): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x2, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 218.516343ms ago: executing program 0 (id=492): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002025252700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 79.473038ms ago: executing program 4 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0x80}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "31171e44b2b50e8f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfc, 0x0, 0xff, 0x0, 0x2, "ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685400600366e8338397d6abc25347799ac708b06d2ffdb10e1376a4f6d4ab994912616e8ba5eb7c19e9795658578feb8f3cce47f43a42919c288f7978312dd970e6c629d7cd799c5e08b64de41458eb8951a08000000a810ffffff5c087d15d9d3bae1c089701f970f8e7ce8cabe52e849ba4533e4a34222f07959e7cdcfcb270000000000000000e54e588f88a7b5c35a62c0ceaa0e90b29c3edc16f20db3d7d69470d7232de07ccd7d0900000000000000abe9baba499721311e1597853a2d0c7e1e64f827d31e69daa900", 0x2, "c900c08ac1d7b6060000e8ffffffffffffff00"}}]}, 0x154}}, 0x0) 78.657612ms ago: executing program 1 (id=494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f00000006c0)=@framed={{0x18, 0x2}, [@printk={@lli}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 0s ago: executing program 3 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x24, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 52.443618][ T5213] cgroup: Unknown subsys name 'net' [ 52.609857][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.935303][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.185755][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.205232][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.219544][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.226989][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.236265][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.243416][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.251821][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.259480][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.260180][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.267226][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.281539][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.290094][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.290181][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.304904][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.305934][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.319515][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.319869][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.334329][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.334563][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.343615][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.350681][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.355296][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.364319][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.374365][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.385541][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.395033][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.404248][ T4619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.411317][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.418800][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.430760][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.830402][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 56.972044][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 57.061640][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 57.111240][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.118579][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.126778][ T5225] bridge_slave_0: entered allmulticast mode [ 57.133864][ T5225] bridge_slave_0: entered promiscuous mode [ 57.208349][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.215851][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.223357][ T5225] bridge_slave_1: entered allmulticast mode [ 57.230062][ T5225] bridge_slave_1: entered promiscuous mode [ 57.245692][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.252935][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.260037][ T5239] bridge_slave_0: entered allmulticast mode [ 57.267030][ T5239] bridge_slave_0: entered promiscuous mode [ 57.279585][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.286989][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.294306][ T5239] bridge_slave_1: entered allmulticast mode [ 57.301566][ T5239] bridge_slave_1: entered promiscuous mode [ 57.326502][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 57.396834][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.409773][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.423317][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.474412][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.481667][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.489369][ T5227] bridge_slave_0: entered allmulticast mode [ 57.497378][ T5227] bridge_slave_0: entered promiscuous mode [ 57.506556][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.526921][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 57.574939][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.582026][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.590807][ T5227] bridge_slave_1: entered allmulticast mode [ 57.597773][ T5227] bridge_slave_1: entered promiscuous mode [ 57.627832][ T5239] team0: Port device team_slave_0 added [ 57.636998][ T5225] team0: Port device team_slave_0 added [ 57.646033][ T5225] team0: Port device team_slave_1 added [ 57.693443][ T5239] team0: Port device team_slave_1 added [ 57.732196][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.771139][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.778266][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.805140][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.817472][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.826968][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.834501][ T5223] bridge_slave_0: entered allmulticast mode [ 57.841177][ T5223] bridge_slave_0: entered promiscuous mode [ 57.850510][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.870471][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.877561][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.903753][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.921417][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.928456][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.954373][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.972372][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.979489][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.987319][ T5223] bridge_slave_1: entered allmulticast mode [ 57.994212][ T5223] bridge_slave_1: entered promiscuous mode [ 58.029452][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.037282][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.065059][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.126479][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.133944][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.141068][ T5230] bridge_slave_0: entered allmulticast mode [ 58.148868][ T5230] bridge_slave_0: entered promiscuous mode [ 58.157171][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.165219][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.172533][ T5230] bridge_slave_1: entered allmulticast mode [ 58.179252][ T5230] bridge_slave_1: entered promiscuous mode [ 58.197640][ T5239] hsr_slave_0: entered promiscuous mode [ 58.204354][ T5239] hsr_slave_1: entered promiscuous mode [ 58.213487][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.225979][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.237192][ T5227] team0: Port device team_slave_0 added [ 58.310034][ T5227] team0: Port device team_slave_1 added [ 58.330144][ T5225] hsr_slave_0: entered promiscuous mode [ 58.336870][ T5225] hsr_slave_1: entered promiscuous mode [ 58.343857][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.351679][ T5225] Cannot create hsr debugfs directory [ 58.371138][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.383985][ T5223] team0: Port device team_slave_0 added [ 58.401747][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.408960][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.422830][ T55] Bluetooth: hci1: command tx timeout [ 58.435218][ T5234] Bluetooth: hci0: command tx timeout [ 58.446751][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.466021][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.486016][ T5223] team0: Port device team_slave_1 added [ 58.492429][ T5234] Bluetooth: hci3: command tx timeout [ 58.492448][ T55] Bluetooth: hci4: command tx timeout [ 58.492708][ T55] Bluetooth: hci2: command tx timeout [ 58.517390][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.524854][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.550982][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.617563][ T5230] team0: Port device team_slave_0 added [ 58.627377][ T5230] team0: Port device team_slave_1 added [ 58.682922][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.689884][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.715955][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.728736][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.735866][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.761821][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.782154][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.789363][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.815712][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.864131][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.871106][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.897592][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.920813][ T5227] hsr_slave_0: entered promiscuous mode [ 58.927461][ T5227] hsr_slave_1: entered promiscuous mode [ 58.934916][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.942544][ T5227] Cannot create hsr debugfs directory [ 59.045324][ T5223] hsr_slave_0: entered promiscuous mode [ 59.052616][ T5223] hsr_slave_1: entered promiscuous mode [ 59.058686][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.066540][ T5223] Cannot create hsr debugfs directory [ 59.155269][ T5230] hsr_slave_0: entered promiscuous mode [ 59.161544][ T5230] hsr_slave_1: entered promiscuous mode [ 59.168805][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.176515][ T5230] Cannot create hsr debugfs directory [ 59.344996][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.359222][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.394606][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.404185][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.549440][ T5239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.564986][ T5239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.589333][ T5239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.607910][ T5239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.655695][ T5227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.670339][ T5227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.681205][ T5227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.697168][ T5227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.789258][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.802835][ T5223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.813990][ T5223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.830785][ T5223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.854175][ T5223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.900003][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.950788][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.958168][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.976529][ T5230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.987616][ T5230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.000101][ T5230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.024162][ T5230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.039333][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.046485][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.111453][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.170619][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.257701][ T2530] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.264846][ T2530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.298162][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.313318][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.339563][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.346741][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.391193][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.405685][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.450317][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.457622][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.490687][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.492912][ T55] Bluetooth: hci1: command tx timeout [ 60.498247][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.510938][ T55] Bluetooth: hci0: command tx timeout [ 60.549452][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.559215][ T2530] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.566410][ T2530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.579098][ T55] Bluetooth: hci2: command tx timeout [ 60.584767][ T55] Bluetooth: hci3: command tx timeout [ 60.586364][ T5233] Bluetooth: hci4: command tx timeout [ 60.593396][ T2530] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.602814][ T2530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.748518][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.799376][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.806539][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.846418][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.860056][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.867214][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.987762][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.181995][ T5225] veth0_vlan: entered promiscuous mode [ 61.235846][ T5225] veth1_vlan: entered promiscuous mode [ 61.308435][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.340211][ T5225] veth0_macvtap: entered promiscuous mode [ 61.351708][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.386240][ T5225] veth1_macvtap: entered promiscuous mode [ 61.509158][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.521339][ T5227] veth0_vlan: entered promiscuous mode [ 61.538602][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.553608][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.568740][ T5223] veth0_vlan: entered promiscuous mode [ 61.586591][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.595874][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.605715][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.616202][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.639658][ T5227] veth1_vlan: entered promiscuous mode [ 61.655954][ T5223] veth1_vlan: entered promiscuous mode [ 61.762153][ T5239] veth0_vlan: entered promiscuous mode [ 61.801693][ T5230] veth0_vlan: entered promiscuous mode [ 61.815217][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.830254][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.839650][ T5223] veth0_macvtap: entered promiscuous mode [ 61.851301][ T5227] veth0_macvtap: entered promiscuous mode [ 61.876732][ T5223] veth1_macvtap: entered promiscuous mode [ 61.884905][ T5239] veth1_vlan: entered promiscuous mode [ 61.906444][ T5227] veth1_macvtap: entered promiscuous mode [ 61.935025][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.937613][ T5230] veth1_vlan: entered promiscuous mode [ 61.948682][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.981598][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.999466][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.011526][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.038915][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.056148][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.066987][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.077712][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.096644][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.108795][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.119326][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.130513][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.169271][ T5223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.192834][ T5223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.201566][ T5223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.228474][ T5223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.246017][ T5239] veth0_macvtap: entered promiscuous mode [ 62.267160][ T5310] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.281745][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.294759][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.304805][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.318547][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.329900][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.369390][ T5239] veth1_macvtap: entered promiscuous mode [ 62.385198][ T5227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.399689][ T5227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.410280][ T5227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.419941][ T5227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.444934][ T5230] veth0_macvtap: entered promiscuous mode [ 62.458297][ T5310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 62.468037][ T5310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 62.487031][ T5230] veth1_macvtap: entered promiscuous mode [ 62.516977][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.528006][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.546807][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.557669][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.567717][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.574023][ T5233] Bluetooth: hci0: command tx timeout [ 62.578403][ T5234] Bluetooth: hci1: command tx timeout [ 62.588358][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.601041][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.609915][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.624132][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.641240][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.657300][ T5234] Bluetooth: hci3: command tx timeout [ 62.657910][ T5233] Bluetooth: hci2: command tx timeout [ 62.663007][ T5234] Bluetooth: hci4: command tx timeout [ 62.673849][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.684631][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.695172][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.705327][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.715959][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.727402][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.756996][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.766005][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.779362][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.788453][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.809509][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.820511][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.833231][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.843917][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.853996][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.864599][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.874503][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.886691][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.899762][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.910858][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.921776][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.932053][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.942953][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.953360][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.963906][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.974389][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.984936][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.998775][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.016144][ T5230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.024988][ T5230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.033922][ T5230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.043369][ T5230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.084706][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.099162][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.118048][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.130068][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.259078][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.293155][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.369974][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.394705][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.528413][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.570286][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.634803][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.643314][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 63.672098][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.883083][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.908271][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.070868][ T5325] syzkaller0: refused to change device tx_queue_len [ 64.234084][ T5335] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(204314967551670) <= P.seqno(0) <= S.SWH(204314967551744)) and (P.ackno exists or LAWL(110651876939061) <= P.ackno(110651876939065) <= S.AWH(110651876939065), sending SYNC... [ 64.436994][ T5342] netlink: 'syz.1.8': attribute type 2 has an invalid length. [ 64.522916][ T5342] Bluetooth: MGMT ver 1.23 [ 64.530114][ T5344] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 64.652973][ T5234] Bluetooth: hci1: command tx timeout [ 64.653337][ T5233] Bluetooth: hci0: command tx timeout [ 64.693345][ T5345] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 64.733417][ T5233] Bluetooth: hci2: command tx timeout [ 64.735857][ T5234] Bluetooth: hci4: command tx timeout [ 64.738912][ T55] Bluetooth: hci3: command tx timeout [ 64.804853][ T5352] erspan0: entered promiscuous mode [ 64.812152][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 64.845827][ T5351] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 64.855204][ T5351] team0: Port device batadv1 added [ 64.861043][ T5352] warning: `syz.1.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.000151][ T5351] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.231517][ T5367] netlink: 'syz.4.14': attribute type 1 has an invalid length. [ 65.280774][ T5367] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14'. [ 65.754532][ T5378] Bluetooth: MGMT ver 1.23 [ 65.912104][ T5385] netlink: 'syz.1.18': attribute type 4 has an invalid length. [ 65.998288][ T5385] tipc: Failed to remove unknown binding: 66,1,1/0:1745762777/1745762779 [ 66.015354][ T5385] tipc: Failed to remove unknown binding: 66,1,1/0:1745762777/1745762779 [ 66.126099][ T5393] netlink: 'syz.3.19': attribute type 25 has an invalid length. [ 66.173375][ T5393] netlink: 'syz.3.19': attribute type 7 has an invalid length. [ 66.245945][ T5391] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.19'. [ 66.629063][ T5405] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 66.648801][ T5405] syzkaller1: entered promiscuous mode [ 66.660534][ T5405] syzkaller1: entered allmulticast mode [ 66.765988][ T5409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25'. [ 67.143956][ T11] wlan1: Trigger new scan to find an IBSS to join [ 67.214038][ T5420] SET target dimension over the limit! [ 67.346622][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 67.985169][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 68.112668][ T5446] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 68.309179][ T5453] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 68.441308][ T5453] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 68.995160][ T5469] netlink: 'syz.3.41': attribute type 11 has an invalid length. [ 69.021387][ T5475] netlink: 44 bytes leftover after parsing attributes in process `syz.4.42'. [ 69.311111][ T5481] Cannot find add_set index 0 as target [ 69.706559][ T5493] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.48'. [ 69.747870][ T5493] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 69.769396][ T5493] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 69.813533][ T5499] netlink: 14569 bytes leftover after parsing attributes in process `syz.3.50'. [ 70.042399][ T5506] tipc: Started in network mode [ 70.055482][ T5506] tipc: Node identity 5a0ca3e4cdb9, cluster identity 4711 [ 70.075590][ T5506] tipc: Enabled bearer , priority 0 [ 70.091711][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 70.118237][ T11] wlan1: Trigger new scan to find an IBSS to join [ 70.141912][ T5510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.55'. [ 70.154110][ T5511] Zero length message leads to an empty skb [ 70.222001][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 70.325627][ T11] wlan1: Trigger new scan to find an IBSS to join [ 70.396641][ T5516] netlink: 'syz.1.57': attribute type 21 has an invalid length. [ 70.419044][ T5516] netlink: 'syz.1.57': attribute type 6 has an invalid length. [ 70.428128][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 70.436556][ T5516] netlink: 156 bytes leftover after parsing attributes in process `syz.1.57'. [ 70.527524][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 70.631143][ T12] wlan1: Trigger new scan to find an IBSS to join [ 70.690113][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 70.727187][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 70.745110][ T11] wlan1: Trigger new scan to find an IBSS to join [ 70.760275][ T5519] macvlan0: entered promiscuous mode [ 70.774898][ T5519] batadv_slave_0: entered promiscuous mode [ 70.836344][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 70.939591][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 70.955380][ T5538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'. [ 71.060283][ T5543] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 71.061419][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 71.118876][ T5543] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 71.133138][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 71.148778][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 71.149094][ T5543] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 71.193720][ T4643] tipc: Node number set to 2545263588 [ 71.249891][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 71.348655][ T11] wlan1: Trigger new scan to find an IBSS to join [ 71.429106][ T5554] netlink: 'syz.2.68': attribute type 25 has an invalid length. [ 71.446326][ T5554] netlink: 'syz.2.68': attribute type 7 has an invalid length. [ 71.463937][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 71.552439][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 71.618112][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.660248][ T11] wlan1: Trigger new scan to find an IBSS to join [ 71.726650][ T5559] xt_NFQUEUE: number of total queues is 0 [ 71.758987][ T11] wlan1: Trigger new scan to find an IBSS to join [ 71.809065][ T5561] raw_sendmsg: syz.1.70 forgot to set AF_INET. Fix it! [ 71.859891][ T35] wlan1: Trigger new scan to find an IBSS to join [ 71.964045][ T11] wlan1: Trigger new scan to find an IBSS to join [ 72.154958][ T5569] IPVS: length: 215 != 24 [ 72.189629][ T2570] wlan1: Trigger new scan to find an IBSS to join [ 72.279937][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 72.370712][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 72.473845][ T53] wlan1: Trigger new scan to find an IBSS to join [ 72.575598][ T53] wlan1: Trigger new scan to find an IBSS to join [ 72.611145][ T5584] team0: Port device team_slave_0 removed [ 72.686182][ T2530] wlan1: Trigger new scan to find an IBSS to join [ 73.011763][ T5600] __nla_validate_parse: 7 callbacks suppressed [ 73.011780][ T5600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 73.023099][ T5603] netlink: 644 bytes leftover after parsing attributes in process `syz.2.81'. [ 73.046227][ T5605] netlink: 'syz.1.80': attribute type 25 has an invalid length. [ 73.076363][ T5605] netlink: 'syz.1.80': attribute type 7 has an invalid length. [ 73.109608][ T5600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.82'. [ 73.147814][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 73.159286][ T2530] wlan1: Creating new IBSS network, BSSID f6:99:77:24:06:a6 [ 73.193853][ T5605] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.80'. [ 73.553362][ T5625] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 73.569803][ T5625] lo: entered promiscuous mode [ 73.672088][ T5630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.88'. [ 74.013556][ T5636] team0: Port device team_slave_0 removed [ 74.149418][ T5647] x_tables: ip_tables: ah match: only valid for protocol 51 [ 74.233819][ T5650] netlink: 232 bytes leftover after parsing attributes in process `syz.3.92'. [ 74.340744][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 74.412915][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 74.440066][ T5653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.492041][ T5653] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 74.870937][ T5657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.027867][ T5662] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 75.096865][ T5662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.98'. [ 75.122278][ T5662] netlink: 88 bytes leftover after parsing attributes in process `syz.4.98'. [ 75.716664][ T5657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.746861][ T52] cfg80211: failed to load regulatory.db [ 76.911984][ T5701] IPVS: length: 53 != 8 [ 76.992688][ T5701] vlan1: entered promiscuous mode [ 77.128041][ T5701] vlan1 (unregistering): left promiscuous mode [ 77.279369][ T5710] syzkaller1: entered promiscuous mode [ 77.302458][ T5710] syzkaller1: entered allmulticast mode [ 77.489767][ T5717] team0: entered promiscuous mode [ 77.520108][ T5717] team_slave_0: entered promiscuous mode [ 77.553801][ T5717] team_slave_1: entered promiscuous mode [ 78.172670][ T5715] team0: left promiscuous mode [ 78.180134][ T5715] team_slave_0: left promiscuous mode [ 78.195750][ T5715] team_slave_1: left promiscuous mode [ 78.323590][ T5730] __nla_validate_parse: 2 callbacks suppressed [ 78.323608][ T5730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'. [ 78.416072][ T5730] validate_nla: 1 callbacks suppressed [ 78.416091][ T5730] netlink: 'syz.0.117': attribute type 3 has an invalid length. [ 78.546569][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 78.679607][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 78.955314][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 79.099371][ T5757] netlink: 68 bytes leftover after parsing attributes in process `syz.2.123'. [ 79.600013][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 79.810764][ T5779] Illegal XDP return value 4294967274 on prog (id 29) dev lo, expect packet loss! [ 80.172348][ T5233] Bluetooth: hci0: command tx timeout [ 80.243992][ T5789] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 80.421375][ T5797] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.519699][ T5787] netlink: 88 bytes leftover after parsing attributes in process `syz.1.130'. [ 80.536920][ T5792] pim6reg: entered allmulticast mode [ 80.640593][ T5788] pim6reg: left allmulticast mode [ 80.642741][ T5800] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.134'. [ 80.769314][ T5803] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 80.958247][ T5814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.138'. [ 81.059646][ T5817] smc: net device lo applied user defined pnetid SYZ2 [ 81.092589][ T5817] smc: net device lo erased user defined pnetid SYZ2 [ 81.228003][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 81.302652][ T5830] vlan1: entered promiscuous mode [ 81.457484][ T5830] vlan1 (unregistering): left promiscuous mode [ 81.657095][ T5846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.409773][ T5872] tap0: tun_chr_ioctl cmd 1074812118 [ 82.554481][ T5875] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 82.733492][ T5888] bridge0: entered promiscuous mode [ 83.286980][ T5919] SET target dimension over the limit! [ 83.453004][ T5922] __nla_validate_parse: 4 callbacks suppressed [ 83.453021][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 83.454141][ T5878] bridge0: left promiscuous mode [ 84.640277][ T5976] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.179'. [ 84.729833][ T5981] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 84.816424][ T5984] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.180'. [ 84.884243][ T5978] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.180'. [ 85.200344][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.187'. [ 85.251769][ T5997] tipc: Started in network mode [ 85.276794][ T5997] tipc: Node identity ac1414aa, cluster identity 4711 [ 85.308182][ T5997] tipc: Enabled bearer , priority 10 [ 85.346943][ T5997] tipc: Disabling bearer [ 85.467787][ T6019] netlink: 'syz.1.184': attribute type 29 has an invalid length. [ 85.517981][ T6019] netlink: 'syz.1.184': attribute type 29 has an invalid length. [ 85.587677][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 85.615539][ T6025] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 85.637388][ T6025] netlink: 224 bytes leftover after parsing attributes in process `syz.2.191'. [ 85.669289][ T6023] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 85.689696][ T6019] netlink: 'syz.1.184': attribute type 29 has an invalid length. [ 86.389233][ T6060] netlink: 'syz.3.196': attribute type 5 has an invalid length. [ 86.427318][ T6051] batadv_slave_0: mtu less than device minimum [ 86.527287][ T6066] sctp: [Deprecated]: syz.0.195 (pid 6066) Use of int in maxseg socket option. [ 86.527287][ T6066] Use struct sctp_assoc_value instead [ 86.888553][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 87.187030][ T6086] team0: Port device team_slave_0 removed [ 87.200509][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.203'. [ 87.598514][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 88.418300][ T6134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.501036][ T6134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.529879][ T6134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.095872][ T6184] netlink: 'syz.2.230': attribute type 10 has an invalid length. [ 90.181755][ T6184] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 90.277495][ T6200] __nla_validate_parse: 1 callbacks suppressed [ 90.277516][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 90.353086][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 90.541867][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.239'. [ 92.058607][ T6243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.247'. [ 92.485145][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 92.720898][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 92.760662][ T6279] netlink: 40 bytes leftover after parsing attributes in process `syz.4.255'. [ 92.845764][ T6282] netlink: 'syz.4.255': attribute type 5 has an invalid length. [ 92.932350][ T6287] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 92.986092][ T6287] team0: Port device netdevsim0 added [ 93.016882][ T6287] netlink: 'syz.3.258': attribute type 1 has an invalid length. [ 93.044860][ T6291] netem: incorrect ge model size [ 93.046486][ T6287] netlink: 616 bytes leftover after parsing attributes in process `syz.3.258'. [ 93.061450][ T6291] netem: change failed [ 93.134508][ T6293] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 93.209334][ T6293] team0: Port device netdevsim0 removed [ 93.211907][ T6268] infiniband syz1: set active [ 93.226209][ T6268] infiniband syz1: added bond0 [ 93.251682][ T6268] syz1: rxe_create_cq: returned err = -12 [ 93.272608][ T6268] infiniband syz1: Couldn't create ib_mad CQ [ 93.290933][ T6268] infiniband syz1: Couldn't open port 1 [ 93.421023][ T6268] RDS/IB: syz1: added [ 93.439314][ T6268] smc: adding ib device syz1 with port count 1 [ 93.468283][ T6268] smc: ib device syz1 port 1 has pnetid [ 93.583333][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 93.625447][ T6305] bridge_slave_1: left allmulticast mode [ 93.657310][ T6305] bridge_slave_1: left promiscuous mode [ 93.687012][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.778399][ T6305] bridge_slave_0: left allmulticast mode [ 93.798644][ T6305] bridge_slave_0: left promiscuous mode [ 93.824703][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.367395][ T6328] netlink: 52 bytes leftover after parsing attributes in process `syz.1.265'. [ 94.929175][ T6316] siw: device registration error -23 [ 95.097432][ T6342] gretap0: entered promiscuous mode [ 95.461156][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.271'. [ 95.490781][ T6361] No such timeout policy "syz0" [ 95.649675][ T6362] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 95.681445][ T6362] gretap1: entered promiscuous mode [ 95.690329][ T6362] gretap1: entered allmulticast mode [ 95.870857][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'. [ 95.886794][ T6369] netlink: 44 bytes leftover after parsing attributes in process `syz.1.277'. [ 96.277533][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 96.286501][ T6382] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 96.554037][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 96.575073][ T6391] bond0: entered promiscuous mode [ 96.580205][ T6391] bond_slave_0: entered promiscuous mode [ 96.586198][ T6391] bond_slave_1: entered promiscuous mode [ 96.592153][ T6391] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 96.801556][ T6397] tipc: Enabled bearer , priority 10 [ 96.856442][ T6397] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 96.877230][ T6401] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 96.924498][ T6397] bond1: entered promiscuous mode [ 96.962400][ T6397] lo: entered promiscuous mode [ 97.009601][ T6397] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.053858][ T6397] bond1: (slave lo): making interface the new active one [ 97.074696][ T6397] bond1: (slave lo): Enslaving as an active interface with an up link [ 97.111618][ T6410] team0: Port device team_slave_0 removed [ 97.251309][ T6420] erspan0: entered promiscuous mode [ 97.265359][ T6420] erspan0: left promiscuous mode [ 97.882069][ T6434] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.296'. [ 98.104130][ T6447] netlink: 52 bytes leftover after parsing attributes in process `syz.1.298'. [ 98.158199][ T6438] pim6reg: entered allmulticast mode [ 98.219900][ T6454] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 98.307597][ T6454] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.395478][ T6454] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.463790][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 99.077758][ T6492] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 99.188702][ T6493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.309'. [ 99.191608][ T6499] netlink: 60 bytes leftover after parsing attributes in process `syz.1.310'. [ 99.216595][ T6492] pimreg: entered allmulticast mode [ 99.344565][ T6503] dvmrp5: entered allmulticast mode [ 99.483603][ T6492] pimreg: left allmulticast mode [ 99.488923][ T6492] dvmrp5: left allmulticast mode [ 100.401743][ T6547] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 100.736977][ T5233] Bluetooth: hci2: command tx timeout [ 100.927385][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.533032][ T6608] __nla_validate_parse: 5 callbacks suppressed [ 101.533050][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 101.615988][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 101.654194][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 101.929435][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 102.009175][ T6634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.016376][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 102.229235][ T6649] ip6tnl0: entered promiscuous mode [ 102.636505][ T6660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.337'. [ 102.738874][ T6624] ip6tnl0: left promiscuous mode [ 103.003786][ T6674] netlink: 208 bytes leftover after parsing attributes in process `syz.0.338'. [ 103.153895][ T6681] netlink: 'syz.1.341': attribute type 13 has an invalid length. [ 103.161669][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 103.220423][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 103.260629][ T6692] bridge_slave_1: left allmulticast mode [ 103.287522][ T6692] bridge_slave_1: left promiscuous mode [ 103.342802][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.402986][ T6692] bridge_slave_0: left allmulticast mode [ 103.435026][ T6692] bridge_slave_0: left promiscuous mode [ 103.451786][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.669484][ T6711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.345'. [ 104.309812][ T6735] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 104.420699][ T6735] bond1: entered promiscuous mode [ 104.453515][ T52] IPVS: starting estimator thread 0... [ 104.506994][ T6743] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 104.552665][ T6746] IPVS: using max 23 ests per chain, 55200 per kthread [ 104.626515][ T6743] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.646048][ T6743] bond0: (slave team0): Enslaving as an active interface with an up link [ 104.780558][ T6743] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 104.811423][ T6743] bond0: (slave team0): Releasing backup interface [ 104.834020][ T6743] bridge0: port 3(team0) entered blocking state [ 104.845997][ T6743] bridge0: port 3(team0) entered disabled state [ 104.862667][ T6743] team0: entered allmulticast mode [ 104.867816][ T6743] team_slave_1: entered allmulticast mode [ 104.885477][ T6743] team0: entered promiscuous mode [ 104.907399][ T6743] team_slave_1: entered promiscuous mode [ 104.925435][ T6764] ip6tnl0: Master is either lo or non-ether device [ 105.428859][ C1] Unknown status report in ack skb [ 105.643973][ T6791] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 105.822577][ T6792] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 106.023243][ T6804] wireguard0: entered promiscuous mode [ 106.070027][ T6804] wireguard0: entered allmulticast mode [ 106.238770][ T6825] netlink: 'syz.3.374': attribute type 29 has an invalid length. [ 106.274568][ T6825] netlink: 'syz.3.374': attribute type 29 has an invalid length. [ 107.258352][ T6865] netlink: 'syz.2.383': attribute type 1 has an invalid length. [ 107.298829][ T6865] __nla_validate_parse: 9 callbacks suppressed [ 107.298846][ T6865] netlink: 112848 bytes leftover after parsing attributes in process `syz.2.383'. [ 107.314827][ T6865] netlink: 'syz.2.383': attribute type 1 has an invalid length. [ 107.329008][ T6865] bond0: option miimon: invalid value (18446744073072082944) [ 107.347192][ T6865] bond0: option miimon: allowed values 0 - 2147483647 [ 107.363700][ T6870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.444401][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 107.458306][ T6877] GUP no longer grows the stack in syz.4.387 (6877): 20006000-20008000 (20005000) [ 107.502757][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.4.387 Not tainted 6.11.0-rc3-syzkaller-00488-gaf3dc0ad3167 #0 [ 107.513409][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 107.523478][ T6877] Call Trace: [ 107.526751][ T6877] [ 107.529673][ T6877] dump_stack_lvl+0x241/0x360 [ 107.534400][ T6877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.539588][ T6877] ? __pfx__printk+0x10/0x10 [ 107.544173][ T6877] ? find_vma+0xf9/0x170 [ 107.548415][ T6877] ? vma_is_secretmem+0xd/0x50 [ 107.553171][ T6877] ? check_vma_flags+0x531/0x5a0 [ 107.558108][ T6877] __get_user_pages+0x114d/0x16a0 [ 107.563155][ T6877] ? __pfx___get_user_pages+0x10/0x10 [ 107.568528][ T6877] ? __pfx_lock_acquire+0x10/0x10 [ 107.573560][ T6877] __gup_longterm_locked+0x3ba/0x17d0 [ 107.578950][ T6877] pin_user_pages+0x137/0x1f0 [ 107.583629][ T6877] ? __pfx_pin_user_pages+0x10/0x10 [ 107.588823][ T6877] ? __kmalloc_node_noprof+0x247/0x440 [ 107.594281][ T6877] xdp_umem_create+0x978/0xf30 [ 107.599056][ T6877] xsk_setsockopt+0x732/0x950 [ 107.603735][ T6877] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.608932][ T6877] ? aa_sock_opt_perm+0x79/0x120 [ 107.613874][ T6877] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 107.619419][ T6877] ? security_socket_setsockopt+0x87/0xb0 [ 107.625144][ T6877] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.630344][ T6877] do_sock_setsockopt+0x3af/0x720 [ 107.635369][ T6877] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 107.640922][ T6877] __sys_setsockopt+0x1ae/0x250 [ 107.645774][ T6877] __x64_sys_setsockopt+0xb5/0xd0 [ 107.650814][ T6877] do_syscall_64+0xf3/0x230 [ 107.655318][ T6877] ? clear_bhb_loop+0x35/0x90 [ 107.659993][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.665893][ T6877] RIP: 0033:0x7f6224779e79 [ 107.670309][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.689915][ T6877] RSP: 002b:00007f62255b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.698333][ T6877] RAX: ffffffffffffffda RBX: 00007f6224916058 RCX: 00007f6224779e79 [ 107.706311][ T6877] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000a [ 107.714272][ T6877] RBP: 00007f62247e7916 R08: 0000000000000020 R09: 0000000000000000 [ 107.722245][ T6877] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 107.730210][ T6877] R13: 0000000000000000 R14: 00007f6224916058 R15: 00007ffe2a1dd8e8 [ 107.738185][ T6877] [ 107.940034][ T6883] netlink: 'syz.0.390': attribute type 21 has an invalid length. [ 107.956526][ T6883] netlink: 156 bytes leftover after parsing attributes in process `syz.0.390'. [ 108.053982][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 109.158401][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.405'. [ 109.245963][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 109.400629][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.409'. [ 109.443032][ T6948] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 109.830532][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 109.975291][ T6972] gretap0: entered promiscuous mode [ 112.019046][ T7064] vlan1: entered promiscuous mode [ 112.124697][ T7064] vlan1 (unregistering): left promiscuous mode [ 112.801339][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'. [ 113.056503][ T7115] netlink: 68 bytes leftover after parsing attributes in process `syz.4.469'. [ 113.769140][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'. [ 113.903853][ T7149] netlink: 'syz.0.482': attribute type 7 has an invalid length. [ 113.935111][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 114.038911][ T7156] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 114.443127][ T7176] bond1: Unknown bonding mode 6 for xdp xmit [ 114.449705][ T7176] ------------[ cut here ]------------ [ 114.455237][ T7176] WARNING: CPU: 0 PID: 7176 at drivers/net/bonding/bond_main.c:5499 bond_xdp_get_xmit_slave+0x519/0x690 [ 114.466417][ T7176] Modules linked in: [ 114.470337][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.0.492 Not tainted 6.11.0-rc3-syzkaller-00488-gaf3dc0ad3167 #0 [ 114.481015][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.491137][ T7176] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 114.497458][ T7176] Code: be 66 13 00 00 48 c7 c2 a0 2f 96 8c e8 c0 ca 14 fb eb 98 e8 09 25 38 fb 4c 89 e7 48 c7 c6 a0 50 96 8c 89 da e8 58 df 5a 05 90 <0f> 0b 90 eb a6 e8 ed 24 38 fb 48 85 db 74 0a e8 e3 24 38 fb e9 72 [ 114.517226][ T7176] RSP: 0018:ffffc9001725f848 EFLAGS: 00010246 [ 114.523362][ T7176] RAX: f9e75d38887e3300 RBX: 0000000000000006 RCX: f9e75d38887e3300 [ 114.531359][ T7176] RDX: ffffc90009c6a000 RSI: 0000000000002908 RDI: 0000000000002909 [ 114.539401][ T7176] RBP: ffffc9001725fc60 R08: ffffffff8174024c R09: 1ffff92002e4be84 [ 114.547433][ T7176] R10: dffffc0000000000 R11: fffff52002e4be85 R12: ffff888011b38000 [ 114.555483][ T7176] R13: ffff888011b38000 R14: ffff888011b38cc0 R15: dffffc0000000000 [ 114.563511][ T7176] FS: 00007fd9379e36c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 114.572516][ T7176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.579214][ T7176] CR2: 0000001b3241dff8 CR3: 000000007d1f8000 CR4: 00000000003506f0 [ 114.587258][ T7176] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.595287][ T7176] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.603509][ T7176] Call Trace: [ 114.606811][ T7176] [ 114.609772][ T7176] ? __warn+0x163/0x4e0 [ 114.613998][ T7176] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 114.619654][ T7176] ? report_bug+0x2b3/0x500 [ 114.624232][ T7176] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 114.629889][ T7176] ? handle_bug+0x3e/0x70 [ 114.634287][ T7176] ? exc_invalid_op+0x1a/0x50 [ 114.638973][ T7176] ? asm_exc_invalid_op+0x1a/0x20 [ 114.644061][ T7176] ? __wake_up_klogd+0xcc/0x110 [ 114.648937][ T7176] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 114.654645][ T7176] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 114.660299][ T7176] xdp_master_redirect+0x143/0x2d0 [ 114.665493][ T7176] bpf_test_run+0x8cf/0xa90 [ 114.670035][ T7176] ? bpf_test_run+0x370/0xa90 [ 114.674796][ T7176] ? __pfx_bpf_test_run+0x10/0x10 [ 114.679889][ T7176] ? _copy_from_user+0xa6/0xe0 [ 114.684737][ T7176] ? bpf_test_init+0x15a/0x180 [ 114.689526][ T7176] ? xdp_convert_md_to_buff+0x5b/0x330 [ 114.695035][ T7176] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 114.700434][ T7176] ? __pfx_lock_release+0x10/0x10 [ 114.705543][ T7176] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.711367][ T7176] ? __fget_files+0x29/0x470 [ 114.716041][ T7176] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.721866][ T7176] bpf_prog_test_run+0x33a/0x3b0 [ 114.726883][ T7176] __sys_bpf+0x48d/0x810 [ 114.731152][ T7176] ? __pfx___sys_bpf+0x10/0x10 [ 114.735996][ T7176] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.742012][ T7176] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.748418][ T7176] ? do_syscall_64+0x100/0x230 [ 114.753242][ T7176] __x64_sys_bpf+0x7c/0x90 [ 114.757680][ T7176] do_syscall_64+0xf3/0x230 [ 114.762253][ T7176] ? clear_bhb_loop+0x35/0x90 [ 114.766959][ T7176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.772924][ T7176] RIP: 0033:0x7fd936b79e79 [ 114.777357][ T7176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.797039][ T7176] RSP: 002b:00007fd9379e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.805514][ T7176] RAX: ffffffffffffffda RBX: 00007fd936d15f80 RCX: 00007fd936b79e79 [ 114.813559][ T7176] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 114.821558][ T7176] RBP: 00007fd936be7916 R08: 0000000000000000 R09: 0000000000000000 [ 114.829609][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.837645][ T7176] R13: 0000000000000000 R14: 00007fd936d15f80 R15: 00007ffcab44ac68 [ 114.845714][ T7176] [ 114.848768][ T7176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 114.856055][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.0.492 Not tainted 6.11.0-rc3-syzkaller-00488-gaf3dc0ad3167 #0 [ 114.866654][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.876711][ T7176] Call Trace: [ 114.879997][ T7176] [ 114.882923][ T7176] dump_stack_lvl+0x241/0x360 [ 114.887608][ T7176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.892826][ T7176] ? __pfx__printk+0x10/0x10 [ 114.897415][ T7176] ? vscnprintf+0x5d/0x90 [ 114.901742][ T7176] panic+0x349/0x860 [ 114.905628][ T7176] ? __warn+0x172/0x4e0 [ 114.909775][ T7176] ? __pfx_panic+0x10/0x10 [ 114.914200][ T7176] __warn+0x346/0x4e0 [ 114.918173][ T7176] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 114.923801][ T7176] report_bug+0x2b3/0x500 [ 114.928136][ T7176] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 114.933762][ T7176] handle_bug+0x3e/0x70 [ 114.937910][ T7176] exc_invalid_op+0x1a/0x50 [ 114.942409][ T7176] asm_exc_invalid_op+0x1a/0x20 [ 114.947252][ T7176] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 114.953482][ T7176] Code: be 66 13 00 00 48 c7 c2 a0 2f 96 8c e8 c0 ca 14 fb eb 98 e8 09 25 38 fb 4c 89 e7 48 c7 c6 a0 50 96 8c 89 da e8 58 df 5a 05 90 <0f> 0b 90 eb a6 e8 ed 24 38 fb 48 85 db 74 0a e8 e3 24 38 fb e9 72 [ 114.973080][ T7176] RSP: 0018:ffffc9001725f848 EFLAGS: 00010246 [ 114.979142][ T7176] RAX: f9e75d38887e3300 RBX: 0000000000000006 RCX: f9e75d38887e3300 [ 114.987101][ T7176] RDX: ffffc90009c6a000 RSI: 0000000000002908 RDI: 0000000000002909 [ 114.995062][ T7176] RBP: ffffc9001725fc60 R08: ffffffff8174024c R09: 1ffff92002e4be84 [ 115.003024][ T7176] R10: dffffc0000000000 R11: fffff52002e4be85 R12: ffff888011b38000 [ 115.010983][ T7176] R13: ffff888011b38000 R14: ffff888011b38cc0 R15: dffffc0000000000 [ 115.018951][ T7176] ? __wake_up_klogd+0xcc/0x110 [ 115.023806][ T7176] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 115.029433][ T7176] xdp_master_redirect+0x143/0x2d0 [ 115.034555][ T7176] bpf_test_run+0x8cf/0xa90 [ 115.039066][ T7176] ? bpf_test_run+0x370/0xa90 [ 115.043767][ T7176] ? __pfx_bpf_test_run+0x10/0x10 [ 115.048805][ T7176] ? _copy_from_user+0xa6/0xe0 [ 115.053567][ T7176] ? bpf_test_init+0x15a/0x180 [ 115.058356][ T7176] ? xdp_convert_md_to_buff+0x5b/0x330 [ 115.063820][ T7176] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 115.069201][ T7176] ? __pfx_lock_release+0x10/0x10 [ 115.074240][ T7176] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 115.080044][ T7176] ? __fget_files+0x29/0x470 [ 115.084643][ T7176] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 115.090528][ T7176] bpf_prog_test_run+0x33a/0x3b0 [ 115.095487][ T7176] __sys_bpf+0x48d/0x810 [ 115.099746][ T7176] ? __pfx___sys_bpf+0x10/0x10 [ 115.104617][ T7176] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.110713][ T7176] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.117064][ T7176] ? do_syscall_64+0x100/0x230 [ 115.121836][ T7176] __x64_sys_bpf+0x7c/0x90 [ 115.126249][ T7176] do_syscall_64+0xf3/0x230 [ 115.130762][ T7176] ? clear_bhb_loop+0x35/0x90 [ 115.135441][ T7176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.141333][ T7176] RIP: 0033:0x7fd936b79e79 [ 115.145748][ T7176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.165379][ T7176] RSP: 002b:00007fd9379e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.173879][ T7176] RAX: ffffffffffffffda RBX: 00007fd936d15f80 RCX: 00007fd936b79e79 [ 115.181849][ T7176] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 115.189826][ T7176] RBP: 00007fd936be7916 R08: 0000000000000000 R09: 0000000000000000 [ 115.197798][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.205763][ T7176] R13: 0000000000000000 R14: 00007fd936d15f80 R15: 00007ffcab44ac68 [ 115.213743][ T7176] [ 115.217011][ T7176] Kernel Offset: disabled [ 115.221330][ T7176] Rebooting in 86400 seconds..